{
    "ok": true,
    "slug": "booking.com-2026-03-27",
    "stats": {
        "subs": 1717,
        "all": 1717,
        "resolved": 575,
        "live": 330,
        "takeover": 126,
        "juicy": 125,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 4,
        "takeover_hot_claim": 3,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/booking.com-2026-03-27",
    "takeover_candidates": [
        "a1.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ti6gqeyzvy3i.cloudfront.net\u001b[0m]",
        "about-staging.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingcom-staging.vercel.app\u001b[0m]",
        "about.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "abu-panic.crisis.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3f8eq89aob7j6.cloudfront.net\u001b[0m]",
        "accommodations.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2uxzmvxe6bz7q.cloudfront.net\u001b[0m]",
        "account.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu1b3vb35hc0o.cloudfront.net\u001b[0m]",
        "admin.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tnkvy3u7j3cp.cloudfront.net\u001b[0m]",
        "admins.crisis.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1895sq4zmq2gk.cloudfront.net\u001b[0m]",
        "agencywise.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingcom-agencywise.zendesk.com\u001b[0m]",
        "ams.merchandise.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msubsystem-prod-1343930936.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "api.dev.transport.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdotmgbn5n67mf.cloudfront.net\u001b[0m]",
        "api.test.transport.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ab3urx7wgwd2.cloudfront.net\u001b[0m]",
        "api.transport.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md29tbmmm4potfn.cloudfront.net\u001b[0m]",
        "assessment.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcandidates-production.pages.dev\u001b[0m]",
        "auth-dqs.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdaas09buptdxo.cloudfront.net\u001b[0m]",
        "auth-test.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3krogujuz28p7.cloudfront.net\u001b[0m]",
        "auth.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3dvmfw5xkjizd.cloudfront.net\u001b[0m]",
        "auth.dispatchapi-sandbox.taxi.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md33pzaoi8x24cu.cloudfront.net\u001b[0m]",
        "auth.portal.cars.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2gxksevbmvwei.cloudfront.net\u001b[0m]",
        "automation-dqs.its-ba.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-0g6olhbsx1.execute-api.eu-west-2.amazonaws.com\u001b[0m]",
        "automation.its-ba.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-8m7hxo4d0b.execute-api.eu-west-2.amazonaws.com\u001b[0m]",
        "awscpass.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md38y0c1blwckr0.cloudfront.net\u001b[0m]",
        "blog.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15althxfppqeb.cloudfront.net\u001b[0m]",
        "bookingbutton.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdahprrixxd6ek.cloudfront.net\u001b[0m]",
        "bookit.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdahprrixxd6ek.cloudfront.net\u001b[0m]",
        "carrier.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2h79e0a7iep47.cloudfront.net\u001b[0m]",
        "cars-apps.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md12oq1x7faxh67.cloudfront.net\u001b[0m]",
        "cars-test.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3maz0knzir56e.cloudfront.net\u001b[0m]",
        "cf.gw.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md194fo6w9ichyx.cloudfront.net\u001b[0m]",
        "chainssupport.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingchainssupport.zendesk.com\u001b[0m]",
        "chat.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md12jjt55272ww1.cloudfront.net\u001b[0m]",
        "chatdev.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md9pfez0to043u.cloudfront.net\u001b[0m]",
        "clicks.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1nqeyujnqheed.cloudfront.net\u001b[0m]",
        "clicktale.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1l7ht1c7u4zu1.cloudfront.net\u001b[0m]",
        "connect.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md31ni4nvo918li.cloudfront.net\u001b[0m]",
        "creative-tool-image-renderer.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3992wtr4g3ge5.cloudfront.net\u001b[0m]",
        "cs-internal.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingcom-cs.zendesk.com\u001b[0m]",
        "cs-panic.crisis.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3qp8hmtoypuur.cloudfront.net\u001b[0m]",
        "csagents.crisis.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1264avyxm0lje.cloudfront.net\u001b[0m]",
        "cschangeteam.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingcsimplementationsnew.zendesk.com\u001b[0m]",
        "cseps-support.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcseps.zendesk.com\u001b[0m]",
        "cslearning-support.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcslearning.zendesk.com\u001b[0m]",
