{
    "ok": true,
    "slug": "fidelity.com-2026-03-31",
    "stats": {
        "subs": 11056,
        "all": 11056,
        "resolved": 6248,
        "live": 153,
        "takeover": 75,
        "juicy": 215,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/fidelity.com-2026-03-31",
    "takeover_candidates": [
        "ap131672-qaad-poc2-e.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-6b16jcb79c.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "ap131672-widb-poc2-e.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-qkr4huthg7.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "apigpxq1east2.aw139.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32medge-proxy-xq1-preprod-nlb-d2d7d7a7755fd5f7.elb.us-east-2.amazonaws.com\u001b[0m]",
        "aws-persistence-ci.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-7izvzr0sxd.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "aws-persistence-dev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "cloud.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhomepagelb-2131199720.us-east-1.elb.amazonaws.com\u001b[0m]",
        "connect-brunodev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-oidd4b2uqa.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "connect-ci.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-8jdnnq2x44.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "connect-dannydev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-5q36drox7d.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "connect-dev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "connect-devecall.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-d4fu09cb7l.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "connect-jit.aps.aw014.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-ach6kykdp8.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "connect-justindev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-72mku9ly3l.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "connect-qa.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-lkcmk0hc3l.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "connect-sandbox.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-km5fpc7e60.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "cpalerting.aw001.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-f3t3fjl0a8.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "cpalertingprod.aw030.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-etfr5dmjtb.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dap-proxy-plus-custdev.aps.aw098.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-ffo52hv3sa.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dap-proxy-plus-custuat.aps.aw098.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-oltuedtxp0.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dap-proxy-plus-dev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-jwlg2buypj.execute-api.us-east-2.amazonaws.com\u001b[0m]",
        "dap-proxy-plus-dit.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-twsexf29al.execute-api.us-east-2.amazonaws.com\u001b[0m]",
        "dap-proxy-plus-perf.aps.aw014.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-zrf0ylb6ik.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dap-proxy-plus-prod.aps.aw015.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-jru8quyz6c.execute-api.us-east-2.amazonaws.com\u001b[0m]",
        "dap-proxy-plus-qa.aps.aw014.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-ekgoxzwswh.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "ddalerting.aw001.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-qqkoc9k1f8.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "ddalertingprod.aw030.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-kg6jh73qu8.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dev-persistence.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "email.workspaceexperience.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "enotify-nonprod.aps.aw014.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-wci9hdzdaa.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "formsbuilder-demo.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev01.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev02.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev03.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev04.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev05.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev06.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev07.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev08.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-dev09.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-nonprod.aps.aw014.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-0135910fe60d76ac8-gka6sgsk.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-prod.aps.aw015.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-05e8c314571b8d251-gwacel3j.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "formsbuilder-sit.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "fpsxqwaf.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xztxnqzz5mmg.cloudfront.net\u001b[0m]",
        "html-converter-brunodev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "html-converter-dannydev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-bgfzsg904e.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "html-converter-dev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "html-converter-devecall.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-if8v6j9ho9.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "html-converter-nonprod.aps.aw014.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-0135910fe60d76ac8-gka6sgsk.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "html-converter-prod.aps.aw015.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-05e8c314571b8d251-gwacel3j.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "html-converter-qa.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "lb-1708438650.us-east-1.elb.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-1708438650.us-east-1.elb.amazonaws.com\u001b[0m]",
