{
    "ok": true,
    "slug": "f5.com-2026-03-31",
    "stats": {
        "subs": 1626,
        "all": 1626,
        "resolved": 292,
        "live": 194,
        "takeover": 15,
        "juicy": 27,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 5,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/f5.com-2026-03-31",
    "takeover_candidates": [
        "cdn-test.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md36jra3kqzpg6x.cloudfront.net\u001b[0m]",
        "cdn.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1cm8zmm34tddg.cloudfront.net\u001b[0m]",
        "clouddocs.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2k41ekmsycm08.cloudfront.net\u001b[0m]",
        "dev-api.software.downloads.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md37zt1udeu2596.cloudfront.net\u001b[0m]",
        "dev.esdp.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1vq88nhle2t28.cloudfront.net\u001b[0m]",
        "email.nginxnews.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "gslink.customersuccess.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdnibkvllz1zjv.cloudfront.net\u001b[0m]",
        "gsnlink.customersuccess.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2rk7z7itztpt1.cloudfront.net\u001b[0m]",
        "gsnlink.feedback.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2rk7z7itztpt1.cloudfront.net\u001b[0m]",
        "opensource.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mf5.github.io\u001b[0m]",
        "shop.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "stage-api.software.downloads.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hadagqn4r0hw.cloudfront.net\u001b[0m]",
        "support.education.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mf5education.zendesk.com\u001b[0m]",
        "testdrive.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdtmi2gbfucizs.cloudfront.net\u001b[0m]",
        "trust.f5.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m32a79bbc8a5e9eca.vercel-dns-013.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "f5.com",
        "version": 4,
        "generated_at": "2026-03-31T07:39:23.172Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 12,
            "kept_strict": 5,
            "llm_review_pool": 3,
            "dropped_noise": 7,
            "deep_skipped_below_pool": 4
        },
        "candidates": [
            {
                "host": "api-dev.botdefense.f5.com",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME trỏ đến ghs.googlehosted.com nhưng HTTP 404. Có thể là subdomain không được cấu hình đúng trên Google, nhưng không đủ bằng chứng cho claim trực tiếp.",
                "llm_labeled_at": "2026-03-31T07:39:37.437Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "api-qa.botdefense.f5.com",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Tương tự các host khác: CNAME Google, HTTP 404. Không có dấu hiệu rõ ràng về việc có thể claim tài nguyên từ nhà cung cấp.",
                "llm_labeled_at": "2026-03-31T07:39:37.437Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "api-stg.botdefense.f5.com",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Cấu hình giống nhau, lỗi 404. Khả năng cao là subdomain chưa được triển khai hoặc đã bỏ, nhưng không phải lỗ hổng claim được.",
                "llm_labeled_at": "2026-03-31T07:39:37.437Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "api.botdefense.f5.com",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Mẫu chung: CNAME Google, trả về 404. Thiếu bằng chứng cụ thể về việc tenant chưa được gán hoặc có thể chiếm quyền điều khiển.",
                "llm_labeled_at": "2026-03-31T07:39:37.437Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "api.raas.riskservices.f5.com",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME Google, HTTP 404 với title 'Error'. Không có tín hiệu nào cho thấy đây là false positive tích cực hoặc có thể claim được.",
                "llm_labeled_at": "2026-03-31T07:39:37.437Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [
            {
                "host": "gslink.customersuccess.f5.com",
                "cname": "dnibkvllz1zjv.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "gsnlink.customersuccess.f5.com",
                "cname": "d2rk7z7itztpt1.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "gsnlink.feedback.f5.com",
                "cname": "d2rk7z7itztpt1.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "api-dev.botdefense.f5.com",
                "api-qa.botdefense.f5.com",
                "api-stg.botdefense.f5.com",
                "api.botdefense.f5.com",
                "api.raas.riskservices.f5.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-31T07:39:37.437Z",
            "usage": {
                "prompt_tokens": 827,
                "completion_tokens": 434,
                "total_tokens": 1261,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 699
            }
        }
    }
}