{
    "ok": true,
    "slug": "force.com-2026-03-31",
    "stats": {
        "subs": 36360,
        "all": 36360,
        "resolved": 21489,
        "live": 2,
        "takeover": 3,
        "juicy": 2,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 2,
        "takeover_hot_claim": 2,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/force.com-2026-03-31",
    "takeover_candidates": [
        "a.static.lightning.force.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2022qpg0iu21z.cloudfront.net\u001b[0m]",
        "b.static.lightning.force.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1q9ysnpaav8ft.cloudfront.net\u001b[0m]",
        "pdas.t.force.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcalm-ridge-4351.mighty-cove-4822.herokuspace.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "force.com",
        "version": 5,
        "generated_at": "2026-03-31T16:53:42.983Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 2,
            "kept_strict": 2,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "a.static.lightning.force.com",
                "cname": "d2022qpg0iu21z.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng lỗi 502 'request could not be satisfied' thường là lỗi cấu hình hoặc bảo trì của chủ sở hữu hợp pháp, không phải tài nguyên bỏ trống để claim.",
                "llm_labeled_at": "2026-03-31T16:53:51.140Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/a.static.lightning.force.com\/",
                    "http_status": 502,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            },
            {
                "host": "b.static.lightning.force.com",
                "cname": "d1q9ysnpaav8ft.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Tương tự host trên, lỗi CloudFront 502 thường không cho thấy tài nguyên có thể bị chiếm quyền sở hữu mà là sự cố dịch vụ của domain chính chủ.",
                "llm_labeled_at": "2026-03-31T16:53:51.140Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/b.static.lightning.force.com\/",
                    "http_status": 502,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:risky_fingerprint_wrong_status"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "a.static.lightning.force.com",
                "b.static.lightning.force.com"
            ],
            "batch_sources": [
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-31T16:53:51.140Z",
            "usage": {
                "prompt_tokens": 542,
                "completion_tokens": 212,
                "total_tokens": 754,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 414
            }
        },
        "v5": {
            "processed_at": "2026-03-31T16:53:51.222Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "force.com-2026-03-31"
        }
    }
}