        "customer-service.transport.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdf4an27f48ome.cloudfront.net\u001b[0m]",
        "dispatchapi-sandbox.taxi.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-madf9nad79.execute-api.eu-west-1.amazonaws.com\u001b[0m]",
        "dispatchapi.taxi.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-rnnovjcrn3.execute-api.eu-west-1.amazonaws.com\u001b[0m]",
        "distribution-xml.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1dh3z5g06l1r.cloudfront.net\u001b[0m]",
        "dsarequests.moderation.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbooking-dsarequests.zendesk.com\u001b[0m]",
        "eptscep.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1t1j3x6rcivx1.cloudfront.net\u001b[0m]",
        "eu-global.merchandise.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msubsystem-prod-1343930936.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "finbase.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbooking-zen-6.zendesk.com\u001b[0m]",
        "flights-supply-test.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ejepsdo92sjq.cloudfront.net\u001b[0m]",
        "flights-supply.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3kmao89iuffbe.cloudfront.net\u001b[0m]",
        "flights-supply.dev.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-m7rxj2epo6.execute-api.eu-central-1.amazonaws.com\u001b[0m]",
        "flights.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md333i577x8trzi.cloudfront.net\u001b[0m]",
        "fracpass-dev01.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15yjen1bjvmdn.cloudfront.net\u001b[0m]",
        "fracpass-prod01.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md38y0c1blwckr0.cloudfront.net\u001b[0m]",
        "freelance.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingfreelance.zendesk.com\u001b[0m]",
        "freelancejobs.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingfreelancejobs.zendesk.com\u001b[0m]",
        "globalevents.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdjpgs94hs3ku1.cloudfront.net\u001b[0m]",
        "globalguru.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingcomhd.zendesk.com\u001b[0m]",
        "gtp-mktg.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3viz1i4vjyte7.cloudfront.net\u001b[0m]",
        "help.business.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbooking-zen-1.zendesk.com\u001b[0m]",
        "in1.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1i7i3afqklcae.cloudfront.net\u001b[0m]",
        "integrations-platform-dqs.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ppvenvfppqrm.cloudfront.net\u001b[0m]",
        "integrations-platform.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1efbco3xhol0x.cloudfront.net\u001b[0m]",
        "iphone-xml.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ieick982x8tp.cloudfront.net\u001b[0m]",
        "j1.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2g476wb1w26wr.cloudfront.net\u001b[0m]",
        "jamf-adcs.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32madcs20241125092445182000000006-2143587241.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "join.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2jothlt68ryaj.cloudfront.net\u001b[0m]",
        "legacy.developers.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1lrvel1ok12e8.cloudfront.net\u001b[0m]",
        "lhrcpass-dev01.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15yjen1bjvmdn.cloudfront.net\u001b[0m]",
        "lhrcpass-prod01.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md38y0c1blwckr0.cloudfront.net\u001b[0m]",
        "link.sg.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1nqeyujnqheed.cloudfront.net\u001b[0m]",
        "merchandise.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msubsystem-prod-1343930936.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "metasearch-partner-connect.gw.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md167wfaqey3oyk.cloudfront.net\u001b[0m]",
        "mobile-apps.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ieick982x8tp.cloudfront.net\u001b[0m]",
        "movableink.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdtyxw3f71g7nj.cloudfront.net\u001b[0m]",
        "mulesoft.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2aq0e2jalpjts.cloudfront.net\u001b[0m]",
        "mulesoftqa.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1031z0l5gm3l4.cloudfront.net\u001b[0m]",
        "noramchains.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnoramchainsbooking.zendesk.com\u001b[0m]",
        "notices.moderation.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbooking-notices.zendesk.com\u001b[0m]",
        "oag.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md11ljf66ie851p.cloudfront.net\u001b[0m]",
        "ondemandtaxi-support.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mondemandtaxi.zendesk.com\u001b[0m]",
        "partner-courses.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1j9fuzvr6tqjw.cloudfront.net\u001b[0m]",
        "partners.crisis.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1572vhre3pd8g.cloudfront.net\u001b[0m]",
        "partnerships.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdz3pnz35wk0y4.cloudfront.net\u001b[0m]",
