{
    "ok": true,
    "slug": "fiverr.com-2026-03-31",
    "stats": {
        "subs": 298,
        "all": 298,
        "resolved": 224,
        "live": 202,
        "takeover": 26,
        "juicy": 27,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 4,
        "takeover_hot_claim": 4,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/fiverr.com-2026-03-31",
    "takeover_candidates": [
        "app.develop.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-develop-web-apps-338552561.us-east-1.elb.amazonaws.com\u001b[0m]",
        "app.stage.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-stage-web-apps-1099414838.us-east-1.elb.amazonaws.com\u001b[0m]",
        "blog.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "cdn.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1r8hts3mirs62.cloudfront.net\u001b[0m]",
        "cdn10.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdfkno3dtzeq4c.cloudfront.net\u001b[0m]",
        "cdn11.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdfkno3dtzeq4c.cloudfront.net\u001b[0m]",
        "cdn13.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdfkno3dtzeq4c.cloudfront.net\u001b[0m]",
        "cdn20.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nt7j7ljjsiah.cloudfront.net\u001b[0m]",
        "cdn21.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nt7j7ljjsiah.cloudfront.net\u001b[0m]",
        "cdn22.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nt7j7ljjsiah.cloudfront.net\u001b[0m]",
        "cdn23.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nt7j7ljjsiah.cloudfront.net\u001b[0m]",
        "help-partnerships.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfiverraffiliates.zendesk.com\u001b[0m]",
        "help-pro.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfiverr-pro.zendesk.com\u001b[0m]",
        "help.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfiverr.zendesk.com\u001b[0m]",
        "houston.dev.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-k8s-default-houstona-38f2f27181-584042324.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "pages.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "party.develop.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bfrz441bkmim.cloudfront.net\u001b[0m]",
        "pci-internal.dev.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpci-environment-alb-99390036.us-east-1.elb.amazonaws.com\u001b[0m]",
        "pci-internal.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpci-environment-compliant-alb-1662241948.us-east-1.elb.amazonaws.com\u001b[0m]",
        "post.stage.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-stage-web-apps-1099414838.us-east-1.elb.amazonaws.com\u001b[0m]",
        "refs.develop.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bfrz441bkmim.cloudfront.net\u001b[0m]",
        "refs.stage.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-stage-web-apps-1099414838.us-east-1.elb.amazonaws.com\u001b[0m]",
        "testimonials.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2wols03m0h26c.cloudfront.net\u001b[0m]",
        "updates.develop.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bfrz441bkmim.cloudfront.net\u001b[0m]",
        "updates.stage.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-stage-web-apps-1099414838.us-east-1.elb.amazonaws.com\u001b[0m]",
        "www.party.develop.workspace.fiverr.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bfrz441bkmim.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "fiverr.com",
        "version": 5,
        "generated_at": "2026-03-31T14:41:12.481Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 9,
            "kept_strict": 4,
            "llm_review_pool": 0,
            "dropped_noise": 5,
            "deep_skipped_below_pool": 5
        },
        "candidates": [
            {
                "host": "cdn20.fiverr.com",
                "cname": "d2nt7j7ljjsiah.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng lỗi 502 'request could not be satisfied' thường là cấu hình sai hoặc backend lỗi, không phải resource chưa claim.",
                "llm_labeled_at": "2026-03-31T14:41:22.803Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/cdn20.fiverr.com\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            },
            {
                "host": "cdn21.fiverr.com",
                "cname": "d2nt7j7ljjsiah.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự cdn20, lỗi CloudFront 502 thường do cấu hình DNS hoặc origin, không cho thấy tài nguyên bị bỏ trống để claim.",
                "llm_labeled_at": "2026-03-31T14:41:22.803Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/cdn21.fiverr.com\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            },
            {
                "host": "cdn22.fiverr.com",
                "cname": "d2nt7j7ljjsiah.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Lỗi 502 từ CloudFront phổ biến khi dịch vụ gặp sự cố, không đủ bằng chứng cho thấy có thể chiếm quyền sở hữu subdomain.",
                "llm_labeled_at": "2026-03-31T14:41:22.803Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/cdn22.fiverr.com\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            },
            {
                "host": "cdn23.fiverr.com",
                "cname": "d2nt7j7ljjsiah.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Cùng CNAME và lỗi với các host khác, khả năng cao là sự cố hệ thống chung, không phải cơ hội claim.",
                "llm_labeled_at": "2026-03-31T14:41:22.803Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "verify_error",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/cdn23.fiverr.com\/",
                    "http_status": null,
                    "title_snippet": null,
                    "verify_error": "fetch failed",
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "cdn20.fiverr.com",
                "cdn21.fiverr.com",
                "cdn22.fiverr.com",
                "cdn23.fiverr.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-31T14:41:22.803Z",
            "usage": {
                "prompt_tokens": 797,
                "completion_tokens": 323,
                "total_tokens": 1120,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 669
            }
        },
        "v5": {
            "processed_at": "2026-03-31T14:41:22.885Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "fiverr.com-2026-03-31"
        }
    }
}