{
    "ok": true,
    "slug": "coinmarketcap.com-2026-03-28",
    "stats": {
        "subs": 77,
        "all": 77,
        "resolved": 42,
        "live": 38,
        "takeover": 33,
        "juicy": 33,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/coinmarketcap.com-2026-03-28",
    "takeover_candidates": [
        "3rdparty-apis.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bcj7np2th6mv.cloudfront.net\u001b[0m]",
        "academy-public.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1em50r515691c.cloudfront.net\u001b[0m]",
        "api.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bcj7np2th6mv.cloudfront.net\u001b[0m]",
        "blockchain.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2iw9rsqnatorf.cloudfront.net\u001b[0m]",
        "blog.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hgutvciyfmxh.cloudfront.net\u001b[0m]",
        "br.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hgutvciyfmxh.cloudfront.net\u001b[0m]",
        "conference.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxwcy8arbvove.cloudfront.net\u001b[0m]",
        "dapi.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md7f14j25263n0.cloudfront.net\u001b[0m]",
        "dex.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3l60bcxywep8m.cloudfront.net\u001b[0m]",
        "dws.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdyr3apls2b0gp.cloudfront.net\u001b[0m]",
        "files.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1b9efmh7kq1bt.cloudfront.net\u001b[0m]",
        "infoimage.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1r1fe250wqhkz.cloudfront.net\u001b[0m]",
        "interest.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bcj7np2th6mv.cloudfront.net\u001b[0m]",
        "it.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hgutvciyfmxh.cloudfront.net\u001b[0m]",
        "link.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2etdy559lg151.cloudfront.net\u001b[0m]",
        "memews-eu.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtf-sintral-prod-meme-pump-ws-alb-1050887519.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "memews-us.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtf-sintral-prod-meme-pump-ws-alb-1231714321.us-east-1.elb.amazonaws.com\u001b[0m]",
        "memews.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtf-sintral-prod-meme-pump-ws-alb-766111611.ap-northeast-1.elb.amazonaws.com\u001b[0m]",
        "portal-api.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdq4fzes75m7bc.cloudfront.net\u001b[0m]",
        "pro-api.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdq4fzes75m7bc.cloudfront.net\u001b[0m]",
        "s2.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxi63l351rbd5.cloudfront.net\u001b[0m]",
        "s3.beta.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3rfdijvsuvm0q.cloudfront.net\u001b[0m]",
        "s3.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md16d9umwjd1sxm.cloudfront.net\u001b[0m]",
        "sandbox.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bcj7np2th6mv.cloudfront.net\u001b[0m]",
        "shop.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxwcy8arbvove.cloudfront.net\u001b[0m]",
        "support.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcoinmarketcap.zendesk.com\u001b[0m]",
        "testingstatic.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ryd4kc560k7p.cloudfront.net\u001b[0m]",
        "url-e.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3urtzfigvlthh.cloudfront.net\u001b[0m]",
        "url-newsletter.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3urtzfigvlthh.cloudfront.net\u001b[0m]",
        "web3.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhdbf2xhod9b.cloudfront.net\u001b[0m]",
        "webflow.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hgutvciyfmxh.cloudfront.net\u001b[0m]",
        "widgets.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hgutvciyfmxh.cloudfront.net\u001b[0m]",
        "www.coinmarketcap.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hgutvciyfmxh.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "coinmarketcap.com",
        "version": 4,
        "generated_at": "2026-03-28T11:40:46.484Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 14,
            "kept_strict": 0,
            "llm_review_pool": 6,
            "dropped_noise": 14,
            "deep_skipped_below_pool": 8
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "api.coinmarketcap.com",
                "cname": "d1bcj7np2th6mv.cloudfront.net",
                "status": 404,
                "title": "coinmarketcap.com",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 có thể là cấu hình ứng dụng hợp lệ, không phải bucket S3 bị bỏ trống. Điểm claim thấp và không có tín hiệu rõ ràng.",
                "llm_labeled_at": "2026-03-28T11:41:00.103Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "dws.coinmarketcap.com",
                "cname": "dyr3apls2b0gp.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "Tương tự, CloudFront với 404 có thể là endpoint được cấu hình nhưng không có nội dung. Không có bằng chứng resource chưa được claim.",
                "llm_labeled_at": "2026-03-28T11:41:00.103Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "link.coinmarketcap.com",
                "cname": "d2etdy559lg151.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CloudFront trả về 404 với tiêu đề rõ ràng. Đây có thể là trang lỗi được thiết lập, không phải tài nguyên có thể chiếm đoạt.",
                "llm_labeled_at": "2026-03-28T11:41:00.103Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "portal-api.coinmarketcap.com",
                "cname": "dq4fzes75m7bc.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "Cùng CNAME với pro-api, có vẻ là cấu hình backend chung. HTTP 404 không đủ để kết luận có thể claim.",
                "llm_labeled_at": "2026-03-28T11:41:00.103Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "pro-api.coinmarketcap.com",
                "cname": "dq4fzes75m7bc.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "Chia sẻ CNAME với portal-api, cho thấy đây là cấu hình có chủ đích. Khả năng cao là false positive.",
                "llm_labeled_at": "2026-03-28T11:41:00.103Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "sandbox.coinmarketcap.com",
                "cname": "d1bcj7np2th6mv.cloudfront.net",
                "status": 502,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "low",
                "claim_score": 43,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "api.coinmarketcap.com",
                "dws.coinmarketcap.com",
                "link.coinmarketcap.com",
                "portal-api.coinmarketcap.com",
                "pro-api.coinmarketcap.com"
            ],
            "batch_sources": [
                "pool",
                "pool",
                "pool",
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-28T11:41:00.103Z",
            "usage": {
                "prompt_tokens": 839,
                "completion_tokens": 402,
                "total_tokens": 1241,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 711
            }
        }
    }
}