        "portal.dev.trips.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdguw3srcuzodp.cloudfront.net\u001b[0m]",
        "portal.test.trips.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bb6pvlxzseup.cloudfront.net\u001b[0m]",
        "portal.trips.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2phx4g05iy3hw.cloudfront.net\u001b[0m]",
        "ps-services.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingpsservices.zendesk.com\u001b[0m]",
        "pulse.api.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdw351zbeu9t8w.cloudfront.net\u001b[0m]",
        "risk.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingrisk.zendesk.com\u001b[0m]",
        "s.sg.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1nqeyujnqheed.cloudfront.net\u001b[0m]",
        "s1.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1t1r4y1a47stt.cloudfront.net\u001b[0m]",
        "secure-admin.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdqtxe4jne1ww4.cloudfront.net\u001b[0m]",
        "secure-distribution-xml.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p2t9p26qop25.cloudfront.net\u001b[0m]",
        "secure-iphone-xml.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3t2sqlgt1eq95.cloudfront.net\u001b[0m]",
        "secure-sni.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ejfslty4l0zm.cloudfront.net\u001b[0m]",
        "secure-staging.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md32pgmwdk3lyh4.cloudfront.net\u001b[0m]",
        "secure-supply-xml.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md6ltldqs90c9l.cloudfront.net\u001b[0m]",
        "secure.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2pgys3db91n8r.cloudfront.net\u001b[0m]",
        "security.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingsecurity.zendesk.com\u001b[0m]",
        "sp.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3qyy5ahesbiu2.cloudfront.net\u001b[0m]",
        "spadmin.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3r2v0yfcvar4b.cloudfront.net\u001b[0m]",
        "supply-xml.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdwvc7rwgav0mr.cloudfront.net\u001b[0m]",
        "taxi-support.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mridewayz.zendesk.com\u001b[0m]",
        "taxi-webform.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbcomwebform.zendesk.com\u001b[0m]",
        "taxi.sg.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3fufwizhc9vtk.cloudfront.net\u001b[0m]",
        "taxisuppliers-support.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtaxisuppliers.zendesk.com\u001b[0m]",
        "test.partner.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2yu10a11xti0.cloudfront.net\u001b[0m]",
        "test.partnerships.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md10z9p7iypmuke.cloudfront.net\u001b[0m]",
        "test.us.partnerships.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md10z9p7iypmuke.cloudfront.net\u001b[0m]",
        "ticketedtransport-support.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mticketedtransport.zendesk.com\u001b[0m]",
        "tines.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.booking-2004470792.eu-west-2.elb.amazonaws.com\u001b[0m]",
        "travelcommunities.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtravelcommunities.zendesk.com\u001b[0m]",
        "trustedflaggers.moderation.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbooking-trustedflaggers.zendesk.com\u001b[0m]",
        "uat.partner.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2w68fhlm6h1wx.cloudfront.net\u001b[0m]",
        "uat.partnerships.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2swz0n9npqxwq.cloudfront.net\u001b[0m]",
        "uat.us.partnerships.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2swz0n9npqxwq.cloudfront.net\u001b[0m]",
        "uk-global.merchandise.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msubsystem-prod-1343930936.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "web-perf.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md32jgtbwout526.cloudfront.net\u001b[0m]",
        "welcomekit.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msubsystem-prod-1343930936.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "wfm.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbookingcsworkforce.zendesk.com\u001b[0m]",
        "www-sni.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ejfslty4l0zm.cloudfront.net\u001b[0m]",
        "www-staging.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1t96v4jyeqkyc.cloudfront.net\u001b[0m]",
        "www.booking.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1of1hbywxxm65.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "booking.com",
        "version": 5,
        "generated_at": "2026-03-27T03:18:11.913Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 37,
            "kept_strict": 4,
            "llm_review_pool": 14,
            "dropped_noise": 33,
            "deep_skipped_below_pool": 19
        },
        "candidates": [
            {
                "host": "flights-supply-test.booking.com",
