{
    "ok": true,
    "slug": "com.lb-2026-03-29",
    "stats": {
        "subs": 11544,
        "all": 11544,
        "resolved": 6007,
        "live": 103,
        "takeover": 90,
        "juicy": 78,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 3,
        "takeover_hot_claim": 2,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 2,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/com.lb-2026-03-29",
    "takeover_candidates": [
        "account.awtar.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "account.enoteca.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "account.kal.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "account.techtronics.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "admin.autotrader.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mireland-1-production-alb-1724539315.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "app.blue.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32maee1655938f7abd6.vercel-dns-016.com\u001b[0m]",
        "audit.chatbot.alfa.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32malfa-alb-1281991856.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "cdn.autotrader.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32md1tdfyy4olvmla.cloudfront.net\u001b[0m]",
        "clients.asl.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "dashboard.yallapay.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32md3u8swnag5qvjo.cloudfront.net\u001b[0m]",
        "demo.vivly.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m07d2411b654687f0.vercel-dns-017.com\u001b[0m]",
        "email.marketing.nailingerie.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.train.newhorizons.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "help.olx.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32molx-mena-lb.zendesk.com\u001b[0m]",
        "mip.mojo.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mmojo-admin-portal-1269877830.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "mirror.avis.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32md17vt9jkwgeyro.cloudfront.net\u001b[0m]",
        "mojoadmin.mojo.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mmojo-admin-portal-1269877830.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "neobank-dev.mojo.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mmojo-neobank-dev.web.app\u001b[0m]",
        "next.aliwaa.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m7769be734172e40c.vercel-dns-016.com\u001b[0m]",
        "next.edm.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m6db6768ffe0064dc.vercel-dns-016.com\u001b[0m]",
        "next.egv.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "next.mmcare.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "next.sadco.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m4e266e1bca4a9ae5.vercel-dns-016.com\u001b[0m]",
        "next.thecoachingplatform.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "pfg.dominos.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mdominos-pizza-for-good.firebaseapp.com\u001b[0m]",
        "portal.dash.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "projects.cet.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m14f6c3fb4457399e.vercel-dns-017.com\u001b[0m]",
        "secure-mirror.avis.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mdez97mn952wdc.cloudfront.net\u001b[0m]",
        "secure.avis.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32md3murnkrq8jvfv.cloudfront.net\u001b[0m]",
        "shop.gantrouge.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "soft.as.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m3eebb22f6e79b7eb.vercel-dns-017.com\u001b[0m]",
        "stage.mmcare.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "stage.thecoachingplatform.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "staging.vivly.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m07d2411b654687f0.vercel-dns-017.com\u001b[0m]",
        "traefik.chatbot.alfa.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32malfa-alb-1281991856.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "winthetrip.hallab.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.albohsali.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.amer.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.api.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.avis.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32md1cf7ru92dilgx.cloudfront.net\u001b[0m]",
        "www.awtar.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.banque-habitat.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mesken-alb-928294575.us-east-1.elb.amazonaws.com\u001b[0m]",
        "www.blackview.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.bloominbox.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.capellisport.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.carters.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.catellanismith.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.cf.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.ciatec.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mapex-loadbalancer.netlify.com\u001b[0m]",
        "www.citea.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.crocs.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.depechemode.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.emca.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.enoteca.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.fungoofun.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.holcim.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32minternet-webfactory-prd2-073a9884faab1ee5.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "www.invisalign.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mwww.invisalign.com.lb.herokudns.com\u001b[0m]",
        "www.jameati.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.jarvis-care.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.kal.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.lacoste.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.lansinoh.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.lei.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m79fec51a6867f767.vercel-dns-017.com\u001b[0m]",
        "www.lulu.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.maakebeauty.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.metlife.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32md1y2xl8mvdh9vu.cloudfront.net\u001b[0m]",
        "www.moneygram.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mmoneygram.netlifyglobalcdn.com\u001b[0m]",
        "www.moussacastle.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m88dbbf1bddae670a.vercel-dns-017.com\u001b[0m]",
        "www.mustela.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mmustela-int-redirect-273895009.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "www.nevo.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.ofinance.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32me7b8e9c1fb527d73.vercel-dns-016.com\u001b[0m]",
        "www.pandorashop.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.petit-bateau.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.platinumpace.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.revitalash.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.righttrack.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mright-track-lb.myshopify.com\u001b[0m]",
        "www.sadco.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m4e266e1bca4a9ae5.vercel-dns-016.com\u001b[0m]",
        "www.sib.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32m74a6405e8cea3442.vercel-dns-016.com\u001b[0m]",
        "www.socks.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.softmind.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mc6cc17598b8d065b.vercel-dns-017.com\u001b[0m]",
        "www.solidolive.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.spc.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32md1t9tusozycq9g.cloudfront.net\u001b[0m]",
        "www.sprinkles.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.swarovski.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.techtronics.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.thebodyshop.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.uccm.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32muccm.netlify.app\u001b[0m]",
        "www.vitalbaby.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.whiteandmore.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.ximivogue.com.lb [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "com.lb",
        "version": 5,
        "generated_at": "2026-03-28T17:54:31.748Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 5,
            "kept_strict": 3,
            "llm_review_pool": 0,
            "dropped_noise": 2,
            "deep_skipped_below_pool": 2
        },
        "candidates": [
            {
                "host": "next.egv.com.lb",
                "cname": "cname.vercel-dns.com",
                "status": 404,
                "title": null,
                "fingerprint": "vercel",
                "confidence": "high",
                "claim_score": 81,
                "claim_tier": "high",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ đến vercel-dns.com, HTTP 404, không có nội dung. Vercel thường cho phép claim nếu chưa triển khai dự án.",
                "llm_labeled_at": "2026-03-28T17:54:40.277Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/next.egv.com.lb\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "www.jameati.com.lb",
                "cname": "cname.vercel-dns.com",
                "status": 404,
                "title": null,
                "fingerprint": "vercel",
                "confidence": "high",
                "claim_score": 81,
                "claim_tier": "high",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "Tương tự host trên: CNAME vercel, HTTP 404. Không có dấu hiệu tenant hợp lệ, khả năng cao có thể claim.",
                "llm_labeled_at": "2026-03-28T17:54:40.277Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/www.jameati.com.lb\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "neobank-dev.mojo.com.lb",
                "cname": "mojo-neobank-dev.web.app",
                "status": 404,
                "title": "Site Not Found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ đến Firebase (web.app), HTTP 404 với tiêu đề 'Site Not Found'. Firebase thường bảo vệ, khó claim trừ khi dự án bị xóa hoàn toàn.",
                "llm_labeled_at": "2026-03-28T17:54:40.277Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/neobank-dev.mojo.com.lb\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_real_score_threshold"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "next.egv.com.lb",
                "www.jameati.com.lb",
                "neobank-dev.mojo.com.lb"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-28T17:54:40.277Z",
            "usage": {
                "prompt_tokens": 602,
                "completion_tokens": 248,
                "total_tokens": 850,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 474
            }
        },
        "v5": {
            "processed_at": "2026-03-28T17:54:40.349Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "com.lb-2026-03-29"
        }
    }
}