{
    "ok": true,
    "slug": "itv.com-2026-04-04",
    "stats": {
        "subs": 4535,
        "all": 4535,
        "resolved": 1268,
        "live": 1081,
        "takeover": 58,
        "juicy": 71,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 3,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/itv.com-2026-04-04",
    "takeover_candidates": [
        "ait.prd.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md30bqj86pwp65g.cloudfront.net\u001b[0m]",
        "ait.sit.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md315tgoshez1b5.cloudfront.net\u001b[0m]",
        "aitlauncher.10ft.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md30bqj86pwp65g.cloudfront.net\u001b[0m]",
        "api.prd.idb.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1q0bbux6ouby5.cloudfront.net\u001b[0m]",
        "app.dev.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md6nqf1lmx1xrg.cloudfront.net\u001b[0m]",
        "app.prd.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2dzjqlns083o5.cloudfront.net\u001b[0m]",
        "app.sit.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2kdllwq78nq7w.cloudfront.net\u001b[0m]",
        "assets.dev.sandbox.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdqynjgl6gyzlu.cloudfront.net\u001b[0m]",
        "assets.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xi4s3c5o0mop.cloudfront.net\u001b[0m]",
        "assets.sit.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mde8qxum0zihu6.cloudfront.net\u001b[0m]",
        "atlas-docs.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mitv.github.io\u001b[0m]",
        "business.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mselfserv-prd-fe-54866574.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "cloudfront-s3-test.dev.test.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2xbkosmcbk1fi.cloudfront.net\u001b[0m]",
        "config.10ft.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1fkq4brzeqent.cloudfront.net\u001b[0m]",
        "config.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1fkq4brzeqent.cloudfront.net\u001b[0m]",
        "config.prd.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1fkq4brzeqent.cloudfront.net\u001b[0m]",
        "config.sit.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1yjw504opx69x.cloudfront.net\u001b[0m]",
        "cpv3-s3-template.prd.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1r1fx2esph6wh.cloudfront.net\u001b[0m]",
        "cpv3-s3-template.sit.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2s4lbwxvu67j1.cloudfront.net\u001b[0m]",
        "cpv3-training-portal.dev.core.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ohlbv9lbfwsu.cloudfront.net\u001b[0m]",
        "cpv3-training-portal.prd.core.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2cr3x6xkgetiy.cloudfront.net\u001b[0m]",
        "docs.dev.vsp.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdjkp84ouzta6w.cloudfront.net\u001b[0m]",
        "docs.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md13jetk0t3tztl.cloudfront.net\u001b[0m]",
        "ecp-docs.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mitv.github.io\u001b[0m]",
        "gtld.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mitv.github.io\u001b[0m]",
        "i01-user-service.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mi01-itv-user-service-lb-1816435295.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "io.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mitv.github.io\u001b[0m]",
        "itv1-london-red-stackx.cdn1.content.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1fp6y68s5rljr.cloudfront.net\u001b[0m]",
        "itv2-london-red-stackx.cdn1.content.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md23ubbs4qgth3d.cloudfront.net\u001b[0m]",
        "itv4-london-red-stackx.cdn1.content.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1t5u61t2r7ext.cloudfront.net\u001b[0m]",
        "linear-interactive.prd.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2od7xpd17d78v.cloudfront.net\u001b[0m]",
        "linear-interactive.sit.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdl90waygelc2.cloudfront.net\u001b[0m]",
        "linear.10ft.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2s19jfjyepkat.cloudfront.net\u001b[0m]",
        "linear.prd.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2s19jfjyepkat.cloudfront.net\u001b[0m]",
        "linear.sit.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md191jlrktnjifz.cloudfront.net\u001b[0m]",
        "lptest.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdnbs3vudtrwds.cloudfront.net\u001b[0m]",
        "m.e.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mitvconsumer-mid-prod1-3065-832777810.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "mq.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-itv-rabbitmq-lb-435092343.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "okta-poc.dev-dashboard.telligence.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-okta-poc-1365000969.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "plutus.prd.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3a63o9dkiff08.cloudfront.net\u001b[0m]",
        "plutus.sit.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2zoiubdmvcttg.cloudfront.net\u001b[0m]",
        "policies.security.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mitv.github.io\u001b[0m]",
        "producers.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproducers-ui-cloudfront.prd.ca.itv.com\u001b[0m]",
        "reveal.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mitv.github.io\u001b[0m]",
        "samacc.10ft.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mda21l4y56bgbj.cloudfront.net\u001b[0m]",
