{
    "ok": true,
    "slug": "moodys.com-2026-04-06",
    "stats": {
        "subs": 1243,
        "all": 1243,
        "resolved": 563,
        "live": 440,
        "takeover": 29,
        "juicy": 28,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/moodys.com-2026-04-06",
    "takeover_candidates": [
        "api-docs.edl-mgmt.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmoodyssharedservices.github.io\u001b[0m]",
        "ccs-ppe2.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mccs-ppe2-moodys-com-alb-894708608.us-west-2.elb.amazonaws.com\u001b[0m]",
        "ccs-test.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mccstest-alb-1625232777.us-west-2.elb.amazonaws.com\u001b[0m]",
        "ccs.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcsi-alb-ccs-146706850.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "credittrends.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcredittrends-moodys-com-alb-338754911.us-east-1.elb.amazonaws.com\u001b[0m]",
        "cribl.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcribl-prod-nlb-4604cbf61be74752.elb.us-west-2.amazonaws.com\u001b[0m]",
        "cybersurvey.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3b41zywd1acu3.cloudfront.net\u001b[0m]",
        "dev-api-docs.edl-mgmt.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmoodyssharedservices.github.io\u001b[0m]",
        "dev-xsoar-s3.cyber-fusion.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md6otk1vhdd245.cloudfront.net\u001b[0m]",
        "docs.copilot.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmoodys-ma-external.github.io\u001b[0m]",
        "docs.quantum.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmoodys-ma-external.github.io\u001b[0m]",
        "elearning-support.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcsi-elearning-sup-public-alb-1723405358.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "email.mail.cybersurvey.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "esg-prd-origin-us-east-1.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "kyc-prd-origin-us-east-1.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "ma-ls-secure.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcsi-eft-gwy-mals-nlb-0ff9a381d47a15cb.elb.ca-central-1.amazonaws.com\u001b[0m]",
        "people-prod-sftp.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpeople-prod-nlb-1ac6107f3a9906fd.elb.us-east-1.amazonaws.com\u001b[0m]",
        "portfolioview.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mportfolio-view.pages.dev\u001b[0m]",
        "prd-eu-screening-agent-review.grid.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-ext-app-1952561469.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "prd.api-a.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmdc-api-prd-alb-880079139.us-east-1.elb.amazonaws.com\u001b[0m]",
        "prd.www-a.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmdc-prod-alb-1828652426.us-east-1.elb.amazonaws.com\u001b[0m]",
        "pv.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mportfolio-view.pages.dev\u001b[0m]",
        "sftp.mist-cloud.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msftp-mist-cloud-prod-nlb-4b173d4dc463fe8b.elb.us-west-2.amazonaws.com\u001b[0m]",
        "sftp.mist-cloud.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msftp-mist-cloud-prod-nlb-948036fa60ea1503.elb.us-east-1.amazonaws.com\u001b[0m]",
        "splunkextds1-eu.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msplunk-prod-nlb-e48fe2740d97172c.elb.us-west-2.amazonaws.com\u001b[0m]",
        "url577.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md25qtw9ay765t7.cloudfront.net\u001b[0m]",
        "www.cybersurvey.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3b41zywd1acu3.cloudfront.net\u001b[0m]",
        "xsoar-s3.cyber-fusion.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md266hy4rgh1cpm.cloudfront.net\u001b[0m]",
        "zoom.cribl.moodys.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzoom-prod-alb-1492049419.us-west-2.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "moodys.com",
        "version": 4,
        "generated_at": "2026-04-06T03:08:24.431Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 3,
            "kept_strict": 0,
            "llm_review_pool": 1,
            "dropped_noise": 3,
            "deep_skipped_below_pool": 2
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "url577.moodys.com",
                "cname": "d25qtw9ay765t7.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 là phản hồi mặc định của AWS khi distribution chưa được cấu hình. Điều này thường cho thấy tài nguyên đã được tạo nhưng chưa gắn nội dung, không phải bị bỏ rơi để claim.",
                "llm_labeled_at": "2026-04-06T03:08:28.504Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "url577.moodys.com"
            ],
            "batch_sources": [
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-06T03:08:28.504Z",
            "usage": {
                "prompt_tokens": 391,
                "completion_tokens": 122,
                "total_tokens": 513,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 263
            }
        }
    }
}