{
    "ok": true,
    "slug": "mimecast.com-2026-04-06",
    "stats": {
        "subs": 2415,
        "all": 2415,
        "resolved": 1958,
        "live": 391,
        "takeover": 21,
        "juicy": 21,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/mimecast.com-2026-04-06",
    "takeover_candidates": [
        "cdn-sc.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2xtdh6gc71c8e.cloudfront.net\u001b[0m]",
        "cdn-su.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3wf7vu15gttl.cloudfront.net\u001b[0m]",
        "email.event.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "gci-au-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdruvjvnx1o7gp.cloudfront.net\u001b[0m]",
        "gci-ca-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdyb4kff4ruicf.cloudfront.net\u001b[0m]",
        "gci-de-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdgaqx73i9xwxj.cloudfront.net\u001b[0m]",
        "gci-uk-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdivhx6mmawpfi.cloudfront.net\u001b[0m]",
        "gci-us-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1m45vtia4a9b9.cloudfront.net\u001b[0m]",
        "gci-usb-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1yekokrxyel25.cloudfront.net\u001b[0m]",
        "gsnlink.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3hp935eb8zc17.cloudfront.net\u001b[0m]",
        "gsslink.customersuccess.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3hp935eb8zc17.cloudfront.net\u001b[0m]",
        "identity-au-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2hawoootvyzd3.cloudfront.net\u001b[0m]",
        "identity-ca-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2cn29pfhnmknv.cloudfront.net\u001b[0m]",
        "identity-de-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdntf4zlpwm4jh.cloudfront.net\u001b[0m]",
        "identity-uk-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md36pqve3vzixdx.cloudfront.net\u001b[0m]",
        "identity-us-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nq78a22u09sl.cloudfront.net\u001b[0m]",
        "identity-usb-1.mcp.services.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2pu6kl8nh1ir4.cloudfront.net\u001b[0m]",
        "idp.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2owvbwpff8ajl.cloudfront.net\u001b[0m]",
        "qa-cdn-sc.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1dld4iajj0ft7.cloudfront.net\u001b[0m]",
        "qa-cdn-su.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ynimfh9uecn9.cloudfront.net\u001b[0m]",
        "totalrewards.mimecast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbackstitch2-1118863930.us-east-1.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "mimecast.com",
        "version": 4,
        "generated_at": "2026-04-05T21:31:20.268Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 17,
            "kept_strict": 0,
            "llm_review_pool": 13,
            "dropped_noise": 17,
            "deep_skipped_below_pool": 4
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "gci-au-1.mcp.services.mimecast.com",
                "cname": "druvjvnx1o7gp.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 không đủ chứng tỏ resource bị bỏ hoang. Có thể là endpoint backend chưa cấu hình, khó claim.",
                "llm_labeled_at": "2026-04-05T21:31:29.437Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "gci-ca-1.mcp.services.mimecast.com",
                "cname": "dyb4kff4ruicf.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự các host khác: CNAME CloudFront, 404. Không có bằng chứng resource bị bỏ hoang hoặc có thể chiếm quyền sở hữu.",
                "llm_labeled_at": "2026-04-05T21:31:29.437Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "gci-de-1.mcp.services.mimecast.com",
                "cname": "dgaqx73i9xwxj.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Cấu trúc subdomain có vẻ là phần của dịch vụ Mimecast. 404 có thể là do chưa triển khai, không phải lỗ hổng claim.",
                "llm_labeled_at": "2026-04-05T21:31:29.438Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "gci-uk-1.mcp.services.mimecast.com",
                "cname": "divhx6mmawpfi.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CloudFront 404 nhưng không có dấu hiệu lỗi cấu hình cho phép chiếm quyền. Có thể là endpoint dự phòng hoặc chưa dùng.",
                "llm_labeled_at": "2026-04-05T21:31:29.438Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "gci-us-1.mcp.services.mimecast.com",
                "cname": "d1m45vtia4a9b9.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Mẫu chung: tất cả host đều có điểm claim thấp, 404. Không có tín hiệu nào cho thấy có thể claim thành công.",
                "llm_labeled_at": "2026-04-05T21:31:29.438Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "gci-usb-1.mcp.services.mimecast.com",
                "cname": "d1yekokrxyel25.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "gsnlink.mimecast.com",
                "cname": "d3hp935eb8zc17.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "gsslink.customersuccess.mimecast.com",
                "cname": "d3hp935eb8zc17.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "identity-au-1.mcp.services.mimecast.com",
                "cname": "d2hawoootvyzd3.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "identity-ca-1.mcp.services.mimecast.com",
                "cname": "d2cn29pfhnmknv.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "identity-de-1.mcp.services.mimecast.com",
                "cname": "dntf4zlpwm4jh.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "identity-uk-1.mcp.services.mimecast.com",
                "cname": "d36pqve3vzixdx.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            },
            {
                "host": "identity-us-1.mcp.services.mimecast.com",
                "cname": "d2nq78a22u09sl.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "gci-au-1.mcp.services.mimecast.com",
                "gci-ca-1.mcp.services.mimecast.com",
                "gci-de-1.mcp.services.mimecast.com",
                "gci-uk-1.mcp.services.mimecast.com",
                "gci-us-1.mcp.services.mimecast.com"
            ],
            "batch_sources": [
                "pool",
                "pool",
                "pool",
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-05T21:31:29.438Z",
            "usage": {
                "prompt_tokens": 866,
                "completion_tokens": 436,
                "total_tokens": 1302,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 738
            }
        }
    }
}