                "cname": "d2ejepsdo92sjq.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront, HTTP 502 với lỗi 'request could not be satisfied', điểm claim cao (83). Có khả năng phân phối CloudFront chưa được cấu hình đúng.",
                "llm_labeled_at": "2026-03-27T03:18:26.529Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/flights-supply-test.booking.com\/",
                    "http_status": 502,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            },
            {
                "host": "test.us.partnerships.booking.com",
                "cname": "d10z9p7iypmuke.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Cấu hình tương tự host 1: CloudFront, 502, lỗi giống nhau, điểm claim cao. Khả năng takeover cao.",
                "llm_labeled_at": "2026-03-27T03:18:26.529Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/test.us.partnerships.booking.com\/",
                    "http_status": 502,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            },
            {
                "host": "uat.us.partnerships.booking.com",
                "cname": "d2swz0n9npqxwq.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Mẫu lỗi và cấu hình giống host 1 & 2. CloudFront có vẻ chưa được liên kết với S3 bucket hoặc origin hợp lệ.",
                "llm_labeled_at": "2026-03-27T03:18:26.529Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/uat.us.partnerships.booking.com\/",
                    "http_status": 202,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            },
            {
                "host": "secure-sni.booking.com",
                "cname": "d1ejfslty4l0zm.cloudfront.net",
                "status": 503,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 55,
                "claim_tier": "medium",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_possible",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME CloudFront, HTTP 503, điểm claim trung bình (55). Có thể là cấu hình sai hoặc dịch vụ tạm ngừng, nhưng chưa chắc claim được.",
                "llm_labeled_at": "2026-03-27T03:18:26.529Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "medium",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/secure-sni.booking.com\/",
                    "http_status": 503,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_real_score_threshold"
            }
        ],
        "llm_review_pool": [
            {
                "host": "api.dev.transport.booking.com",
                "cname": "dotmgbn5n67mf.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME CloudFront, HTTP 404, điểm claim thấp (44). Có thể là endpoint dev không tồn tại, nhưng phân phối CloudFront có thể đã được bảo vệ hoặc không claim được.",
                "llm_labeled_at": "2026-03-27T03:18:26.529Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "api.test.transport.booking.com",
                "cname": "d1ab3urx7wgwd2.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "api.transport.booking.com",
                "cname": "d29tbmmm4potfn.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "carrier.booking.com",
                "cname": "d2h79e0a7iep47.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "chat.booking.com",
                "cname": "d12jjt55272ww1.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "clicks.booking.com",
                "cname": "d1nqeyujnqheed.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "globalevents.booking.com",
                "cname": "djpgs94hs3ku1.cloudfront.net",
                "status": 404,
                "title": "Bizzabo | 404 | Social Networking in conferences, meetups and events made easy with Bizzabo’s mobile networking solution",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "link.sg.booking.com",
                "cname": "d1nqeyujnqheed.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "metasearch-partner-connect.gw.booking.com",
                "cname": "d167wfaqey3oyk.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "pulse.api.booking.com",
                "cname": "dw351zbeu9t8w.cloudfront.net",
                "status": 404,
                "title": "Booking.com: 404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "s.sg.booking.com",
                "cname": "d1nqeyujnqheed.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "secure-supply-xml.booking.com",
                "cname": "d6ltldqs90c9l.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "supply-xml.booking.com",
                "cname": "dwvc7rwgav0mr.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "taxi.sg.booking.com",
                "cname": "d3fufwizhc9vtk.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "flights-supply-test.booking.com",
                "test.us.partnerships.booking.com",
                "uat.us.partnerships.booking.com",
                "secure-sni.booking.com",
                "api.dev.transport.booking.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-27T03:18:26.529Z",
            "usage": {
                "prompt_tokens": 916,
                "completion_tokens": 430,
                "total_tokens": 1346,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 788
            }
        },
        "v5": {
            "processed_at": "2026-03-27T03:18:26.613Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "booking.com-2026-03-27"
        }
    }
}