{
    "ok": true,
    "slug": "com.mt-2026-03-29",
    "stats": {
        "subs": 38384,
        "all": 38384,
        "resolved": 27176,
        "live": 135,
        "takeover": 79,
        "juicy": 115,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 5,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 1,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/com.mt-2026-03-29",
    "takeover_candidates": [
        "2-admin.alfred.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32madmin-alfred-malta.web.app\u001b[0m]",
        "account.appytoys.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "account.beautyjar.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "account.boost.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "account.dance.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "admin.alfred.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mbeta-admin-mt.web.app\u001b[0m]",
        "app.cursor.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mdb6bbebff2b3ff7c.vercel-dns-017.com\u001b[0m]",
        "client-portal.arenacapital.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m6f84411e7dc9ad86.vercel-dns-017.com\u001b[0m]",
        "courses.alfred.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "email.al.belair.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.godive.divewise.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.mail.alpharent.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.trade.divewise.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "factory.daves.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32md578181f59f158f7.vercel-dns-016.com\u001b[0m]",
        "help.databyte.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mdatabytehelp.zendesk.com\u001b[0m]",
        "insure.atlas.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mthermal-anenome-qfmwg68as0hf0ok3pvzc94b6.herokudns.com\u001b[0m]",
        "invest.arenacapital.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m6f84411e7dc9ad86.vercel-dns-017.com\u001b[0m]",
        "jamie.azzopardi.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mjamie-shifts.web.app\u001b[0m]",
        "mirror.avis.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32md3fw2tegjcphh3.cloudfront.net\u001b[0m]",
        "offers.bdi.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ieugwe15nn85.cloudfront.net\u001b[0m]",
        "online.atlas.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mdevelopmental-pumpkin-eheh4ryzgytghipygnrx7oss.herokudns.com\u001b[0m]",
        "order.burgerking.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tx221n7s9ohl.cloudfront.net\u001b[0m]",
        "platform.arenacapital.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m6f84411e7dc9ad86.vercel-dns-017.com\u001b[0m]",
        "portal.a4.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32md871857a708881a9.vercel-dns-017.com\u001b[0m]",
        "private.arenacapital.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m6f84411e7dc9ad86.vercel-dns-017.com\u001b[0m]",
        "redirects.azeta.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mbf83412b37ab65be.vercel-dns-017.com\u001b[0m]",
        "secure-mirror.avis.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32md1fxh0o8667f9l.cloudfront.net\u001b[0m]",
        "secure.avis.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mdyfrdxublkjkg.cloudfront.net\u001b[0m]",
        "shopify.businessdoctors-franchise.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m825610.parkingcrew.net\u001b[0m]",
        "shopify.employment360.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m825610.parkingcrew.net\u001b[0m]",
        "stage-web.alfred.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "store.scope.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "team.daves.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m7db431416eb5e94e.vercel-dns-016.com\u001b[0m]",
        "totallyaddickted.blogspot.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mblogspot.l.googleusercontent.com\u001b[0m]",
        "www.3pandas.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.abp.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.abra.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.adorn.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.animechibialley.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.apexdental.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m684e5e13519e2b34.vercel-dns-017.com\u001b[0m]",
        "www.appy.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.appybags.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.appytoys.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.apsfunds.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32maps-redirection-alb-prd-2009209569.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "www.arenacapital.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32marenanetworks.github.io\u001b[0m]",
        "www.avis.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32md2zplifx8qv6ag.cloudfront.net\u001b[0m]",
        "www.avon.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.azeta.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.bacchus.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.backtoschool.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.bags.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mbags-mt.myshopify.com\u001b[0m]",
        "www.bagsmalta.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mbags-mt.myshopify.com\u001b[0m]",
        "www.banqup.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.basement2boardroom.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.basementtoboardroom.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.bathroomdesign.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.bb2000.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mborgbart.github.io\u001b[0m]",
        "www.bdesign.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.beautyjar.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.bloombag.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.bodyboom.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.boost.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.bortex.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.camillericatering.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32md3swnsw30bl5en.cloudfront.net\u001b[0m]",
        "www.cdbeauty.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.celebrations.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.cesca.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.charlies.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.citroenorigins.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mpsa-alb-origins-1808123541.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "www.cmyk.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32m9c8050714c4c6e11.vercel-dns-016.com\u001b[0m]",
        "www.cocoon.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.coffeeshop.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.dance.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.diamondsinternational.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.divewise.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.divino.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mdivinomt.myshopify.com\u001b[0m]",
        "www.dzcapital.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mdezigroup-landing.netlify.app\u001b[0m]",
        "www.ejewels.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32msterling-jewellers-malta.myshopify.com\u001b[0m]",
        "www.emauto.com.mt [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "com.mt",
        "version": 5,
        "generated_at": "2026-03-28T18:33:57.294Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 9,
            "kept_strict": 5,
            "llm_review_pool": 0,
            "dropped_noise": 4,
            "deep_skipped_below_pool": 4
        },
        "candidates": [
            {
                "host": "stage-web.alfred.com.mt",
                "cname": "cname.vercel-dns.com",
                "status": 404,
                "title": null,
                "fingerprint": "vercel",
                "confidence": "high",
                "claim_score": 81,
                "claim_tier": "high",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.81,
                "llm_rationale_vi": "CNAME trỏ đến Vercel, HTTP 404, không có nội dung ứng dụng. Điểm claim cao, khả năng tài nguyên chưa được gắn tenant và có thể claim.",
                "llm_labeled_at": "2026-03-28T18:34:09.692Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/stage-web.alfred.com.mt\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "mail.eastgate.com.mt",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "CNAME trỏ đến Google, HTTP 404 nhưng có thể là cấu hình DNS chung cho dịch vụ Google chưa hoàn tất. Điểm claim trung bình, khả năng claim thấp.",
                "llm_labeled_at": "2026-03-28T18:34:09.692Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/mail.eastgate.com.mt\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_real_score_threshold"
            },
            {
                "host": "mail.ejz.com.mt",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "Tương tự host khác với CNAME Google và 404. Có thể là cấu hình DNS chung, chưa chắc có thể claim.",
                "llm_labeled_at": "2026-03-28T18:34:09.692Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/mail.ejz.com.mt\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_real_score_threshold"
            },
            {
                "host": "mail.elbarestaurant.com.mt",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "CNAME Google, HTTP 404. Mẫu phổ biến cho cấu hình mail chưa hoàn chỉnh, khả năng claim thấp.",
                "llm_labeled_at": "2026-03-28T18:34:09.692Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/mail.elbarestaurant.com.mt\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_real_score_threshold"
            },
            {
                "host": "mail.media-consulta.com.mt",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "Cấu hình tương tự với CNAME Google và lỗi 404. Không có dấu hiệu rõ ràng về tài nguyên có thể claim.",
                "llm_labeled_at": "2026-03-28T18:34:09.692Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/mail.media-consulta.com.mt\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:below_real_score_threshold"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "stage-web.alfred.com.mt",
                "mail.eastgate.com.mt",
                "mail.ejz.com.mt",
                "mail.elbarestaurant.com.mt",
                "mail.media-consulta.com.mt"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-28T18:34:09.692Z",
            "usage": {
                "prompt_tokens": 843,
                "completion_tokens": 405,
                "total_tokens": 1248,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 715
            }
        },
        "v5": {
            "processed_at": "2026-03-28T18:34:09.775Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "com.mt-2026-03-29"
        }
    }
}