{
    "ok": true,
    "slug": "amplitude.com-2026-03-24",
    "stats": {
        "subs": 309,
        "all": 309,
        "resolved": 250,
        "live": 228,
        "takeover": 43,
        "juicy": 24,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 7,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/amplitude.com-2026-03-24",
    "takeover_candidates": [
        "amplifile.ai-agents-launch.demo.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m85c18b231b01b049.vercel-dns-013.com\u001b[0m]",
        "amplifile.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "amplifile.demo.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m85c18b231b01b049.vercel-dns-013.com\u001b[0m]",
        "amplifile2.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "amplimoney.ai-agents-launch.demo.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m39a1e9c7739718ed.vercel-dns-013.com\u001b[0m]",
        "amplimoney.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "amplimoney.demo.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m39a1e9c7739718ed.vercel-dns-013.com\u001b[0m]",
        "amplimoney2.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "amplistore.ai-agents-launch.demo.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m4e3a0e71835b3b11.vercel-dns-013.com\u001b[0m]",
        "amplistore.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m0bede3af5ff6f920.vercel-dns-013.com\u001b[0m]",
        "amplistore.demo.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m4e3a0e71835b3b11.vercel-dns-013.com\u001b[0m]",
        "amplistore2.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m0bede3af5ff6f920.vercel-dns-013.com\u001b[0m]",
        "assistant-demo.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbb9cf444988c7a21.vercel-dns-013.com\u001b[0m]",
        "blog.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "brand.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "cohort.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "corpsite.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "data.dev.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1e7ytm4mbb9sy.cloudfront.net\u001b[0m]",
        "de.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "developers.data.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32miteratively-docs.netlify.app\u001b[0m]",
        "docs.developers.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "email.recruiting.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "explore.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2q1g6wx2xhrlf.cloudfront.net\u001b[0m]",
        "forms.corpsite.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "fr.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "gethelp.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mamplitude.zendesk.com\u001b[0m]",
        "gsalink.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1jlrz8n2wfmky.cloudfront.net\u001b[0m]",
        "gsblink.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md14umq1mbqhv27.cloudfront.net\u001b[0m]",
        "gshlink.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1fqlffnndy7s9.cloudfront.net\u001b[0m]",
        "gsnlink.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3rlcvs00e209w.cloudfront.net\u001b[0m]",
        "gsslink.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3rlcvs00e209w.cloudfront.net\u001b[0m]",
        "help.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "hermes.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-b5b41197-hermes-hermesinte-422e-1274552801.us-west-2.elb.amazonaws.com\u001b[0m]",
        "jp.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "main.corpsite.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "main.sanity.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "notify.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mb5b41197-hermes-hermesapia-b2e5-1042556585.us-west-2.elb.amazonaws.com\u001b[0m]",
        "sanity.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "spinnaker.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-a6ded0b3260a311e9869a026630afa17-1188142599.us-west-2.elb.amazonaws.com\u001b[0m]",
        "staging.amplifile.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m85c18b231b01b049.vercel-dns-013.com\u001b[0m]",
        "trust.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdg7yax2nb93oh.cloudfront.net\u001b[0m]",
        "wpengine-cf.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcgrez2zykjmd.cloudfront.net\u001b[0m]",
        "www.docs.developers.amplitude.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "amplitude.com",
        "version": 5,
        "generated_at": "2026-03-24T04:34:44.742Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 8,
            "kept_strict": 7,
            "llm_review_pool": 0,
            "dropped_noise": 1,
            "deep_skipped_below_pool": 1
        },
        "candidates": [
            {
                "host": "forms.corpsite.amplitude.com",
                "cname": "cname.vercel-dns.com",
                "status": 404,
                "title": null,
                "fingerprint": "vercel",
                "confidence": "high",
                "claim_score": 56,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME trỏ đến Vercel nhưng HTTP 404. Tuy nhiên, Vercel thường yêu cầu xác minh dự án\/tên miền cụ thể, không dễ claim tự động từ 404 đơn thuần.",
                "llm_labeled_at": "2026-03-24T04:34:58.666Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/forms.corpsite.amplitude.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "gsalink.amplitude.com",
                "cname": "d1jlrz8n2wfmky.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME CloudFront với 404. CloudFront phân phối S3 bucket; 404 có thể chỉ bucket trống hoặc cấu hình sai, nhưng không chắc chắn có thể claim bucket chưa sở hữu.",
                "llm_labeled_at": "2026-03-24T04:34:58.666Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/gsalink.amplitude.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Not Found",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "gsblink.amplitude.com",
                "cname": "d14umq1mbqhv27.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự gsalink: CloudFront + 404. Thiếu bằng chứng bucket S3 bị bỏ hoặc có thể chiếm quyền sở hữu trực tiếp.",
                "llm_labeled_at": "2026-03-24T04:34:58.666Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/gsblink.amplitude.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Not Found",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "gshlink.amplitude.com",
                "cname": "d1fqlffnndy7s9.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Cấu hình CloudFront trỏ đến S3, trả về 404. Đây có thể là endpoint chưa được triển khai, không phải tài nguyên bị bỏ có thể claim.",
                "llm_labeled_at": "2026-03-24T04:34:58.666Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/gshlink.amplitude.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Not Found",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "gsnlink.amplitude.com",
                "cname": "d3rlcvs00e209w.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Mẫu giống các host khác: CloudFront + S3 + 404. Không có dấu hiệu bucket bị xóa hay có thể tiếp quản qua AWS.",
                "llm_labeled_at": "2026-03-24T04:34:58.666Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/gsnlink.amplitude.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Not Found",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "gsslink.amplitude.com",
                "cname": "d3rlcvs00e209w.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/gsslink.amplitude.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Not Found",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_telegram_threshold"
            },
            {
                "host": "wpengine-cf.amplitude.com",
                "cname": "dcgrez2zykjmd.cloudfront.net",
                "status": 404,
                "title": "Site is not available",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/wpengine-cf.amplitude.com\/",
                    "http_status": 404,
                    "title_snippet": "Site is not available",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_telegram_threshold"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "forms.corpsite.amplitude.com",
                "gsalink.amplitude.com",
                "gsblink.amplitude.com",
                "gshlink.amplitude.com",
                "gsnlink.amplitude.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-24T04:34:58.666Z",
            "usage": {
                "prompt_tokens": 847,
                "completion_tokens": 435,
                "total_tokens": 1282,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 719
            }
        },
        "v5": {
            "processed_at": "2026-03-24T04:34:58.713Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "amplitude.com-2026-03-24"
        }
    }
}