{
    "ok": true,
    "slug": "dartmouth.edu-2026-03-29",
    "stats": {
        "subs": 13884,
        "all": 13884,
        "resolved": 8955,
        "live": 87,
        "takeover": 87,
        "juicy": 104,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 3,
        "takeover_hot_claim": 2,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 3,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/dartmouth.edu-2026-03-29",
    "takeover_candidates": [
        "3dcircuits.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "ah-lab.cs.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "aiclub.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdaba1877ab8f9fdc.vercel-dns-017.com\u001b[0m]",
        "anivision.dali.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdali-lab.github.io\u001b[0m]",
        "api-dev.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mae4bfc76abe04470fbc46a5bdb2a9635-735077640.us-east-1.elb.amazonaws.com\u001b[0m]",
        "api-preprod.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32ma6d2a9ceb785e40a7a2cc6446504f537-1610824734.us-east-1.elb.amazonaws.com\u001b[0m]",
        "api.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32ma3d7abcd342b84df6a517d60455ebb3d-530524290.us-east-1.elb.amazonaws.com\u001b[0m]",
        "automations.dali.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32malbk0oe9mf.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "bioimpedance.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "brainidb.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "brand.thayer.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "career.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "cas-mongo-prod-1-us-east-1.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-a3fefbd26731b40c395bd98246ca11dd-1614318163.us-east-1.elb.amazonaws.com\u001b[0m]",
        "cas-mongo-prod-2-us-east-1.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-aded452bf10c04cd5a53a4e34e0aeb67-343834452.us-east-1.elb.amazonaws.com\u001b[0m]",
        "cas-mongo-prod-3-us-east-1.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ac37f261024044861b8d6f6f28a69ee3-796707579.us-east-1.elb.amazonaws.com\u001b[0m]",
        "challenge.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3lzueb7sul42k.cloudfront.net\u001b[0m]",
        "cim.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "coursera-asst-mgr.thayer.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-3-95-22-87.compute-1.amazonaws.com\u001b[0m]",
        "crobots.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "crowdfund.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md2yfeari2i245m.cloudfront.net\u001b[0m]",
        "dantelab.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mddp-production.herokuapp.com\u001b[0m]",
        "dbec.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "dcmb.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcmb.herokuapp.com\u001b[0m]",
        "defmech.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "developer.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32maba8b44d728ab11e9a3d30e8b8a247bf-573175485.us-east-1.elb.amazonaws.com\u001b[0m]",
        "djsa.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mafebaeba518434035b9289178fb1c689-1500943203.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dmaps.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "energy.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdartmouthenergyprogram.herokuapp.com\u001b[0m]",
        "engs20book.thayer.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mpetrabt.github.io\u001b[0m]",
        "esg-calendar.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md1pzr00aos6eeu.cloudfront.net\u001b[0m]",
        "events.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7412761943fd40acb738486239a5513-1236575412.us-east-1.elb.amazonaws.com\u001b[0m]",
        "express.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "express.thayer.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "git-dev.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32ma48674b87176a48bdaf38ef28b7a60fa-1033153123.us-east-1.elb.amazonaws.com\u001b[0m]",
        "git-preprod.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mabe268d88181811e9a23312a7d5c0be5-224100184.us-east-1.elb.amazonaws.com\u001b[0m]",
        "git-sandbox.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mab4fa5108f991477a9113cbe0a925775-806904382.us-east-1.elb.amazonaws.com\u001b[0m]",
        "give.thayer.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "givingchallenge.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md2yfeari2i245m.cloudfront.net\u001b[0m]",
        "go.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "healthpal-api-test.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mhealthpal-api-test-1573595026.us-east-1.elb.amazonaws.com\u001b[0m]",
        "healthpal-test.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mhealthpal-test-elb-1607271496.us-east-1.elb.amazonaws.com\u001b[0m]",
        "healthpal.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mhealthpal-726052037.us-east-1.elb.amazonaws.com\u001b[0m]",
        "hopushers.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32ma99f2e5a98162499db464103ba89554e-871975878.us-east-1.elb.amazonaws.com\u001b[0m]",
        "hyperspace.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mhyperspace-alb-1391433817.us-east-1.elb.amazonaws.com\u001b[0m]",
        "integration-mongo-dev-1.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ac57c2ee9dda5483a9e13f641d63e4c6-966424498.us-east-1.elb.amazonaws.com\u001b[0m]",
        "integration-mongo-dev-2.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-a9e96831da74e482c807693fee629dd4-1574857935.us-east-1.elb.amazonaws.com\u001b[0m]",
        "integration-mongo-dev-3.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-a5ae424da92c340bc98f6514084e8ccb-524014365.us-east-1.elb.amazonaws.com\u001b[0m]",
        "integration-mongo-preprod-1.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mae76b4cd84cc64cebb68ce368647dbd4-b6490ad3cbd4cb8b.elb.us-east-1.amazonaws.com\u001b[0m]",
        "integration-mongo-preprod-2.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-a06b4a680ca6d4cb9a45832aacb16c0d-342021455.us-east-1.elb.amazonaws.com\u001b[0m]",
        "integration-mongo-preprod-3.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-a526d51b2eafc48dc8272c1f2d3d76b9-1886104862.us-east-1.elb.amazonaws.com\u001b[0m]",
        "integration-mongo-prod-1.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-a9d340f45508a4c8fa6f391c4d9caacc-597114438.us-east-1.elb.amazonaws.com\u001b[0m]",
