{
    "ok": true,
    "slug": "segment.com-2026-03-24",
    "stats": {
        "subs": 140,
        "all": 140,
        "resolved": 68,
        "live": 61,
        "takeover": 13,
        "juicy": 14,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 8,
        "takeover_hot_claim": 5,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 5,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/segment.com-2026-03-24",
    "takeover_candidates": [
        "cdn.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md296je7bbdd650.cloudfront.net\u001b[0m]",
        "dev.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2bsqc7j9ysx7j.cloudfront.net\u001b[0m]",
        "email.e.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1raap10e4yome.cloudfront.net\u001b[0m]",
        "evergreen.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msegmentio.github.io\u001b[0m]",
        "facade.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msegmentio.github.io\u001b[0m]",
        "gdpr-controller.my.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgdpr-controller.my.segment.com.herokudns.com\u001b[0m]",
        "grow.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgrow.segment.com.s3.amazonaws.com\u001b[0m]",
        "preview.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdl44ribjvfpnj.cloudfront.net\u001b[0m]",
        "sagemaker.datasci.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2iex0x7x12pjm.cloudfront.net\u001b[0m]",
        "stage.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xzwmh1xfle26.cloudfront.net\u001b[0m]",
        "www.dev.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2bsqc7j9ysx7j.cloudfront.net\u001b[0m]",
        "www.preview.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdl44ribjvfpnj.cloudfront.net\u001b[0m]",
        "www.stage.segment.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xzwmh1xfle26.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "segment.com",
        "version": 5,
        "generated_at": "2026-03-24T04:37:38.393Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 9,
            "kept_strict": 8,
            "llm_review_pool": 0,
            "dropped_noise": 1,
            "deep_skipped_below_pool": 1
        },
        "candidates": [
            {
                "host": "dev.segment.com",
                "cname": "d2bsqc7j9ysx7j.cloudfront.net",
                "status": 403,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 72,
                "claim_tier": "high",
                "signals": [
                    "the request could not be satisfied"
                ],
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront, HTTP 403 lỗi 'request could not be satisfied' cho thấy phân phối chưa được cấu hình đúng, có khả năng claim.",
                "llm_labeled_at": "2026-03-24T04:37:50.563Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/dev.segment.com\/",
                    "http_status": 403,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "preview.segment.com",
                "cname": "dl44ribjvfpnj.cloudfront.net",
                "status": 403,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 72,
                "claim_tier": "high",
                "signals": [
                    "the request could not be satisfied"
                ],
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "Tương tự dev.segment.com, CNAME CloudFront với lỗi 403, phân phối có vẻ chưa được gắn với tài nguyên S3 hợp lệ, claim có thể.",
                "llm_labeled_at": "2026-03-24T04:37:50.564Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/preview.segment.com\/",
                    "http_status": 403,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "stage.segment.com",
                "cname": "d1xzwmh1xfle26.cloudfront.net",
                "status": 403,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 72,
                "claim_tier": "high",
                "signals": [
                    "the request could not be satisfied"
                ],
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "Cấu hình CloudFront trả về lỗi 403, không có ứng dụng live, cho thấy resource chưa được cấu hình đầy đủ, claim likely.",
                "llm_labeled_at": "2026-03-24T04:37:50.564Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/stage.segment.com\/",
                    "http_status": 403,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "www.dev.segment.com",
                "cname": "d2bsqc7j9ysx7j.cloudfront.net",
                "status": 403,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 72,
                "claim_tier": "high",
                "signals": [
                    "the request could not be satisfied"
                ],
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "Chia sẻ CNAME giống dev.segment.com, cùng lỗi 403, tình trạng takeover tương tự và có khả năng claim.",
                "llm_labeled_at": "2026-03-24T04:37:50.564Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/www.dev.segment.com\/",
                    "http_status": 403,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "www.preview.segment.com",
                "cname": "dl44ribjvfpnj.cloudfront.net",
                "status": 403,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 72,
                "claim_tier": "high",
                "signals": [
                    "the request could not be satisfied"
                ],
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "Chia sẻ CNAME giống preview.segment.com, lỗi 403 nhất quán, resource CloudFront chưa được cấu hình, claim likely.",
                "llm_labeled_at": "2026-03-24T04:37:50.564Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/www.preview.segment.com\/",
                    "http_status": 403,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "cdn.segment.com",
                "cname": "d296je7bbdd650.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/cdn.segment.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_telegram_threshold"
            },
            {
                "host": "email.e.segment.com",
                "cname": "d1raap10e4yome.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/email.e.segment.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_telegram_threshold"
            },
            {
                "host": "www.leaderboard.segment.com",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "404 Page not found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/www.leaderboard.segment.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Page not found",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_telegram_threshold"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "dev.segment.com",
                "preview.segment.com",
                "stage.segment.com",
                "www.dev.segment.com",
                "www.preview.segment.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-24T04:37:50.564Z",
            "usage": {
                "prompt_tokens": 920,
                "completion_tokens": 393,
                "total_tokens": 1313,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 792
            }
        },
        "v5": {
            "processed_at": "2026-03-24T04:37:50.605Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "segment.com-2026-03-24"
        }
    }
}