{
    "ok": true,
    "slug": "binance.com-2026-03-26",
    "stats": {
        "subs": 16917,
        "all": 16917,
        "resolved": 15923,
        "live": 28,
        "takeover": 30,
        "juicy": 29,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 2,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/binance.com-2026-03-26",
    "takeover_candidates": [
        "accounts.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2dbdn71e1vorj.cloudfront.net\u001b[0m]",
        "angels.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxa4vzgkxom1x.cloudfront.net\u001b[0m]",
        "api.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3h36i1mno13q3.cloudfront.net\u001b[0m]",
        "bstream.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbnb-prod-mbx-wsp-bstream-alb-729866722.ap-northeast-1.elb.amazonaws.com\u001b[0m]",
        "c2c-admin.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md31w2jxhwgmd59.cloudfront.net\u001b[0m]",
        "c2c.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tt75hvmn6ycl.cloudfront.net\u001b[0m]",
        "cloudapi.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdkq7rw9euiwyk.cloudfront.net\u001b[0m]",
        "demo.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdobbmei4jnjlh.cloudfront.net\u001b[0m]",
        "email.mgmailer.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "fapi.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ukl3c6tymv7q.cloudfront.net\u001b[0m]",
        "ftp.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdgaq92v3z83tx.cloudfront.net\u001b[0m]",
        "im.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdwcsmb15cmm63.cloudfront.net\u001b[0m]",
        "launchpad.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdl9h4nl4c9de.cloudfront.net\u001b[0m]",
        "merchant.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdobbmei4jnjlh.cloudfront.net\u001b[0m]",
        "native.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxq4f9oc95e1.cloudfront.net\u001b[0m]",
        "nbstream.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtf-bin-prod-new-websocket2-alb-1739477750.ap-northeast-1.elb.amazonaws.com\u001b[0m]",
        "opsstream.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-op-alb-wsapi-1875446023.ap-northeast-1.elb.amazonaws.com\u001b[0m]",
        "otc.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdobbmei4jnjlh.cloudfront.net\u001b[0m]",
        "p2p.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tt75hvmn6ycl.cloudfront.net\u001b[0m]",
        "pay.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdobbmei4jnjlh.cloudfront.net\u001b[0m]",
        "pool.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md30g9xv01qq0z1.cloudfront.net\u001b[0m]",
        "preprod-accounts.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdk0h5igmyh26g.cloudfront.net\u001b[0m]",
        "preprod.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2lackl2684hie.cloudfront.net\u001b[0m]",
        "s.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md9kevutyc481i.cloudfront.net\u001b[0m]",
        "sensors.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3qu6c9s01lijv.cloudfront.net\u001b[0m]",
        "support.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdobbmei4jnjlh.cloudfront.net\u001b[0m]",
        "themis.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1j688iz9cdfcg.cloudfront.net\u001b[0m]",
        "web3.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdobbmei4jnjlh.cloudfront.net\u001b[0m]",
        "web3api.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ojfdf3van9rj.cloudfront.net\u001b[0m]",
        "www.binance.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdobbmei4jnjlh.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "binance.com",
        "version": 5,
        "generated_at": "2026-03-26T15:51:30.012Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 8,
            "kept_strict": 2,
            "llm_review_pool": 0,
            "dropped_noise": 6,
            "deep_skipped_below_pool": 6
        },
        "candidates": [
            {
                "host": "im.binance.com",
                "cname": "dwcsmb15cmm63.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 có thể là cấu hình ứng dụng chủ động, không nhất thiết là bucket\/tài nguyên chưa claim. Binance là tổ chức lớn, khả năng đây là false positive cao.",
                "llm_labeled_at": "2026-03-26T15:51:38.587Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/im.binance.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "themis.binance.com",
                "cname": "d1j688iz9cdfcg.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "Tương tự, CNAME CloudFront với 404. Tên miền 'themis' có vẻ là dịch vụ nội bộ hoặc đã ngừng, nhưng khó claim do thuộc Binance - khả năng cấu hình an toàn cao.",
                "llm_labeled_at": "2026-03-26T15:51:38.588Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/themis.binance.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Not Found",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "im.binance.com",
                "themis.binance.com"
            ],
            "batch_sources": [
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-26T15:51:38.588Z",
            "usage": {
                "prompt_tokens": 499,
                "completion_tokens": 201,
                "total_tokens": 700,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 371
            }
        },
        "v5": {
            "processed_at": "2026-03-26T15:51:38.635Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "binance.com-2026-03-26"
        }
    }
}