{
    "ok": true,
    "slug": "edu.hk-2026-03-30",
    "stats": {
        "subs": 37029,
        "all": 37029,
        "resolved": 17046,
        "live": 98,
        "takeover": 31,
        "juicy": 93,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 6,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/edu.hk-2026-03-30",
    "takeover_candidates": [
        "9hyp.cis.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32md32fi46y1cxcze.cloudfront.net\u001b[0m]",
        "aisela.cpce-polyu.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mpolyu-sela-webapp.web.app\u001b[0m]",
        "artscentre.creativehk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mbenevolent-kitsune-686dd2.netlify.app\u001b[0m]",
        "cfb.bschool.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "cms.bloom.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "cpr.slp.ent.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-43-198-87-107.ap-east-1.compute.amazonaws.com\u001b[0m]",
        "culink-uat-1-test.cms.cloud.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32md3euj9uz1f1fws.cloudfront.net\u001b[0m]",
        "culink-uat.cms.cloud.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mdvgtcjez2a6zj.cloudfront.net\u001b[0m]",
        "events.boxhill.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32m8ec4096c105c897f.vercel-dns-017.com\u001b[0m]",
        "innovationday2023.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mcuhk-innovation-day-1776388180.ap-east-1.elb.amazonaws.com\u001b[0m]",
        "innovationday2024.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mcuhk-innovation-day-1776388180.ap-east-1.elb.amazonaws.com\u001b[0m]",
        "innovationday2025.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mcuhk-innovation-day-1776388180.ap-east-1.elb.amazonaws.com\u001b[0m]",
        "jcsleepwell.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-jcsleepwellingres-8453f0182f-790109498.ap-east-1.elb.amazonaws.com\u001b[0m]",
        "lifeology.psy.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "mdm.chw.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mfcb45e0a88fc16ac.vercel-dns-017.com\u001b[0m]",
        "meeting.cityu.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-18-138-17-80.ap-southeast-1.compute.amazonaws.com\u001b[0m]",
        "mounthood2024.mect.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mmounthood-website.pages.dev\u001b[0m]",
        "osalp2025-04.sta.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mcuhkstatadm.github.io\u001b[0m]",
        "play.fed.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32md1lmpdrxklojsw.cloudfront.net\u001b[0m]",
        "shop.gsis.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "syhuherbarium.sls.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32md1azz9hlulr3ci.cloudfront.net\u001b[0m]",
        "v33.cis.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mdeld1uuwh9mbl.cloudfront.net\u001b[0m]",
        "woosapp.ws.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mdpvnbsjigdqvb.cloudfront.net\u001b[0m]",
        "www.artscentre.creativehk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mbenevolent-kitsune-686dd2.netlify.app\u001b[0m]",
        "www.cfb.bschool.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.creativehk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mhksc.pages.dev\u001b[0m]",
        "www.fms.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mhksi-lb-2143734264.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "www.ghs.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32md3e41d8msbs2ya.cloudfront.net\u001b[0m]",
        "www.hanacademy.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.ilc.cuhk.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32md29ik69oup1vs3.cloudfront.net\u001b[0m]",
        "www2.ghs.edu.hk [\u001b[35mCNAME\u001b[0m] [\u001b[32md3e41d8msbs2ya.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "edu.hk",
        "version": 4,
        "generated_at": "2026-03-30T15:23:32.604Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 6,
            "kept_strict": 6,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "mail.bwcss.edu.hk",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME trỏ đến ghs.googlehosted.com nhưng trả về 404. Đây có thể là cấu hình Google Workspace chưa hoàn tất hoặc không còn sử dụng, nhưng không dễ claim trực tiếp.",
                "llm_labeled_at": "2026-03-30T15:23:47.373Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "mail.cckln.edu.hk",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Tương tự các host khác, CNAME Google và HTTP 404. Thiếu bằng chứng cụ thể cho thấy có thể chiếm quyền sở hữu qua nhà cung cấp.",
                "llm_labeled_at": "2026-03-30T15:23:47.373Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "mail.delia.edu.hk",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Cấu hình Google trả về lỗi 404. Phổ biến với subdomain chưa được thiết lập đầy đủ, nhưng khả năng claim thấp do không rõ lỗ hổng cụ thể.",
                "llm_labeled_at": "2026-03-30T15:23:47.374Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "mail.greatlearning.edu.hk",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Mẫu CNAME và phản hồi 404 giống nhau. Có thể là false positive nếu domain chỉ đang trong trạng thái chờ cấu hình dịch vụ.",
                "llm_labeled_at": "2026-03-30T15:23:47.374Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "url.cdnis.edu.hk",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "404 Page not found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME Google, HTTP 404 với tiêu đề khác. Không có dấu hiệu rõ ràng về việc có thể chiếm quyền sở hữu dịch vụ từ nhà cung cấp.",
                "llm_labeled_at": "2026-03-30T15:23:47.374Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "www.rccjs.cuhk.edu.hk",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "404 Page not found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "mail.bwcss.edu.hk",
                "mail.cckln.edu.hk",
                "mail.delia.edu.hk",
                "mail.greatlearning.edu.hk",
                "url.cdnis.edu.hk"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-30T15:23:47.374Z",
            "usage": {
                "prompt_tokens": 840,
                "completion_tokens": 451,
                "total_tokens": 1291,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 712
            }
        }
    }
}