{
    "ok": true,
    "slug": "flipsnack.com-2026-03-31",
    "stats": {
        "subs": 492,
        "all": 492,
        "resolved": 444,
        "live": 436,
        "takeover": 14,
        "juicy": 13,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/flipsnack.com-2026-03-31",
    "takeover_candidates": [
        "6669755569b.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdz342pajd5p61.cloudfront.net\u001b[0m]",
        "68a77888b7a.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3avq77wrvohnb.cloudfront.net\u001b[0m]",
        "697aceaa9f7.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3gry8olcm296b.cloudfront.net\u001b[0m]",
        "78a9ccbbdc9.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3c9rwaotr0w16.cloudfront.net\u001b[0m]",
        "8dcdef99e8c.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1aqg1b6mozdbn.cloudfront.net\u001b[0m]",
        "967cdaaa9f7.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2vsgqroa1tizr.cloudfront.net\u001b[0m]",
        "a9f8c577c6f.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md4hmag4kepy3b.cloudfront.net\u001b[0m]",
        "bbb86677c6f.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcebdn3ppmkoq.cloudfront.net\u001b[0m]",
        "cbacd8eefb5.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1rl54v3orplhp.cloudfront.net\u001b[0m]",
        "f85ef7bbdc9.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1qycfad6v4crw.cloudfront.net\u001b[0m]",
        "fb9bff66aed.dns.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md37v8zt0vv3bhl.cloudfront.net\u001b[0m]",
        "files.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfiles.flipsnack.com.s3.amazonaws.com\u001b[0m]",
        "forms.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.tally.so\u001b[0m]",
        "wf.flipsnack.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "flipsnack.com",
        "version": 4,
        "generated_at": "2026-03-31T15:41:01.819Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 11,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 10,
            "deep_skipped_below_pool": 10
        },
        "candidates": [
            {
                "host": "forms.flipsnack.com",
                "cname": "cname.tally.so",
                "status": 404,
                "title": "Tally - Create Beautiful Forms for Free | Unlimited Forms & Submissions",
                "fingerprint": "tally",
                "confidence": "high",
                "claim_score": 67,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ tới Tally, nhưng HTTP 404 và tiêu đề hiển thị trang landing của nhà cung cấp dịch vụ. Điều này cho thấy subdomain chưa được cấu hình ứng dụng cụ thể, nhưng không có bằng chứng rõ ràng rằng nó có thể bị chiếm quyền sở hữu (claim) một cách chủ động thông qua đăng ký tài khoản.",
                "llm_labeled_at": "2026-03-31T15:41:07.376Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "forms.flipsnack.com"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-31T15:41:07.376Z",
            "usage": {
                "prompt_tokens": 395,
                "completion_tokens": 155,
                "total_tokens": 550,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 267
            }
        }
    }
}