{
    "ok": true,
    "slug": "db.com-2026-03-29",
    "stats": {
        "subs": 4887,
        "all": 4887,
        "resolved": 1882,
        "live": 943,
        "takeover": 33,
        "juicy": 33,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/db.com-2026-03-29",
    "takeover_candidates": [
        "ams-dev.daf-es.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md250g71adekw24.cloudfront.net\u001b[0m]",
        "ams-dev.developer.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1pdwwwtpnya2q.cloudfront.net\u001b[0m]",
        "ams-dev.india.pbc.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdkaytm4vmivi6.cloudfront.net\u001b[0m]",
        "ams-dev.wealth.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2vwwvafy7e7qd.cloudfront.net\u001b[0m]",
        "ams-dev.wrdo-es.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdf6fd96gnuou6.cloudfront.net\u001b[0m]",
        "ams-int.daf-es.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlueop2u9cow0.cloudfront.net\u001b[0m]",
        "ams-int.developer.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3lc1nmpb3by1j.cloudfront.net\u001b[0m]",
        "ams-int.india.pbc.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdbkf858oiccj6.cloudfront.net\u001b[0m]",
        "ams-int.wealth.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md5gf0xpsoe1bg.cloudfront.net\u001b[0m]",
        "ams-int.wrdo-es.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdy2dz83dh77k0.cloudfront.net\u001b[0m]",
        "ams-prd.developer.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3l36yiffpv9ze.cloudfront.net\u001b[0m]",
        "ams-uat.daf-es.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2wbsm4kme91ah.cloudfront.net\u001b[0m]",
        "ams-uat.developer.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3o8q5uzbbv8n4.cloudfront.net\u001b[0m]",
        "ams-uat.india.pbc.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2rys162ylvulf.cloudfront.net\u001b[0m]",
        "ams-uat.wealth.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3s2xxbqewdqer.cloudfront.net\u001b[0m]",
        "ams-uat.wrdo-es.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md40suazrl43k2.cloudfront.net\u001b[0m]",
        "cdn.devinvestmentbank.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdk0r2c3391pa5.cloudfront.net\u001b[0m]",
        "cdn.news.investmentbank.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xks1b1sb5ozw.cloudfront.net\u001b[0m]",
        "cdn.notification.investmentbank.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xzklu9lploq2.cloudfront.net\u001b[0m]",
        "cdn.uatinvestmentbank.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md29rw4am4elhnq.cloudfront.net\u001b[0m]",
        "daf-es.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdeg7k8z93byyr.cloudfront.net\u001b[0m]",
        "dbeasydigital-pmi-analytics.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdixe65nnvgqrk.cloudfront.net\u001b[0m]",
        "dbeasydigital-pmi.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1rkiidtatly90.cloudfront.net\u001b[0m]",
        "fnbx-anly.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1z25toofhi5ii.cloudfront.net\u001b[0m]",
        "fnbx.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3kkezlm0vdqcy.cloudfront.net\u001b[0m]",
        "india.pbc.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdn6pbzldbew4w.cloudfront.net\u001b[0m]",
        "proxy.xmarkets.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshm-cc-xmarkets-36636020.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "uat.dbeasydigital-pmi-analytics.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2fqs2uxqtkk28.cloudfront.net\u001b[0m]",
        "uat.dbeasydigital-pmi.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1lqx10dmapszg.cloudfront.net\u001b[0m]",
        "uat.fnbx-anly.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md37bq43geb5ibu.cloudfront.net\u001b[0m]",
        "uat.fnbx.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1g3a28zghmewj.cloudfront.net\u001b[0m]",
        "wealth.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3w3uhu8r4ham8.cloudfront.net\u001b[0m]",
        "wrdo-es.db.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3k679cyto8wuy.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "db.com",
        "version": 4,
        "generated_at": "2026-03-29T16:11:02.890Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 22,
            "kept_strict": 0,
            "llm_review_pool": 1,
            "dropped_noise": 22,
            "deep_skipped_below_pool": 21
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "ams-prd.developer.db.com",
                "cname": "d3l36yiffpv9ze.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 không đủ để kết luận có thể chiếm quyền. Có thể là trang chưa triển khai hoặc lỗi cấu hình nhưng không chắc chắn có thể claim.",
                "llm_labeled_at": "2026-03-29T16:11:07.430Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "ams-prd.developer.db.com"
            ],
            "batch_sources": [
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-29T16:11:07.430Z",
            "usage": {
                "prompt_tokens": 391,
                "completion_tokens": 109,
                "total_tokens": 500,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 263
            }
        }
    }
}