{
    "ok": true,
    "slug": "com.qa-2026-03-29",
    "stats": {
        "subs": 11105,
        "all": 11105,
        "resolved": 7975,
        "live": 88,
        "takeover": 60,
        "juicy": 76,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/com.qa-2026-03-29",
    "takeover_candidates": [
        "account.diamondshouse.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "articwebdev-drupal-afh.artic.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mamal-trading-and-distrib-91648.web.app\u001b[0m]",
        "erp.adam.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32madam-erp.web.app\u001b[0m]",
        "my.invisalign.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32msecret-harbor-9523.lit-thicket-2201.herokuspace.com\u001b[0m]",
        "rp.manzil.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mauthrdsv3.web.app\u001b[0m]",
        "tech.roi.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32m9e2260d8fe4a6625.vercel-dns-017.com\u001b[0m]",
        "webdev.qatarsteel.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-qatar-1464485418.us-east-1.elb.amazonaws.com\u001b[0m]",
        "webdev.qcoat.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mwebdev-qcoat-1117219410.us-east-1.elb.amazonaws.com\u001b[0m]",
        "webstore.family.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mwsfmqa-lb01-1552184085.ap-south-1.elb.amazonaws.com\u001b[0m]",
        "www.aldarfoods.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mammarabdulaziz.github.io\u001b[0m]",
        "www.aljameel.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mal-jameel-showroom.myshopify.com\u001b[0m]",
        "www.amaraflowers.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.americantourister.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.artbox.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.azm.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.behzadtrading.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mabn-lb-373622995.ap-south-1.elb.amazonaws.com\u001b[0m]",
        "www.brightsphere.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.clarks.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-89666269-webingre-79634ad316-195578968.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "www.cleopatraholidays.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mcf04bbca1fea2a1c.vercel-dns-017.com\u001b[0m]",
        "www.dary.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.diamondshouse.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.dr-scent.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.eliteedge.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mca30d41e15ee632a.vercel-dns-017.com\u001b[0m]",
        "www.fastbuy.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.frames.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.glaze.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.hayens.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.healthyhome.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.invisalign.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mafternoon-chamber-3473.lit-thicket-2201.herokuspace.com\u001b[0m]",
        "www.iqalattar.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.itech.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.jawdatop.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.joy-scent.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.kate.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mddd6d090642f67d6.vercel-dns-017.com\u001b[0m]",
        "www.kategroup.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32m89353ea511ce0bbc.vercel-dns-017.com\u001b[0m]",
        "www.kay-home.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.metlife.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32md1y2xl8mvdh9vu.cloudfront.net\u001b[0m]",
        "www.odd.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.orientalbakery.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mabn-lb-373622995.ap-south-1.elb.amazonaws.com\u001b[0m]",
        "www.partsy.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.polymore.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mbd982de2c8ef8741.vercel-dns-017.com\u001b[0m]",
        "www.princess-sew.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.qabf.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32md3f9qjtehzvitj.cloudfront.net\u001b[0m]",
        "www.qasco.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mqatar-elb-1847901244.us-east-1.elb.amazonaws.com\u001b[0m]",
        "www.qatarsteel.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mqatar-elb-1847901244.us-east-1.elb.amazonaws.com\u001b[0m]",
        "www.qcoat.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mqcoat-elb-1589473739.us-east-1.elb.amazonaws.com\u001b[0m]",
        "www.qservices.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mabn-lb-373622995.ap-south-1.elb.amazonaws.com\u001b[0m]",
        "www.questplus.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.rkhaa.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.rpme-sanctionguard.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32m33d58d4d2856ad48.vercel-dns-017.com\u001b[0m]",
        "www.samsonite.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.sharqinsurance.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.siemens.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32md3cvvob82dpuhl.cloudfront.net\u001b[0m]",
        "www.societe.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.stg.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.virginhealthbank.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mwww.virginhealthbank.com.qa.s3-website-eu-west-1.amazonaws.com\u001b[0m]",
        "www.wagamama.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32md6xhra0k5bsl0.cloudfront.net\u001b[0m]",
        "www.widam.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.xyzlabz.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.yes.com.qa [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "com.qa",
        "version": 4,
        "generated_at": "2026-03-29T01:11:51.308Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 2,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 1,
            "deep_skipped_below_pool": 1
        },
        "candidates": [
            {
                "host": "articwebdev-drupal-afh.artic.com.qa",
                "cname": "amal-trading-and-distrib-91648.web.app",
                "status": 404,
                "title": "Site Not Found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ tới Firebase nhưng HTTP 404 với 'Site Not Found' là phản hồi mặc định của Firebase cho project chưa được triển khai. Tuy nhiên, đây có thể là môi trường dev\/test đang chờ cấu hình, chưa chắc claim được.",
                "llm_labeled_at": "2026-03-29T01:11:55.604Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "articwebdev-drupal-afh.artic.com.qa"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-29T01:11:55.604Z",
            "usage": {
                "prompt_tokens": 396,
                "completion_tokens": 125,
                "total_tokens": 521,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 268
            }
        }
    }
}