{
    "ok": true,
    "slug": "greenhouse.io-2026-03-24",
    "stats": {
        "subs": 353,
        "all": 353,
        "resolved": 237,
        "live": 227,
        "takeover": 30,
        "juicy": 41,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 4,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/greenhouse.io-2026-03-24",
    "takeover_candidates": [
        "api.eu.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md11zrb5nuvkhx0.cloudfront.net\u001b[0m]",
        "api.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu1dvh8bufdf7.cloudfront.net\u001b[0m]",
        "api.us.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu1dvh8bufdf7.cloudfront.net\u001b[0m]",
        "brand.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "careerleveling.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mgrnhse.github.io\u001b[0m]",
        "developer.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md1737fvtmch146.cloudfront.net\u001b[0m]",
        "developers.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md1737fvtmch146.cloudfront.net\u001b[0m]",
        "email.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "grow.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "gslink.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md2riq6yc1hkiha.cloudfront.net\u001b[0m]",
        "harvest.eu.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md11zrb5nuvkhx0.cloudfront.net\u001b[0m]",
        "harvest.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu1dvh8bufdf7.cloudfront.net\u001b[0m]",
        "harvest.us.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu1dvh8bufdf7.cloudfront.net\u001b[0m]",
        "interseller.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md2l7yapdmtsz62.cloudfront.net\u001b[0m]",
        "is.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md3hflalrachewc.cloudfront.net\u001b[0m]",
        "my.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md8x1ve9aq5wfs.cloudfront.net\u001b[0m]",
        "oauth-redirector.services.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md2llwykp6v1fj9.cloudfront.net\u001b[0m]",
        "onboarding.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md1uvfue8v3rjqf.cloudfront.net\u001b[0m]",
        "prod-saaps.services.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md7hj83sr9tsya.cloudfront.net\u001b[0m]",
        "sharp.services.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md2mxd4ui396s5v.cloudfront.net\u001b[0m]",
        "staging-api.eu.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md74w94ejhv4r6.cloudfront.net\u001b[0m]",
        "staging-api.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mphnoe0ox501.cloudfront.net\u001b[0m]",
        "staging-api.us.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mphnoe0ox501.cloudfront.net\u001b[0m]",
        "staging-harvest.eu.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md74w94ejhv4r6.cloudfront.net\u001b[0m]",
        "staging-harvest.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mphnoe0ox501.cloudfront.net\u001b[0m]",
        "staging-harvest.us.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mphnoe0ox501.cloudfront.net\u001b[0m]",
        "staging-oauth-redirector.services.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md3rv1ji1eowj2z.cloudfront.net\u001b[0m]",
        "staging-saaps.services.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md3qcrqosrq083l.cloudfront.net\u001b[0m]",
        "staging-sharp.services.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32md1tf2fk867g5mi.cloudfront.net\u001b[0m]",
        "support.greenhouse.io [\u001b[35mCNAME\u001b[0m] [\u001b[32mgreenhouse.zendesk.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "greenhouse.io",
        "version": 5,
        "generated_at": "2026-03-24T04:16:30.794Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 8,
            "kept_strict": 4,
            "llm_review_pool": 0,
            "dropped_noise": 4,
            "deep_skipped_below_pool": 4
        },
        "candidates": [
            {
                "host": "gslink.greenhouse.io",
                "cname": "d2riq6yc1hkiha.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 có thể là trang lỗi mặc định của ứng dụng đang hoạt động, không phải tài nguyên bị bỏ trống.",
                "llm_labeled_at": "2026-03-24T04:16:42.336Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/gslink.greenhouse.io\/",
                    "http_status": 404,
                    "title_snippet": "404 Not Found",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "is.greenhouse.io",
                "cname": "d3hflalrachewc.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Tương tự, CloudFront với 404 có thể là hành vi dự kiến của ứng dụng, không cho thấy tài nguyên có thể chiếm đoạt.",
                "llm_labeled_at": "2026-03-24T04:16:42.337Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/is.greenhouse.io\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "oauth-redirector.services.greenhouse.io",
                "cname": "d2llwykp6v1fj9.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Mặc dù có điểm claim trung bình, 404 trên CloudFront thường không đủ để kết luận có thể chiếm đoạt, có thể là endpoint chưa cấu hình.",
                "llm_labeled_at": "2026-03-24T04:16:42.337Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/oauth-redirector.services.greenhouse.io\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "staging-oauth-redirector.services.greenhouse.io",
                "cname": "d3rv1ji1eowj2z.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Subdomain staging với 404 trên CloudFront có khả năng cao là môi trường kiểm thử chưa triển khai, không phải lỗ hổng chiếm đoạt.",
                "llm_labeled_at": "2026-03-24T04:16:42.337Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/staging-oauth-redirector.services.greenhouse.io\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "gslink.greenhouse.io",
                "is.greenhouse.io",
                "oauth-redirector.services.greenhouse.io",
                "staging-oauth-redirector.services.greenhouse.io"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-24T04:16:42.337Z",
            "usage": {
                "prompt_tokens": 734,
                "completion_tokens": 335,
                "total_tokens": 1069,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 606
            }
        },
        "v5": {
            "processed_at": "2026-03-24T04:16:42.382Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "greenhouse.io-2026-03-24"
        }
    }
}