{
    "ok": true,
    "slug": "ig.com-2026-04-03",
    "stats": {
        "subs": 1074,
        "all": 1074,
        "resolved": 550,
        "live": 462,
        "takeover": 13,
        "juicy": 18,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/ig.com-2026-04-03",
    "takeover_candidates": [
        "acq.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mig-campaign-production.netlify.app\u001b[0m]",
        "demo-investments.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md37hiqz1qcrhwa.cloudfront.net\u001b[0m]",
        "ig-se.raf.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1c55nwqcy6z3u.cloudfront.net\u001b[0m]",
        "ig-uk.raf.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1c55nwqcy6z3u.cloudfront.net\u001b[0m]",
        "mi-apac.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2w5txxp4yiyyr.cloudfront.net\u001b[0m]",
        "mi-eu.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdkr2pfr7vnxbh.cloudfront.net\u001b[0m]",
        "mi.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md119v3vywekvwx.cloudfront.net\u001b[0m]",
        "origin-demo-w8ben-api.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdemo-igassetservicing-w8ben-svc-148419565.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "origin-net-w8ben-api.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mawseb-e-j-awsebloa-rft4ldse5iyp-1804810327.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "origin-w8ben-api.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32migassetservicing-w8ben-svc-1740206412.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "origin-web-w8ben-api.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mawseb-e-d-awsebloa-1xyr8ar09jiez-2140020824.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "refer.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1nnz4ljjo1cm3.cloudfront.net\u001b[0m]",
        "web-apivendor.ig.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mawselb-web-apivendor-738454786.eu-west-1.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "ig.com",
        "version": 4,
        "generated_at": "2026-04-03T06:18:46.875Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 4,
            "kept_strict": 1,
            "llm_review_pool": 1,
            "dropped_noise": 3,
            "deep_skipped_below_pool": 2
        },
        "candidates": [
            {
                "host": "acq.ig.com",
                "cname": "ig-campaign-production.netlify.app",
                "status": 404,
                "title": null,
                "fingerprint": "netlify",
                "confidence": "high",
                "claim_score": 77,
                "claim_tier": "high",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ tới Netlify app, HTTP 404, không có nội dung. Netlify cho phép claim subdomain nếu chưa gắn site.",
                "llm_labeled_at": "2026-04-03T06:18:52.166Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            }
        ],
        "llm_review_pool": [
            {
                "host": "refer.ig.com",
                "cname": "d1nnz4ljjo1cm3.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront, nhưng HTTP 404 có thể là cấu hình S3 bucket hoặc CloudFront chưa đúng, không chắc chắn có thể claim trực tiếp.",
                "llm_labeled_at": "2026-04-03T06:18:52.166Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "acq.ig.com",
                "refer.ig.com"
            ],
            "batch_sources": [
                "strict",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-03T06:18:52.166Z",
            "usage": {
                "prompt_tokens": 491,
                "completion_tokens": 161,
                "total_tokens": 652,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 363
            }
        }
    }
}