{
    "ok": true,
    "slug": "mastercard.com-2026-04-05",
    "stats": {
        "subs": 4309,
        "all": 4309,
        "resolved": 2492,
        "live": 1524,
        "takeover": 68,
        "juicy": 73,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/mastercard.com-2026-04-05",
    "takeover_candidates": [
        "baseballsweeps.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmastercard1-643684631.us-east-1.elb.amazonaws.com\u001b[0m]",
        "behaviorinsights.nd.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdzavplnzhu1aa.cloudfront.net\u001b[0m]",
        "cardedrateapi.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-287d7603f65521ce.elb.us-east-1.amazonaws.com\u001b[0m]",
        "carpintero-branding-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2228cov42opwh.cloudfront.net\u001b[0m]",
        "carpintero-branding-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md12ogbrrdwji2x.cloudfront.net\u001b[0m]",
        "carpintero-branding-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md14tr51ndax8ck.cloudfront.net\u001b[0m]",
        "cdn.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md319r16w8tj7ry.cloudfront.net\u001b[0m]",
        "clickme.a.mybiz360.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdshcc1l7nm1ea.cloudfront.net\u001b[0m]",
        "connections-api-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdbx4487pgl9fj.cloudfront.net\u001b[0m]",
        "connections-api-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3pgjrow7cac89.cloudfront.net\u001b[0m]",
        "connections-user-assets-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdbx4487pgl9fj.cloudfront.net\u001b[0m]",
        "connections-user-assets-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3pgjrow7cac89.cloudfront.net\u001b[0m]",
        "connections-user-assets-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1v1y9zgcgoua7.cloudfront.net\u001b[0m]",
        "connectzone.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3tzpjl2we50gf.cloudfront.net\u001b[0m]",
        "connectzone.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md319r16w8tj7ry.cloudfront.net\u001b[0m]",
        "connectzone.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1d5a8evz542mn.cloudfront.net\u001b[0m]",
        "curator-branding-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md25mgnu2d0iabs.cloudfront.net\u001b[0m]",
        "curator-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ppfgdsit2b4u.cloudfront.net\u001b[0m]",
        "curator-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdo7m9nsgoz42c.cloudfront.net\u001b[0m]",
        "demo.elevate.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-public-web-demo-us-east-1-1619218054.us-east-1.elb.amazonaws.com\u001b[0m]",
        "direct-integration-client-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1zwymxn61h4ca.cloudfront.net\u001b[0m]",
        "direct-integration-client-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md29d1x3mse76k8.cloudfront.net\u001b[0m]",
        "direct-integration-client-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mg8nyaopkiq6.cloudfront.net\u001b[0m]",
        "elevate-aspay.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpayalb-1966582904.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "elevate-eupay.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpayalb-758931032.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "elevate-pay.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpayalb-1228274652.us-east-1.elb.amazonaws.com\u001b[0m]",
        "elevate-sapay.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpayalb-1557331275.sa-east-1.elb.amazonaws.com\u001b[0m]",
        "experian-reports-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md35kr24e9ymhuw.cloudfront.net\u001b[0m]",
        "experian-reports-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md229gh75m24nee.cloudfront.net\u001b[0m]",
        "findocs-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdo62ukngtrhku.cloudfront.net\u001b[0m]",
        "finicity-reports-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3v7cqxm330zc9.cloudfront.net\u001b[0m]",
        "finicity-reports-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md217md0o59r2n2.cloudfront.net\u001b[0m]",
        "finweb-docs-new-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md9lp13nrr47.cloudfront.net\u001b[0m]",
        "finweb-docs-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2w8clev4z348b.cloudfront.net\u001b[0m]",
        "finweb-frontend-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1dxrvk3zzbo0v.cloudfront.net\u001b[0m]",
        "finweb-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md36hz3jgzsaa8s.cloudfront.net\u001b[0m]",
        "finweb-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdp9six0gg0hwa.cloudfront.net\u001b[0m]",
        "flightdelaylounge.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlqumjg9g1may.cloudfront.net\u001b[0m]",
