{
    "ok": true,
    "slug": "com.ua-2026-03-29",
    "stats": {
        "subs": 26189,
        "all": 26189,
        "resolved": 18735,
        "live": 31,
        "takeover": 30,
        "juicy": 24,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/com.ua-2026-03-29",
    "takeover_candidates": [
        "admin.4real.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcardiovascular-mountain-dctomwqvat9ynureo5bc4gh0.herokudns.com\u001b[0m]",
        "api.4real.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcubed-goji-o7laqw8tco8v96v2mls8frtq.herokudns.com\u001b[0m]",
        "booth.2event.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mqr-scaner-frontend.pages.dev\u001b[0m]",
        "brand.100rokiv.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "bu.162ombr.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32me1b9de2007e37106.vercel-dns-017.com\u001b[0m]",
        "calculator.3dmyk.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mprintcalculator-a49cb.web.app\u001b[0m]",
        "chronicles.0629.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcitysites.github.io\u001b[0m]",
        "croco.0629.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcitysites.github.io\u001b[0m]",
        "e-images.4x4ok.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32m4x4-images-editor.web.app\u001b[0m]",
        "k-matic.2358.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xohsk0s7rn49.cloudfront.net\u001b[0m]",
        "landing.1001vakansiia.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "soarvo.2358.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32md18bn4mu9ig1a5.cloudfront.net\u001b[0m]",
        "test.2doit.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32msergeyyurkov.github.io\u001b[0m]",
        "translate.0629.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcitysites.github.io\u001b[0m]",
        "verifier.4x4ok.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mx4line1.web.app\u001b[0m]",
        "www.044pizza.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32md319w6duimmvf9.cloudfront.net\u001b[0m]",
        "www.100rokiv.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.12-21.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.162ombr.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32m64dca71a27ffcabe.vercel-dns-017.com\u001b[0m]",
        "www.24serpnya.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.360design.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.3dtech.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.3z.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32m83ef197201a4dcef.vercel-dns-016.com\u001b[0m]",
        "www.450prykarpattia.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.4real.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mtrapezoidal-camel-1tnz1i0av8sryozom8hg03fe.herokudns.com\u001b[0m]",
        "www.5-kanal.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mchristsomi.github.io\u001b[0m]",
        "www.5000miles.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "www.brand.100rokiv.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.bu.162ombr.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32me1b9de2007e37106.vercel-dns-017.com\u001b[0m]",
        "www.sonatazvit.com.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32msonatazvit.netlify.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "com.ua",
        "version": 4,
        "generated_at": "2026-03-29T02:35:55.805Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 2,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 1,
            "deep_skipped_below_pool": 1
        },
        "candidates": [
            {
                "host": "mail.opp.com.ua",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ tới ghs.googlehosted.com (Google) nhưng HTTP 404 có thể chỉ là trang lỗi mặc định của Google, không chắc chắn resource bị bỏ hoang. Dịch vụ Firebase thường được cấu hình rõ ràng.",
                "llm_labeled_at": "2026-03-29T02:35:59.631Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "mail.opp.com.ua"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-29T02:35:59.631Z",
            "usage": {
                "prompt_tokens": 389,
                "completion_tokens": 111,
                "total_tokens": 500,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 261
            }
        }
    }
}