{
    "ok": true,
    "slug": "if.ua-2026-04-03",
    "stats": {
        "subs": 20555,
        "all": 20555,
        "resolved": 12693,
        "live": 49,
        "takeover": 24,
        "juicy": 37,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 7,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/if.ua-2026-04-03",
    "takeover_candidates": [
        "admin.hg.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mhuman-jabuticaba-cwilej9j4ymyeekczu0ummwf.herokudns.com\u001b[0m]",
        "class.intellect-dol.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "img.intellect-dol.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "lms.itca.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mbraveit-prod-38511972.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "map.realestate.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mrealtyua.github.io\u001b[0m]",
        "nakaz.intellect-dol.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "pop.brun.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mbrunif.github.io\u001b[0m]",
        "www.aquatok.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32moliapankiv.github.io\u001b[0m]",
        "www.beautifulnails.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.brun.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mbrunif.github.io\u001b[0m]",
        "www.fixman.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mmyhostua.github.io\u001b[0m]",
        "www.fotograf.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mubiquitous-empanada-21882f.netlify.app\u001b[0m]",
        "www.fp.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.intellect-dol.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.kolyska.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.krykhivtsi-lyceum.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32m68eec96de1e12cb6.vercel-dns-017.com\u001b[0m]",
        "www.man.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32ma8fbcced51b71846.vercel-dns-017.com\u001b[0m]",
        "www.mv.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "www.realestate.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mrealtyua.github.io\u001b[0m]",
        "www.run.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.urbanspace.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.vaar.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mvarifua.netlify.app\u001b[0m]",
        "www.vikna-dveri.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.zamky.if.ua [\u001b[35mCNAME\u001b[0m] [\u001b[32m5a9b77e5108316e5.vercel-dns-017.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "if.ua",
        "version": 4,
        "generated_at": "2026-04-03T05:57:13.717Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 7,
            "kept_strict": 7,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "img.intellect-dol.if.ua",
                "cname": "cname.vercel-dns.com",
                "status": 404,
                "title": null,
                "fingerprint": "vercel",
                "confidence": "high",
                "claim_score": 81,
                "claim_tier": "high",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.81,
                "llm_rationale_vi": "CNAME trỏ đến vercel-dns.com, HTTP 404, không có nội dung. Vercel có thể cho phép claim subdomain nếu chưa được cấu hình.",
                "llm_labeled_at": "2026-04-03T05:57:23.626Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            },
            {
                "host": "pop.brun.if.ua",
                "cname": "brunif.github.io",
                "status": 404,
                "title": "Site not found · GitHub Pages",
                "fingerprint": "github_pages",
                "confidence": "high",
                "claim_score": 62,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_possible",
                "llm_confidence": 0.62,
                "llm_rationale_vi": "CNAME trỏ đến GitHub Pages, HTTP 404 với title GitHub Pages lỗi. Có khả năng claim nếu repo chưa được liên kết, nhưng điểm claim trung bình.",
                "llm_labeled_at": "2026-04-03T05:57:23.626Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "medium"
            },
            {
                "host": "cpanel.fit.if.ua",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "CNAME trỏ đến ghs.googlehosted.com (Google), HTTP 404 nhưng có thể là cấu hình Google Workspace chưa hoàn tất hoặc dịch vụ khác, không dễ claim.",
                "llm_labeled_at": "2026-04-03T05:57:23.626Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "mail.fit.if.ua",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "Tương tự cpanel.fit.if.ua, CNAME Google, HTTP 404. Thường là cấu hình mail Google chưa active, không phải lỗ hổng claim trực tiếp.",
                "llm_labeled_at": "2026-04-03T05:57:23.626Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "webdisk.fit.if.ua",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.5,
                "llm_rationale_vi": "CNAME Google, HTTP 404. Có thể là subdomain dành cho dịch vụ web hosting hoặc control panel, không cho phép claim dễ dàng.",
                "llm_labeled_at": "2026-04-03T05:57:23.626Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "webmail.fit.if.ua",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true
            },
            {
                "host": "www.animalbreeds.rafk.if.ua",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "img.intellect-dol.if.ua",
                "pop.brun.if.ua",
                "cpanel.fit.if.ua",
                "mail.fit.if.ua",
                "webdisk.fit.if.ua"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-03T05:57:23.626Z",
            "usage": {
                "prompt_tokens": 837,
                "completion_tokens": 418,
                "total_tokens": 1255,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 709
            }
        }
    }
}