{
    "ok": true,
    "slug": "linktr.ee-2026-04-05",
    "stats": {
        "subs": 800,
        "all": 800,
        "resolved": 287,
        "live": 218,
        "takeover": 58,
        "juicy": 109,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/linktr.ee-2026-04-05",
    "takeover_candidates": [
        "airbyte.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mairbyte.edge-0594fdd4c3ba934aa.vai-0a126cf4516d3b346.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "airbyte.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mairbyte.edge-0c91668e08d6fb5ed.vai-0e7caa9af1f316d25.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "app-store-storybook.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md2znbin4vkmi7l.cloudfront.net\u001b[0m]",
        "arbor.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mblstrco.github.io\u001b[0m]",
        "cmp.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mcmp.edge-0594fdd4c3ba934aa.vai-0a126cf4516d3b346.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "cmp.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mcmp.edge-0c91668e08d6fb5ed.vai-0e7caa9af1f316d25.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "creator-report-22.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md3fm5shyeb8wld.cloudfront.net\u001b[0m]",
        "creator-report-22.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md2lct4lx414zcd.cloudfront.net\u001b[0m]",
        "creator-report-23.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md87jvw4a58ua9.cloudfront.net\u001b[0m]",
        "creator-report-23.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md3oudtuf6669cn.cloudfront.net\u001b[0m]",
        "dbt-docs-mcp.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdbt-docs-mcp.edge-0594fdd4c3ba934aa.vai-0a126cf4516d3b346.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "dbt-docs-mcp.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdbt-docs-mcp.edge-0c91668e08d6fb5ed.vai-0e7caa9af1f316d25.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "descope-universal-login.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md108ukbggaiveh.cloudfront.net\u001b[0m]",
        "descope-universal-login.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdbf87i6m3nark.cloudfront.net\u001b[0m]",
        "dev.retool.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-retool.edge-04b0636a49e7d2551.vai-0597753464e07bc87.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "development-airbyte.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdevelopment-airbyte.edge-0c91668e08d6fb5ed.vai-0e7caa9af1f316d25.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "edge.webflow.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md.sni.global.fastly.net\u001b[0m]",
        "edge.webflow.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md.sni.global.fastly.net\u001b[0m]",
        "email.talent.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "guardhouse.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mguardhouse.edge-0594fdd4c3ba934aa.vai-0a126cf4516d3b346.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "guardhouse.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mguardhouse.edge-0c91668e08d6fb5ed.vai-0e7caa9af1f316d25.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "ingress.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md2vx2hggy0oydi.cloudfront.net\u001b[0m]",
        "link-types-assets.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md3tbktocvfyh4n.cloudfront.net\u001b[0m]",
        "link-types-assets.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhr4ycqfltnfk.cloudfront.net\u001b[0m]",
        "link-types-config.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxxguk9ynktc5.cloudfront.net\u001b[0m]",
        "link-types-config.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bciyn7anmvbz.cloudfront.net\u001b[0m]",
        "linktree-backend.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md2suu14s1ftpkk.cloudfront.net\u001b[0m]",
        "linktree-backend.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdze01129gagh1.cloudfront.net\u001b[0m]",
        "linktree-web.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md2bhf39ya7oetn.cloudfront.net\u001b[0m]",
        "linktree-web.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md3o3k9ten7s8km.cloudfront.net\u001b[0m]",
        "lookerbot-s3.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdgp51wjxlb06u.cloudfront.net\u001b[0m]",
        "merch.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "metabase.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32m05755385-default-ingressme-4137-1147723496.us-west-2.elb.amazonaws.com\u001b[0m]",
        "mfe-account.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md2y9o23cpz2wx0.cloudfront.net\u001b[0m]",
        "mfe-activation-stepper.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md33vsjn2dybkgc.cloudfront.net\u001b[0m]",
        "mfe-auth.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md2pdl8hcjcxg0f.cloudfront.net\u001b[0m]",
        "mfe-auth.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdwpqxmfbnv0cs.cloudfront.net\u001b[0m]",
        "mfe-billing.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md5g3ni5390mgy.cloudfront.net\u001b[0m]",
        "mfe-billing.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md1eyons9ve4m2f.cloudfront.net\u001b[0m]",
        "mfe-growth-sdk.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md18p27kgwx2zyi.cloudfront.net\u001b[0m]",
        "mfe-mk-editor.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md1kf54687lgsgb.cloudfront.net\u001b[0m]",
        "mfe-mk-editor.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ocuaalozsprr.cloudfront.net\u001b[0m]",
        "mfe-onboarding.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md2f181javodar7.cloudfront.net\u001b[0m]",
        "mfe-onboarding.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md3og03gsp1ovhh.cloudfront.net\u001b[0m]",
        "notification-manager.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md7r0d9jb0lxa2.cloudfront.net\u001b[0m]",
        "notification-manager.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md148r8riaicerw.cloudfront.net\u001b[0m]",
        "notifications.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md30oq488bqbbf4.cloudfront.net\u001b[0m]",
        "production.retool.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mproduction-retool.edge-04b0636a49e7d2551.vai-0597753464e07bc87.prod.verified-access.us-west-2.amazonaws.com\u001b[0m]",
        "profiles-sitemp.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md1l0vzgztxixs5.cloudfront.net\u001b[0m]",
        "profiles-sitemp.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdr4reduhvwlnj.cloudfront.net\u001b[0m]",
        "staticwebsite-dev.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdgatkzqlerot0.cloudfront.net\u001b[0m]",
        "ui-link-kit-storybook.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mkfw6wg7g9xp.cloudfront.net\u001b[0m]",
        "ui-link-kit-storybook.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdkveohsqpg7sx.cloudfront.net\u001b[0m]",
        "vidcompressor-destination.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mkwv2r5czhnk.cloudfront.net\u001b[0m]",
        "webflow-origin.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "website.production.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32md5y2qq9hs778w.cloudfront.net\u001b[0m]",
        "websitetest.qa.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdin26kwlxe0ok.cloudfront.net\u001b[0m]",
        "www.blog.linktr.ee [\u001b[35mCNAME\u001b[0m] [\u001b[32mdkrn44mbfhv8i.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "linktr.ee",
        "version": 4,
        "generated_at": "2026-04-05T00:00:53.936Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 21,
            "kept_strict": 0,
            "llm_review_pool": 2,
            "dropped_noise": 21,
            "deep_skipped_below_pool": 19
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "ingress.qa.linktr.ee",
                "cname": "d2vx2hggy0oydi.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 có thể là cấu hình S3\/CloudFront hợp lệ, không nhất thiết là bucket chưa claim. Dịch vụ chính có thể đang hoạt động.",
                "llm_labeled_at": "2026-04-05T00:00:59.642Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "notification-manager.qa.linktr.ee",
                "cname": "d148r8riaicerw.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Tương tự, CNAME CloudFront với 404. Có khả năng là endpoint backend hoặc cấu hình staging, không phải tài nguyên bỏ trống có thể chiếm quyền.",
                "llm_labeled_at": "2026-04-05T00:00:59.642Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "ingress.qa.linktr.ee",
                "notification-manager.qa.linktr.ee"
            ],
            "batch_sources": [
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-05T00:00:59.642Z",
            "usage": {
                "prompt_tokens": 503,
                "completion_tokens": 184,
                "total_tokens": 687,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 375
            }
        }
    }
}