{
    "ok": true,
    "slug": "marketwatch.com-2026-04-05",
    "stats": {
        "subs": 297,
        "all": 297,
        "resolved": 165,
        "live": 115,
        "takeover": 27,
        "juicy": 27,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 4,
        "takeover_hot_claim": 4,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/marketwatch.com-2026-04-05",
    "takeover_candidates": [
        "accounts.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md77hab4jv6kh0.cloudfront.net\u001b[0m]",
        "article.beta.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3tw2xz3w6ge37.cloudfront.net\u001b[0m]",
        "article.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md153b9n1wr600h.cloudfront.net\u001b[0m]",
        "article.stg.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ht4sd7dxtxtw.cloudfront.net\u001b[0m]",
        "blue-customercenter.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md4yfkrkrrymhd.cloudfront.net\u001b[0m]",
        "blue-partner.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3gkeujgmmo4al.cloudfront.net\u001b[0m]",
        "blue-r.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1cya7xk0p9yk6.cloudfront.net\u001b[0m]",
        "blue-refer.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1cya7xk0p9yk6.cloudfront.net\u001b[0m]",
        "blue-store.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3caze9tw0tmwt.cloudfront.net\u001b[0m]",
        "blue-subscribe.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md9bc4v56gufa.cloudfront.net\u001b[0m]",
        "contact.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2mioiuafy6w5l.cloudfront.net\u001b[0m]",
        "customercenter.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2mioiuafy6w5l.cloudfront.net\u001b[0m]",
        "dev.accounts.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhocq41nfiqho.cloudfront.net\u001b[0m]",
        "images.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1way7llbpsmkq.cloudfront.net\u001b[0m]",
        "images.stg.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md38lq9p0kkpm12.cloudfront.net\u001b[0m]",
        "int.accounts.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md16qnorrhx5w87.cloudfront.net\u001b[0m]",
        "partner.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2yg62bcy777vh.cloudfront.net\u001b[0m]",
        "r.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md397fme6dujyo1.cloudfront.net\u001b[0m]",
        "refer.d.dev.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ak93nzlaidhi.cloudfront.net\u001b[0m]",
        "refer.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md397fme6dujyo1.cloudfront.net\u001b[0m]",
        "stg.accounts.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md37a0ou18cqpgf.cloudfront.net\u001b[0m]",
        "store.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3dqltpm0l6yhf.cloudfront.net\u001b[0m]",
        "subscribe.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3icm64lfnb8s.cloudfront.net\u001b[0m]",
        "trk.dev.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1oj58wvc8tuyo.cloudfront.net\u001b[0m]",
        "trk.djrj.dev.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1oj58wvc8tuyo.cloudfront.net\u001b[0m]",
        "trk.djrj.stg.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md34jba8zxr0hvj.cloudfront.net\u001b[0m]",
        "www.customercenter.marketwatch.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2mioiuafy6w5l.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "marketwatch.com",
        "version": 4,
        "generated_at": "2026-04-05T11:53:09.718Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 15,
            "kept_strict": 4,
            "llm_review_pool": 0,
            "dropped_noise": 11,
            "deep_skipped_below_pool": 11
        },
        "candidates": [
            {
                "host": "blue-r.marketwatch.com",
                "cname": "d1cya7xk0p9yk6.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng lỗi 502 có thể do cấu hình sai hoặc tạm thời, không chắc chắn có thể claim.",
                "llm_labeled_at": "2026-04-05T11:53:16.759Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "blue-refer.marketwatch.com",
                "cname": "d1cya7xk0p9yk6.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Tương tự host khác, lỗi 502 trên CloudFront thường không phải takeover trực tiếp, cần xác minh thêm.",
                "llm_labeled_at": "2026-04-05T11:53:16.760Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "refer.d.dev.marketwatch.com",
                "cname": "d2ak93nzlaidhi.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Subdomain dev có thể môi trường test, lỗi 502 không đủ bằng chứng claim.",
                "llm_labeled_at": "2026-04-05T11:53:16.760Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "refer.marketwatch.com",
                "cname": "d397fme6dujyo1.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME CloudFront lỗi 502, nhưng có thể đang được sử dụng hợp lệ, không rõ ràng để claim.",
                "llm_labeled_at": "2026-04-05T11:53:16.760Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "blue-r.marketwatch.com",
                "blue-refer.marketwatch.com",
                "refer.d.dev.marketwatch.com",
                "refer.marketwatch.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-05T11:53:16.760Z",
            "usage": {
                "prompt_tokens": 800,
                "completion_tokens": 278,
                "total_tokens": 1078,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 672
            }
        }
    }
}