{
    "ok": true,
    "slug": "mic.com-2026-04-06",
    "stats": {
        "subs": 30,
        "all": 30,
        "resolved": 26,
        "live": 22,
        "takeover": 10,
        "juicy": 10,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 2,
        "takeover_hot_claim": 2,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/mic.com-2026-04-06",
    "takeover_candidates": [
        "activists.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdq5ij6qvaynlc.cloudfront.net\u001b[0m]",
        "bernie.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md36ze1rjcmtusf.cloudfront.net\u001b[0m]",
        "black-monuments.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p7if6wznqscz.cloudfront.net\u001b[0m]",
        "cdn.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdw3k8b834rr37.cloudfront.net\u001b[0m]",
        "emailsendlinks.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3o29aad3bnfst.cloudfront.net\u001b[0m]",
        "images.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdyg6gczsf4lnv.cloudfront.net\u001b[0m]",
        "media3.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md16v0emzbsdhoz.cloudfront.net\u001b[0m]",
        "odin.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mayh3ccdlna.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "thumbs.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md16v0emzbsdhoz.cloudfront.net\u001b[0m]",
        "unerased.mic.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3itp2v2jffwrw.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "mic.com",
        "version": 4,
        "generated_at": "2026-04-05T19:48:47.743Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 7,
            "kept_strict": 2,
            "llm_review_pool": 1,
            "dropped_noise": 5,
            "deep_skipped_below_pool": 4
        },
        "candidates": [
            {
                "host": "media3.mic.com",
                "cname": "d16v0emzbsdhoz.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront, HTTP 502 lỗi 'request could not be satisfied' cho thấy phân phối chưa được cấu hình đúng, có khả năng claim.",
                "llm_labeled_at": "2026-04-05T19:48:54.452Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            },
            {
                "host": "thumbs.mic.com",
                "cname": "d16v0emzbsdhoz.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Tương tự media3.mic.com, cùng CNAME và lỗi 502, chỉ ra phân phối CloudFront chưa được gắn với bucket S3 hợp lệ, có thể chiếm quyền.",
                "llm_labeled_at": "2026-04-05T19:48:54.452Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            }
        ],
        "llm_review_pool": [
            {
                "host": "emailsendlinks.mic.com",
                "cname": "d3o29aad3bnfst.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME CloudFront khác, HTTP 404 có thể chỉ là trang không tồn tại nhưng phân phối vẫn có thể đang hoạt động và được kiểm soát, ít khả năng claim.",
                "llm_labeled_at": "2026-04-05T19:48:54.452Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "media3.mic.com",
                "thumbs.mic.com",
                "emailsendlinks.mic.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-05T19:48:54.452Z",
            "usage": {
                "prompt_tokens": 649,
                "completion_tokens": 258,
                "total_tokens": 907,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 521
            }
        }
    }
}