{
    "ok": true,
    "slug": "ac.za-2026-03-24",
    "stats": {
        "subs": 43014,
        "all": 43014,
        "resolved": 25663,
        "live": 84,
        "takeover": 39,
        "juicy": 81,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 3,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 1,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/ac.za-2026-03-24",
    "takeover_candidates": [
        "application.richfield.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md1n3wrp4f6gr7f.cloudfront.net\u001b[0m]",
        "apply.aaaschool.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md1f5ump661carb.cloudfront.net\u001b[0m]",
        "cdn.gcro.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md2568bvvt3589e.cloudfront.net\u001b[0m]",
        "diespens.akademia.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mprodmo-publi-pxkekk9cawhq-741325220.af-south-1.elb.amazonaws.com\u001b[0m]",
        "dmp.sun.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md353zqhtjou7sl.cloudfront.net\u001b[0m]",
        "dms.sanbi.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-54-161-24-194.compute-1.amazonaws.com\u001b[0m]",
        "docs.ilifu.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32milifu.github.io\u001b[0m]",
        "docs.orcid.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mtenet-ac-za.github.io\u001b[0m]",
        "docs.sanbi.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32msanbi-sa.github.io\u001b[0m]",
        "ebooks.bct.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mdkbvev34c6q07.cloudfront.net\u001b[0m]",
        "email.online.cut.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32meu.mailgun.org\u001b[0m]",
        "enquire.aaaschool.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md23bzg1wvnlit1.cloudfront.net\u001b[0m]",
        "galaxyafrica.sanbi.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32msanbi-sa.github.io\u001b[0m]",
        "graffiti.gcro.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mguarded-magpie-ceee1det95c89k7dxm4m2z1t.herokudns.com\u001b[0m]",
        "klebsiella2024.sanbi.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mklebsiella2024.netlify.app\u001b[0m]",
        "lll.sun.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mmc2qzi07v47.cloudfront.net\u001b[0m]",
        "mail.ifow.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mtut-pta-alb2-1022979046.af-south-1.elb.amazonaws.com\u001b[0m]",
        "ml.sun.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32msu-medialab.github.io\u001b[0m]",
        "mpxv2024.sanbi.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mmpxv24.netlify.app\u001b[0m]",
        "online.edutel.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mmoodle-alb-54200341.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "online1.edutel.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mmoodle-alb-54200341.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "pabix.sanbi.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32madmirable-sundae-a48e16.netlify.app\u001b[0m]",
        "pathogen-genomics-march-2024.sanbi.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mbeamish-manatee-42d0ae.netlify.app\u001b[0m]",
        "platform.akademia.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32metalmo-publi-ikrjoyaellvv-1248096995.af-south-1.elb.amazonaws.com\u001b[0m]",
        "portaal.akademia.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-13-246-202-88.af-south-1.compute.amazonaws.com\u001b[0m]",
        "preview.ada.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mada-ac-za.netlify.app\u001b[0m]",
        "qtml2026.nithecs.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32m56be51e988a92cb5.vercel-dns-016.com\u001b[0m]",
        "socialjustice.sun.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md36jqnlcpgxlz0.cloudfront.net\u001b[0m]",
        "spens2026.akademia.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md33qvoca3xl196.cloudfront.net\u001b[0m]",
        "spens2027.akademia.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md21gacrphqkr8p.cloudfront.net\u001b[0m]",
        "upshop.up.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "village-of-100.gcro.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mdkzzujrtbq1dc.cloudfront.net\u001b[0m]",
        "vislab.idia.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "workshop.ilifu.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32milifu-workshop.github.io\u001b[0m]",
        "www.afric.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32msuper-puffpuff-433da9.netlify.app\u001b[0m]",
        "www.ifow.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32mtut-pta-alb2-1022979046.af-south-1.elb.amazonaws.com\u001b[0m]",
        "www.richfield.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32m4b32564432843a6c.vercel-dns-016.com\u001b[0m]",
        "www.somisana.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32msaeon.github.io\u001b[0m]",
        "www.stias.ac.za [\u001b[35mCNAME\u001b[0m] [\u001b[32md2zrb2cq6v4hq7.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "ac.za",
        "version": 5,
        "generated_at": "2026-03-24T14:06:40.467Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 5,
            "kept_strict": 3,
            "llm_review_pool": 0,
            "dropped_noise": 2,
            "deep_skipped_below_pool": 2
        },
        "candidates": [
            {
                "host": "workshop.ilifu.ac.za",
                "cname": "ilifu-workshop.github.io",
                "status": 404,
                "title": "Site not found · GitHub Pages",
                "fingerprint": "github_pages",
                "confidence": "high",
                "claim_score": 62,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ tới GitHub Pages nhưng HTTP 404 với tiêu đề 'Site not found', cho thấy repository chưa được cấu hình hoặc đã bị xóa, có thể claim.",
                "llm_labeled_at": "2026-03-24T14:06:53.738Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/workshop.ilifu.ac.za\/",
                    "http_status": 404,
                    "title_snippet": "Site not found · GitHub Pages",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "mail.idia.ac.za",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.75,
                "llm_rationale_vi": "CNAME trỏ tới Google nhưng HTTP 404 có thể do ứng dụng chưa triển khai hoặc lỗi cấu hình, không chắc chắn là claim được vì có thể đang trong quá trình setup.",
                "llm_labeled_at": "2026-03-24T14:06:53.738Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/mail.idia.ac.za\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "mail.staugustine.ac.za",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.75,
                "llm_rationale_vi": "Tương tự mail.idia.ac.za, CNAME Google và 404, có thể là cấu hình chưa hoàn tất hoặc ứng dụng tạm ngừng, không rõ ràng để claim.",
                "llm_labeled_at": "2026-03-24T14:06:53.738Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/mail.staugustine.ac.za\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "workshop.ilifu.ac.za",
                "mail.idia.ac.za",
                "mail.staugustine.ac.za"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-24T14:06:53.738Z",
            "usage": {
                "prompt_tokens": 619,
                "completion_tokens": 270,
                "total_tokens": 889,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 491
            }
        },
        "v5": {
            "processed_at": "2026-03-24T14:06:53.786Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "ac.za-2026-03-24"
        }
    }
}