{
    "ok": true,
    "slug": "grab.com-2026-03-24",
    "stats": {
        "subs": 13423,
        "all": 13423,
        "resolved": 12975,
        "live": 18,
        "takeover": 25,
        "juicy": 18,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 3,
        "takeover_hot_claim": 2,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/grab.com-2026-03-24",
    "takeover_candidates": [
        "airflow-adhoc-ui.svc.k8s.tis-data.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ad9d9ac9a4bf311e98b5602263818ecd-1754895947.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "api.jr.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-api-gateway-public-alb-178060887.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "api.jr.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-api-gateway2-public-alb-946860437.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "assets-staging.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3pxtauvqo58n2.cloudfront.net\u001b[0m]",
        "assets.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdh2pyksbkilu5.cloudfront.net\u001b[0m]",
        "defence.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "finance.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1x58iur5d0vjt.cloudfront.net\u001b[0m]",
        "forbusiness.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "grabmaps.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "grabtravel.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md6puy5vx08nhx.cloudfront.net\u001b[0m]",
        "hackathon.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgrab.github.io\u001b[0m]",
        "hc-doc.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdq08simd6dbol.cloudfront.net\u001b[0m]",
        "knox.extsvc.k8s.tis-data.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mac83a680d45ba11e9ae9c0605ddf2122-292b062790fb8ad8.elb.ap-southeast-1.amazonaws.com\u001b[0m]",
        "limo.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "link.careers.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32meu.mailgun.org\u001b[0m]",
        "link.sandbox.careers.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32meu.mailgun.org\u001b[0m]",
        "maps-cdn.waypoint.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ktmkkwb1zkd1.cloudfront.net\u001b[0m]",
        "paysuite.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15f9htfuu6vd2.cloudfront.net\u001b[0m]",
        "rentals.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "tmap.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mddm14ygt84pr1.cloudfront.net\u001b[0m]",
        "vn.invoice.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvninvoice-167505395.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "vninvoice.ext.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvninvoice-167505395.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "whitelistbot.tis-data.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mwhitelistbot-new-571926896.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "zeppelin-presto.extsvc.k8s.tis-data.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mac83a680d45ba11e9ae9c0605ddf2122-292b062790fb8ad8.elb.ap-southeast-1.amazonaws.com\u001b[0m]",
        "zeppelin-presto.svc.k8s.tis-data.grab.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ad9d9ac9a4bf311e98b5602263818ecd-1754895947.ap-southeast-1.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "grab.com",
        "version": 5,
        "generated_at": "2026-03-24T05:12:46.107Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 4,
            "kept_strict": 3,
            "llm_review_pool": 0,
            "dropped_noise": 1,
            "deep_skipped_below_pool": 1
        },
        "candidates": [
            {
                "host": "hc-doc.grab.com",
                "cname": "dq08simd6dbol.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 86,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CloudFront phân phối lỗi 502, có thể là cấu hình sai hoặc backend lỗi, không phải tài nguyên chưa claim.",
                "llm_labeled_at": "2026-03-24T05:12:54.802Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/hc-doc.grab.com\/",
                    "http_status": 502,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "assets-staging.grab.com",
                "cname": "d3pxtauvqo58n2.cloudfront.net",
                "status": 403,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 72,
                "claim_tier": "high",
                "signals": [
                    "the request could not be satisfied"
                ],
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CloudFront trả về 403, thường là cấu hình bảo mật (ví dụ: OAI) hoạt động, không phải tài nguyên bị bỏ trống.",
                "llm_labeled_at": "2026-03-24T05:12:54.802Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/assets-staging.grab.com\/",
                    "http_status": 403,
                    "title_snippet": "ERROR: The request could not be satisfied",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "maps-cdn.waypoint.grab.com",
                "cname": "d2ktmkkwb1zkd1.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CloudFront trả về 404, có thể là đường dẫn không tồn tại nhưng distribution vẫn thuộc về Grab, không có dấu hiệu bị bỏ trống.",
                "llm_labeled_at": "2026-03-24T05:12:54.802Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/maps-cdn.waypoint.grab.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "hc-doc.grab.com",
                "assets-staging.grab.com",
                "maps-cdn.waypoint.grab.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-24T05:12:54.802Z",
            "usage": {
                "prompt_tokens": 650,
                "completion_tokens": 238,
                "total_tokens": 888,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 522
            }
        },
        "v5": {
            "processed_at": "2026-03-24T05:12:54.848Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "grab.com-2026-03-24"
        }
    }
}