{
    "ok": true,
    "slug": "iata.org-2026-04-03",
    "stats": {
        "subs": 597,
        "all": 597,
        "resolved": 507,
        "live": 481,
        "takeover": 33,
        "juicy": 33,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/iata.org-2026-04-03",
    "takeover_candidates": [
        "admin-auth.dgcompass.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32madmin-auth.dgcompass.iata.org-d2wu3a5y9jepqq.cloudfront.net\u001b[0m]",
        "aircraft-recovery-tool-poc.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2dt1swta7dayo.cloudfront.net\u001b[0m]",
        "cd.ind.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-argocd-argocdse-f47099ca2e-1729862610.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "dgcompass-api-stage.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32miata-stage-alb-0001-1976552965.us-west-2.elb.amazonaws.com\u001b[0m]",
        "dgcompass-api-test.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32miata-test-alb-0001-1390161777.us-west-2.elb.amazonaws.com\u001b[0m]",
        "dgcompass-api.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32miata-prod-alb-0001-756520401.us-west-2.elb.amazonaws.com\u001b[0m]",
        "dgcompass-stage.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mde33iigqo6w25.cloudfront.net\u001b[0m]",
        "dgcompass-test.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md28c4sxu02g9ey.cloudfront.net\u001b[0m]",
        "dgcompass.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md325mlrc4tba6o.cloudfront.net\u001b[0m]",
        "easypay3-pp.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-alb-iep-easypay-iep-app-1411558123.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "easypay3.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-alb-iep-easypay-iep-app-1252390826.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "eft.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mvs-prd-eft-external-e8003b3a353e3da0.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "events.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md34epnh1z7l8jj.cloudfront.net\u001b[0m]",
        "globaldata.developer.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md18wv6o8r4ljki.cloudfront.net\u001b[0m]",
        "guides.developer.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1z0mrfhx6cmq1.cloudfront.net\u001b[0m]",
        "idcard.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2emnqazlp4ujh.cloudfront.net\u001b[0m]",
        "integration.iata-pay.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a77a3f2bdbcc24cf4bb6a5b1176b76bb-1755039186.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "irisbiz.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mvs-prod-biztalk-swift-ext-a9356288091a3d45.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "irisbiz2.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mvs-prod-biztalk-nonswift-ext-8791a9f59509cdb6.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "irisppdbiz.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mvs-staging-biztalk-swift-ext-20eaef6bfa7c1b68.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "irisppdbiz2.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mvs-staging-biztalk-nonswift-ext-4055b359afa37665.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "lambda.integration.iata-pay.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a77a3f2bdbcc24cf4bb6a5b1176b76bb-1755039186.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "lambda.sandbox.iata-pay.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a0db7eccadab5479d9fa65deb6f9e5a2-553099371.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "lambda.staging.iata-pay.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a91b187d4531c493291c4be9a86c215a-1799874976.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "mocktpp.integration.iata-pay.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a77a3f2bdbcc24cf4bb6a5b1176b76bb-1755039186.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "mocktpp.sandbox.iata-pay.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a0db7eccadab5479d9fa65deb6f9e5a2-553099371.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "sandbox.iata-pay.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a0db7eccadab5479d9fa65deb6f9e5a2-553099371.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "schemas.developer.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32miata.github.io\u001b[0m]",
        "staging.iata-pay.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a91b187d4531c493291c4be9a86c215a-1799874976.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "student-auth.dgcompass.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md25v2jqw3cxyv3.cloudfront.net\u001b[0m]",
        "tfs.developer.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mvs-prod-tfs-92227083.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "web.dev.agentis.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md3fin3yqehubdp.cloudfront.net\u001b[0m]",
        "web.uat.dds.iata.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdejmppvl9ngc.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "iata.org",
        "version": 4,
        "generated_at": "2026-04-03T00:33:42.962Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 2,
            "kept_strict": 0,
            "llm_review_pool": 1,
            "dropped_noise": 2,
            "deep_skipped_below_pool": 1
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "student-auth.dgcompass.iata.org",
                "cname": "d25v2jqw3cxyv3.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront, nhưng HTTP 404 không đủ để kết luận có thể chiếm quyền sở hữu. Có thể là endpoint chưa cấu hình hoặc đã bị gỡ, nhưng không rõ ràng là tài nguyên chưa được gán hoặc có thể claim trực tiếp.",
                "llm_labeled_at": "2026-04-03T00:33:47.597Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "student-auth.dgcompass.iata.org"
            ],
            "batch_sources": [
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-03T00:33:47.597Z",
            "usage": {
                "prompt_tokens": 392,
                "completion_tokens": 131,
                "total_tokens": 523,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 264
            }
        }
    }
}