        "give.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md36fei44pka1lj.cloudfront.net\u001b[0m]",
        "idapi.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-73beefe183133114.elb.us-east-1.amazonaws.com\u001b[0m]",
        "identityinsights-dev.nd.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2fqfmrbovpt97.cloudfront.net\u001b[0m]",
        "identityinsights-test.nd.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mds79mxdi271df.cloudfront.net\u001b[0m]",
        "identityinsights.nd.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdzavplnzhu1aa.cloudfront.net\u001b[0m]",
        "institution-branding-assets-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md12ogbrrdwji2x.cloudfront.net\u001b[0m]",
        "iw10api.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-73beefe183133114.elb.us-east-1.amazonaws.com\u001b[0m]",
        "iw20api.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-73beefe183133114.elb.us-east-1.amazonaws.com\u001b[0m]",
        "knowledge.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproduction-mastercard-km-elb-6ec06e7074ff7d33.elb.us-east-1.amazonaws.com\u001b[0m]",
        "mtf.acs.sandbox.3ds2.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmastercard-acs-tcp-elb-27b53d881de3c0f6.elb.us-east-1.amazonaws.com\u001b[0m]",
        "ooredooapi.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-73beefe183133114.elb.us-east-1.amazonaws.com\u001b[0m]",
        "partner-branding-assets-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md25mgnu2d0iabs.cloudfront.net\u001b[0m]",
        "payerapi.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-73beefe183133114.elb.us-east-1.amazonaws.com\u001b[0m]",
        "psc.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3pehkigjvpi9c.cloudfront.net\u001b[0m]",
        "pscapi.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-wb9v555jj1.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "public-experian-reports-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3jbgea1a7v64o.cloudfront.net\u001b[0m]",
        "public-finicity-reports-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ijm5wu4scdm2.cloudfront.net\u001b[0m]",
        "redemption.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmcc-sgp-prod-prod-pub-nlb01-879ee57103ba7f5d.elb.ap-southeast-1.amazonaws.com\u001b[0m]",
        "reportar-logos-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2vuz08m4027de.cloudfront.net\u001b[0m]",
        "reportar-logos-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1kvxgb5q460dz.cloudfront.net\u001b[0m]",
        "reportar-logos-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3irtffpz8j7x2.cloudfront.net\u001b[0m]",
        "safaricomcallbackapi.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-73beefe183133114.elb.us-east-1.amazonaws.com\u001b[0m]",
        "soapapi.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-73beefe183133114.elb.us-east-1.amazonaws.com\u001b[0m]",
        "stage.baseballsweeps.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmastercard1-643684631.us-east-1.elb.amazonaws.com\u001b[0m]",
        "statusapi.itf.xbspins.xbs.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-ext-tf-pins-itf-73beefe183133114.elb.us-east-1.amazonaws.com\u001b[0m]",
        "stg-comparte.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-177-71-226-204.sa-east-1.compute.amazonaws.com\u001b[0m]",
        "termsandpolicies-us-cf.dev.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hq30izr7ss72.cloudfront.net\u001b[0m]",
        "termsandpolicies-us-cf.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md9wh76w9vak9y.cloudfront.net\u001b[0m]",
        "termsandpolicies-us-cf.stage.openbanking.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3vm9xahf1lj3u.cloudfront.net\u001b[0m]",
        "test.oms.mastercard.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdr-hatest-lb-972598974.ap-southeast-2.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "mastercard.com",
        "version": 4,
        "generated_at": "2026-04-05T12:49:52.983Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 33,
            "kept_strict": 0,
            "llm_review_pool": 1,
            "dropped_noise": 33,
            "deep_skipped_below_pool": 32
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "clickme.a.mybiz360.mastercard.com",
                "cname": "dshcc1l7nm1ea.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront, nhưng HTTP 404 không đủ chứng tỏ resource chưa được gắn tenant. Có thể là trang lỗi mặc định của ứng dụng đang hoạt động.",
                "llm_labeled_at": "2026-04-05T12:49:56.331Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "clickme.a.mybiz360.mastercard.com"
            ],
            "batch_sources": [
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-05T12:49:56.331Z",
            "usage": {
                "prompt_tokens": 395,
                "completion_tokens": 100,
                "total_tokens": 495,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 267
            }
        }
    }
}