        "integration-mongo-prod-2.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-a0662961e6ad140089f706fff7ab6c3b-99484027.us-east-1.elb.amazonaws.com\u001b[0m]",
        "integration-mongo-prod-3.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ac3e7577710b3450f85b8b9600af6971-1465309662.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ipam-report.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhwu26liv7p22.cloudfront.net\u001b[0m]",
        "ipam-reports.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhwu26liv7p22.cloudfront.net\u001b[0m]",
        "ivy.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "lynd.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "mdsg.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "medadmissions.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mzap-hosted1-lb2-390548860.us-east-1.elb.amazonaws.com\u001b[0m]",
        "mem.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "mem.thayer.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "mirl.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "multimodal.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "nrt.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "online-courses.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "or.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "outage-dev.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdpngcqzrm5sxz.cloudfront.net\u001b[0m]",
        "outage.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdpngcqzrm5sxz.cloudfront.net\u001b[0m]",
        "ovis-dplan.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdali-lab.github.io\u001b[0m]",
        "pmic.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "polytrauma.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "radar-dev.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mradar-dev-elb-818603008.us-east-1.elb.amazonaws.com\u001b[0m]",
        "radar.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mradar-prod-elb-1486027778.us-east-1.elb.amazonaws.com\u001b[0m]",
        "rbaef.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "rc.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdartmouth.github.io\u001b[0m]",
        "rci-interview.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-44-201-174-100.compute-1.amazonaws.com\u001b[0m]",
        "rice.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "rocky.dali.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mna-west1.surge.sh\u001b[0m]",
        "shapethefuture.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdali-lab.github.io\u001b[0m]",
        "sixsigma.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "static-status.aws.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md31pnp0zexiez3.cloudfront.net\u001b[0m]",
        "sweetgoals.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-3-13-247-154.us-east-2.compute.amazonaws.com\u001b[0m]",
        "thayer150.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "tr.engineering.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mthayer.github.io\u001b[0m]",
        "ugresearch.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mab3ae575b12f5458ab58c41d1f35c565-1827473041.us-east-1.elb.amazonaws.com\u001b[0m]",
        "wifi.aws.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ce5ux1244lab.cloudfront.net\u001b[0m]",
        "www.ah-lab.cs.dartmouth.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "dartmouth.edu",
        "version": 5,
        "generated_at": "2026-03-29T15:38:26.415Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 7,
            "kept_strict": 3,
            "llm_review_pool": 0,
            "dropped_noise": 4,
            "deep_skipped_below_pool": 4
        },
        "candidates": [
            {
                "host": "dcmb.dartmouth.edu",
                "cname": "dcmb.herokuapp.com",
                "status": 404,
                "title": "No such app",
                "fingerprint": "heroku",
                "confidence": "high",
                "claim_score": 100,
                "claim_tier": "critical",
                "signals": [
                    "\\bno such app\\b"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.95,
                "llm_rationale_vi": "CNAME trỏ tới Heroku với HTTP 404 'No such app', cho thấy ứng dụng chưa được gắn tenant và có thể claim.",
                "llm_labeled_at": "2026-03-29T15:38:34.443Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/dcmb.dartmouth.edu\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "energy.dartmouth.edu",
                "cname": "dartmouthenergyprogram.herokuapp.com",
                "status": 404,
                "title": "No such app",
                "fingerprint": "heroku",
                "confidence": "high",
                "claim_score": 100,
                "claim_tier": "critical",
                "signals": [
                    "\\bno such app\\b"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.95,
                "llm_rationale_vi": "CNAME trỏ tới Heroku với HTTP 404 'No such app', cho thấy ứng dụng chưa được gắn tenant và có thể claim.",
                "llm_labeled_at": "2026-03-29T15:38:34.443Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/energy.dartmouth.edu\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "go.engineering.dartmouth.edu",
                "cname": "thayer.github.io",
                "status": 404,
                "title": "Page not found · GitHub Pages",
                "fingerprint": "github_pages",
                "confidence": "high",
                "claim_score": 62,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới GitHub Pages nhưng HTTP 404 'Page not found' có thể chỉ là trang không tồn tại, không chắc chắn có thể claim tài khoản.",
                "llm_labeled_at": "2026-03-29T15:38:34.443Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/go.engineering.dartmouth.edu\/",
                    "http_status": 404,
                    "title_snippet": "Page not found · GitHub Pages",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "dcmb.dartmouth.edu",
                "energy.dartmouth.edu",
                "go.engineering.dartmouth.edu"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-29T15:38:34.443Z",
            "usage": {
                "prompt_tokens": 630,
                "completion_tokens": 225,
                "total_tokens": 855,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 502
            }
        },
        "v5": {
            "processed_at": "2026-03-29T15:38:34.524Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "dartmouth.edu-2026-03-29"
        }
    }
}