{
    "ok": true,
    "slug": "co.com-2026-03-28",
    "stats": {
        "subs": 37903,
        "all": 37903,
        "resolved": 25545,
        "live": 142,
        "takeover": 49,
        "juicy": 123,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 3,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 1,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/co.com-2026-03-28",
    "takeover_candidates": [
        "app.crystal.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "audit.kws.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m07a852859ca0978f.vercel-dns-017.com\u001b[0m]",
        "behar.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "bella.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msurveys-61b91.web.app\u001b[0m]",
        "course.relife.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "develop.ment.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcurrent-ginger-794lyutbr7inwhdaxxj55l25.herokudns.com\u001b[0m]",
        "download.google.playstore.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdpcfkcx1lyshu.cloudfront.net\u001b[0m]",
        "faq.rentola.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mrentolacocom.zendesk.com\u001b[0m]",
        "gitlab.sg.orion.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgitlab.sg.orion.co.com.s3-website-ap-southeast-1.amazonaws.com\u001b[0m]",
        "iaca.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mjonnycheng.github.io\u001b[0m]",
        "invest.ment.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mthawing-crow-j25687r4yhr6fk6hjqrxj0mc.herokudns.com\u001b[0m]",
        "manage.ment.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmodern-jackfruit-kd81h3mim6bc0z7ix1jfi5bd.herokudns.com\u001b[0m]",
        "noc-git.orion.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdevops-noc-gitlab-new-0f667f3406729877.elb.ap-southeast-1.amazonaws.com\u001b[0m]",
        "play.google.playstore.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md29hss1p40ftna.cloudfront.net\u001b[0m]",
        "portal.funland.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3uy1gf81320lo.cloudfront.net\u001b[0m]",
        "productiv.ity.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtheoretical-brushlands-0j7yghiv3oflutcsbx2kuosa.herokudns.com\u001b[0m]",
        "secur.ity.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mrigid-dolphin-ayxtmr9mcfcnuhfka0yb4822.herokudns.com\u001b[0m]",
        "shop.rhb.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "vc.edpuzzle.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "visibil.ity.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpacific-lark-z0tbxeq94945dq5cfj862d64.herokudns.com\u001b[0m]",
        "www.aara.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m44d1a4b012f50198.vercel-dns-017.com\u001b[0m]",
        "www.acceler.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.ambre.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.captures.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.casinosonlineconfiables.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maaa9efa4ca4dc939.vercel-dns-016.com\u001b[0m]",
        "www.charna.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mde5bda9ca6692fb3.vercel-dns-016.com\u001b[0m]",
        "www.cyber.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.eqparts.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.funland.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdzb5jw09xjyyg.cloudfront.net\u001b[0m]",
        "www.halo.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhalo-business-administrators.netlify.app\u001b[0m]",
        "www.hoffmann.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhoffmann-and-co-llc.web.app\u001b[0m]",
        "www.kapitan.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m730d135d6e1a929a.vercel-dns-017.com\u001b[0m]",
        "www.kela.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.mile.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mf056d43cbc211f13.vercel-dns-017.com\u001b[0m]",
        "www.mopa.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.omnipresent.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbbc9f9fbb3aa5ca8.vercel-dns-016.com\u001b[0m]",
        "www.orion.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2yf9o8k051da1.cloudfront.net\u001b[0m]",
        "www.portal.funland.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3uy1gf81320lo.cloudfront.net\u001b[0m]",
        "www.rem.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mrem-co-com.netlify.app\u001b[0m]",
        "www.sparkling.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.stakk.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.taurus.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.theopera.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.thrivestudio.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtubular-smakager-5967e7.netlify.app\u001b[0m]",
        "www.unifi.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdc17a625005614c0.vercel-dns-017.com\u001b[0m]",
        "www.usdtexchange.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mde0c9b0b8d6ffac0.vercel-dns-016.com\u001b[0m]",
        "www.vara.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.voodoo.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvoodoocoltd.github.io\u001b[0m]",
        "xesty.acceler.co.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "co.com",
        "version": 5,
        "generated_at": "2026-03-28T07:21:47.728Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 11,
            "kept_strict": 3,
            "llm_review_pool": 3,
            "dropped_noise": 8,
            "deep_skipped_below_pool": 5
        },
        "candidates": [
            {
                "host": "course.relife.co.com",
                "cname": "cname.vercel-dns.com",
                "status": 404,
                "title": null,
                "fingerprint": "vercel",
                "confidence": "high",
                "claim_score": 81,
                "claim_tier": "high",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.81,
                "llm_rationale_vi": "CNAME trỏ đến vercel-dns.com, HTTP 404, không có nội dung. Vercel cho phép claim subdomain nếu chưa triển khai dự án. Claim_score cao (81).",
                "llm_labeled_at": "2026-03-28T07:22:00.670Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/course.relife.co.com\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "bella.co.com",
                "cname": "surveys-61b91.web.app",
                "status": 404,
                "title": "Site Not Found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_possible",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "CNAME trỏ đến Firebase (web.app), HTTP 404 với tiêu đề 'Site Not Found'. Firebase có thể bị claim nếu site chưa được liên kết. Claim_score trung bình (50).",
                "llm_labeled_at": "2026-03-28T07:22:00.670Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "medium",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/bella.co.com\/",
                    "http_status": 404,
                    "title_snippet": "Site Not Found",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_real_score_threshold"
            },
            {
                "host": "www.llm.co.com",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "404 Page not found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_possible",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "CNAME trỏ đến Google Hosted, HTTP 404. Có thể là Firebase\/Google Cloud chưa được cấu hình. Claim_score trung bình (50).",
                "llm_labeled_at": "2026-03-28T07:22:00.671Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "medium",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/www.llm.co.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Page not found",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_real_score_threshold"
            }
        ],
        "llm_review_pool": [
            {
                "host": "download.google.playstore.co.com",
                "cname": "dpcfkcx1lyshu.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.44,
                "llm_rationale_vi": "CNAME trỏ đến CloudFront, HTTP 404. CloudFront thường cần cấu hình S3 origin; khó claim trực tiếp nếu không kiểm soát AWS account. Claim_score thấp (44).",
                "llm_labeled_at": "2026-03-28T07:22:00.671Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "gitlab.sg.orion.co.com",
                "cname": "gitlab.sg.orion.co.com.s3-website-ap-southeast-1.amazonaws.com",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.44,
                "llm_rationale_vi": "CNAME trỏ trực tiếp đến S3 bucket endpoint, HTTP 404. S3 bucket có thể không tồn tại, nhưng claim cần quyền AWS. Claim_score thấp (44).",
                "llm_labeled_at": "2026-03-28T07:22:00.671Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "play.google.playstore.co.com",
                "cname": "d29hss1p40ftna.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "course.relife.co.com",
                "bella.co.com",
                "www.llm.co.com",
                "download.google.playstore.co.com",
                "gitlab.sg.orion.co.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-28T07:22:00.671Z",
            "usage": {
                "prompt_tokens": 830,
                "completion_tokens": 418,
                "total_tokens": 1248,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 702
            }
        },
        "v5": {
            "processed_at": "2026-03-28T07:22:00.749Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "co.com-2026-03-28"
        }
    }
}