        "loginxqwaf.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xkkuhhmhltqx.cloudfront.net\u001b[0m]",
        "nonprod-persistence.aps.aw014.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-0135910fe60d76ac8-gka6sgsk.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "prod-persistence.aps.aw015.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-05e8c314571b8d251-gwacel3j.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "ptl.demo.aetf-npd.us-east-1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnpd-aetf-demo-ptl-ptal-alb-415120658.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ptl.fidelity.aetf-npd.us-east-1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnpd-aetf-fidelity-ptl-ptal-alb-2015390809.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ptl.fidelity.aetf-npd.us-east-2.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnpd-aetf-fidelity-ptl-ptal-alb-2093786954.us-east-2.elb.amazonaws.com\u001b[0m]",
        "ptl.fidelity.aetf-prd.us-east-1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-aetf-fidelity-ptl-ptal-alb-1082548040.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ptl.fidelity.aetf-prd.us-east-2.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-aetf-fidelity-ptl-ptal-alb-1080575149.us-east-2.elb.amazonaws.com\u001b[0m]",
        "ptl.invesco.aetf-npd.us-east-2.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnpd-aetf-invesco-ptl-ptal-alb-1383369405.us-east-2.elb.amazonaws.com\u001b[0m]",
        "ptl.jhancock.aetf-npd.us-east-1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnpd-aetf-jhancock-ptl-ptal-alb-847558348.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ptl.jhancock.aetf-prd.us-east-1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-aetf-jhancock-ptl-ptal-alb-399747689.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ptl.jhancock.aetf-prd.us-east-2.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-aetf-jhancock-ptl-ptal-alb-984258177.us-east-2.elb.amazonaws.com\u001b[0m]",
        "ptl.putnam.aetf-npd.us-east-1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnpd-aetf-putnam-ptl-ptal-alb-1294827369.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ptl.putnam.aetf-prd.us-east-1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-aetf-putnam-ptl-ptal-alb-1460628538.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ptl.putnam.aetf-prd.us-east-2.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-aetf-putnam-ptl-ptal-alb-1285912631.us-east-2.elb.amazonaws.com\u001b[0m]",
        "qa-persistence.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-080668229073739aa-sqqsjki8.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "spservice-e1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2kpodgnp6fuh9.cloudfront.net\u001b[0m]",
        "spservice-e2.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md10qke2cd5wz78.cloudfront.net\u001b[0m]",
        "spservicexq1-e1.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md288lk2bh1er7w.cloudfront.net\u001b[0m]",
        "spservicexq1-e2.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1oieoycbusdj.cloudfront.net\u001b[0m]",
        "sso-dev.aps.aw008.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-m9px6xhntl.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "sso-nonprod.aps.aw014.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-l5rq2gv57d.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "sso.aps.aw015.c.fidelity.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-5qw6svww27.execute-api.us-east-1.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "fidelity.com",
        "version": 4,
        "generated_at": "2026-03-31T13:33:08.975Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 4,
            "kept_strict": 0,
            "llm_review_pool": 4,
            "dropped_noise": 4,
            "deep_skipped_below_pool": 0
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "spservice-e1.fidelity.com",
                "cname": "d2kpodgnp6fuh9.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404, có thể là endpoint backend chưa cấu hình. Tuy nhiên, CloudFront thường được quản lý chặt, khả năng claim thấp.",
                "llm_labeled_at": "2026-03-31T13:33:19.814Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "spservice-e2.fidelity.com",
                "cname": "d10qke2cd5wz78.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự host khác, CNAME CloudFront với 404. Khả năng là môi trường staging\/test chưa triển khai, không dễ bị takeover.",
                "llm_labeled_at": "2026-03-31T13:33:19.814Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "spservicexq1-e1.fidelity.com",
                "cname": "d288lk2bh1er7w.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Cấu hình giống các host khác, lỗi 404. Điểm claim thấp, có thể là subdomain dự phòng hoặc chưa dùng, nhưng không dễ claim.",
                "llm_labeled_at": "2026-03-31T13:33:19.814Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "spservicexq1-e2.fidelity.com",
                "cname": "d1oieoycbusdj.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CloudFront 404, pattern nhất quán với các host khác. Khả năng là cấu hình an toàn, không phải false positive nhưng cũng không thể claim.",
                "llm_labeled_at": "2026-03-31T13:33:19.814Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "spservice-e1.fidelity.com",
                "spservice-e2.fidelity.com",
                "spservicexq1-e1.fidelity.com",
                "spservicexq1-e2.fidelity.com"
            ],
            "batch_sources": [
                "pool",
                "pool",
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-31T13:33:19.814Z",
            "usage": {
                "prompt_tokens": 734,
                "completion_tokens": 345,
                "total_tokens": 1079,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 606
            }
        }
    }
}