        "samacc.sit.10ft.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxwn501vjkq6q.cloudfront.net\u001b[0m]",
        "stage-vod-blue-irdeto-cw-cloudfront.akamai.stg.content.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstage-vod-blue-irdeto-cw-cloudfront.akamaized.net\u001b[0m]",
        "stage-vod-green-irdeto-cw-cloudfront.akamai.stg.content.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstage-vod-green-irdeto-cw-cloudfront.akamaized.net\u001b[0m]",
        "studios.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15patnnqri1v8.cloudfront.net\u001b[0m]",
        "support.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1uvytthfzqgen.cloudfront.net\u001b[0m]",
        "t.e.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mitvconsumer-mid-prod1-3065-832777810.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "talpay-test-reports.dev.tp.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdwc5nmh682smj.cloudfront.net\u001b[0m]",
        "training.cp.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2cr3x6xkgetiy.cloudfront.net\u001b[0m]",
        "user-service.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-itv-user-service-lb-1619201370.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "vod-blue-irdeto-cw-cloudfront.akamai.content.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvod-blue-irdeto-cw-cloudfront.akamai.content.itv.com.akamaized.net\u001b[0m]",
        "vod-green-irdeto-cw-cloudfront.akamai.content.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvod-green-irdeto-cw-cloudfront.akamai.content.itv.com.akamaized.net\u001b[0m]",
        "vt-components-itvx.dev.fe.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mddmxr9huzr0x.cloudfront.net\u001b[0m]",
        "woo.itv.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "itv.com",
        "version": 4,
        "generated_at": "2026-04-03T20:51:07.535Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 19,
            "kept_strict": 3,
            "llm_review_pool": 5,
            "dropped_noise": 16,
            "deep_skipped_below_pool": 11
        },
        "candidates": [
            {
                "host": "woo.itv.com",
                "cname": "cname.vercel-dns.com",
                "status": 404,
                "title": null,
                "fingerprint": "vercel",
                "confidence": "high",
                "claim_score": 81,
                "claim_tier": "high",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.81,
                "llm_rationale_vi": "CNAME trỏ đến vercel-dns.com, HTTP 404, điểm claim cao. Có khả năng subdomain chưa được gắn với tenant Vercel và có thể claim.",
                "llm_labeled_at": "2026-04-03T20:51:18.738Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            },
            {
                "host": "cpv3-s3-template.prd.fe.itv.com",
                "cname": "d1r1fx2esph6wh.cloudfront.net",
                "status": 503,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 55,
                "claim_tier": "medium",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.55,
                "llm_rationale_vi": "Trỏ đến CloudFront với lỗi 503 'request could not be satisfied'. Đây thường là lỗi cấu hình hoặc dịch vụ tạm dừng, không phải bucket S3 bị bỏ trống có thể claim.",
                "llm_labeled_at": "2026-04-03T20:51:18.739Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "cpv3-s3-template.sit.fe.itv.com",
                "cname": "d2s4lbwxvu67j1.cloudfront.net",
                "status": 503,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 55,
                "claim_tier": "medium",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.55,
                "llm_rationale_vi": "Tương tự host 2, CloudFront trả lỗi 503. Không phải tài nguyên có thể claim trực tiếp, có thể là môi trường staging\/test đang gặp sự cố.",
                "llm_labeled_at": "2026-04-03T20:51:18.739Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [
            {
                "host": "itv1-london-red-stackx.cdn1.content.itv.com",
                "cname": "d1fp6y68s5rljr.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.44,
                "llm_rationale_vi": "CNAME CloudFront, HTTP 404 nhưng tên miền có cấu trúc nội bộ (content.itv.com). Có thể là endpoint CDN hợp lệ nhưng không có nội dung tại đường dẫn truy cập.",
                "llm_labeled_at": "2026-04-03T20:51:18.739Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "itv2-london-red-stackx.cdn1.content.itv.com",
                "cname": "d23ubbs4qgth3d.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.44,
                "llm_rationale_vi": "Tương tự host 4, cấu trúc tên miền nội bộ, CloudFront trả 404. Khả năng cao là cấu hình hợp lệ, không phải tài nguyên bị bỏ trống.",
                "llm_labeled_at": "2026-04-03T20:51:18.739Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "itv4-london-red-stackx.cdn1.content.itv.com",
                "cname": "d1t5u61t2r7ext.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "linear-interactive.sit.fe.itv.com",
                "cname": "dl90waygelc2.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "support.itv.com",
                "cname": "d1uvytthfzqgen.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "woo.itv.com",
                "cpv3-s3-template.prd.fe.itv.com",
                "cpv3-s3-template.sit.fe.itv.com",
                "itv1-london-red-stackx.cdn1.content.itv.com",
                "itv2-london-red-stackx.cdn1.content.itv.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-03T20:51:18.739Z",
            "usage": {
                "prompt_tokens": 899,
                "completion_tokens": 481,
                "total_tokens": 1380,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 771
            }
        }
    }
}