{
    "ok": true,
    "slug": "raycast.com-2026-03-24",
    "stats": {
        "subs": 64,
        "all": 64,
        "resolved": 42,
        "live": 42,
        "takeover": 43,
        "juicy": 11,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 5,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 5,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/raycast.com-2026-03-24",
    "takeover_candidates": [
        "ai-evals.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mclassical-durian-nga8hei2lucag78qp1ae7ea9.herokudns.com\u001b[0m]",
        "ai-images.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2lkywkr72o38e.cloudfront.net\u001b[0m]",
        "asana.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhuman-yarrow-nmpb2kd7ttdpgcn78y6wf1ru.herokudns.com\u001b[0m]",
        "asana.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvascular-nightingale-kfre658sdgf1vc7z5jx171qg.herokudns.com\u001b[0m]",
        "assets.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1w35p7klh9xkc.cloudfront.net\u001b[0m]",
        "backend.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1w35p7klh9xkc.cloudfront.net\u001b[0m]",
        "cli.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3gnavmzmgbkv0.cloudfront.net\u001b[0m]",
        "cms.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "dev.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md28dmq3vu9yv6z.cloudfront.net\u001b[0m]",
        "developer.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdl27cej6j1hyc.cloudfront.net\u001b[0m]",
        "dictation-api.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmetaphysical-sprout-qgctqglge5f1t5qhr6aieo67.herokudns.com\u001b[0m]",
        "extensions-api-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "files.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md47mokwr4vy2h.cloudfront.net\u001b[0m]",
        "gif-search.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "github.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcomparative-otter-qei8cb9o77zyxvt2pxzlykr2.herokudns.com\u001b[0m]",
        "github.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbehavioral-gazelle-170bf140zsd43ce1far16rd0.herokudns.com\u001b[0m]",
        "imgproxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1igte73fcwm7a.cloudfront.net\u001b[0m]",
        "jira.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mclosed-marlin-sqe40bm7jakk1mp3kk8b7ja3.herokudns.com\u001b[0m]",
        "jira.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhidden-ant-bh6b26lwhv4ziiovc32bki63.herokudns.com\u001b[0m]",
        "linear.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlively-suchomimus-dhcsidb0qs26k99nyxn6fpxm.herokudns.com\u001b[0m]",
        "linear.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mclear-perch-gd22qp4zrby3uv7s8n1snw1u.herokudns.com\u001b[0m]",
        "merch.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "miro.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmurmuring-foxglove-urx4cd3m1gueib5d5ehgfm5d.herokudns.com\u001b[0m]",
        "miro.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32myoung-papaya-vzwhp2152gocde63qso094b6.herokudns.com\u001b[0m]",
        "monzo.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpolar-marigold-flvjjwouvmxuwe16t5bmsbrb.herokudns.com\u001b[0m]",
        "notion.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbehavioral-turkey-ootvtyhvng3bec04k5egnpep.herokudns.com\u001b[0m]",
        "notion.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32marcane-crab-0k37lcprscog761b6xin9ph9.herokudns.com\u001b[0m]",
        "oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mreticulated-sprout-62o77dofk1ky47d6r3ftr855.herokudns.com\u001b[0m]",
        "planetscale.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdefined-hamster-m89mmeczl2g544cvptbgxgdy.herokudns.com\u001b[0m]",
        "pulse.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "redash.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3behso36uwtn4.cloudfront.net\u001b[0m]",
        "releases2.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mencircled-lotus-0c55c4bxg80ydvafx0oxfo67.herokudns.com\u001b[0m]",
        "shopify.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "slack.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgentle-mollusk-11vciukfu3w1ft4qowgkvsal.herokudns.com\u001b[0m]",
        "slack.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhidden-potatoe-smcpz4fx6yt9k7bp6vfxw4xr.herokudns.com\u001b[0m]",
        "staging.dictation-api.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcomparative-lowlands-2g9qpgrqs8c2e4m5ciso8u7r.herokudns.com\u001b[0m]",
        "todoist.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcomputational-tiger-d2ygtpt913vtez92gwm9lif5.herokudns.com\u001b[0m]",
        "twitch.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlarval-cheetah-sd3ctlp2glkmi9qlitsunmje.herokudns.com\u001b[0m]",
        "whoop.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmurmuring-deer-m86w8m12quh3u999l3v5000s.herokudns.com\u001b[0m]",
        "wrapped.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1mzrvqermjawv.cloudfront.net\u001b[0m]",
        "www.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "zoom.oauth-proxy.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfrozen-albatross-obcq3googx8z9ul7flhdyvdk.herokudns.com\u001b[0m]",
        "zoom.oauth.raycast.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcylindrical-depths-xc8i9ldk8j9ntv79enqz7gid.herokudns.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "raycast.com",
        "version": 5,
        "generated_at": "2026-03-24T03:39:00.322Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 5,
            "kept_strict": 5,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "assets.raycast.com",
                "cname": "d1w35p7klh9xkc.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 64,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Có thể bucket\/S3 đã bị xóa hoặc cấu hình sai, nhưng không đủ bằng chứng cho thấy có thể claim được.",
                "llm_labeled_at": "2026-03-24T03:39:13.836Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/assets.raycast.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "backend.raycast.com",
                "cname": "d1w35p7klh9xkc.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 64,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự assets.raycast.com, CNAME CloudFront với 404. Có khả năng là tài nguyên không tồn tại hơn là có thể bị chiếm đoạt.",
                "llm_labeled_at": "2026-03-24T03:39:13.836Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/backend.raycast.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "cli.raycast.com",
                "cname": "d3gnavmzmgbkv0.cloudfront.net",
                "status": 403,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 56,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "HTTP 403 từ CloudFront thường cho thấy quyền truy cập bị từ chối nhưng tài nguyên vẫn được kiểm soát bởi chủ sở hữu hợp pháp, không phải lỗ hổng claim.",
                "llm_labeled_at": "2026-03-24T03:39:13.836Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/cli.raycast.com\/",
                    "http_status": 403,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "files.raycast.com",
                "cname": "d47mokwr4vy2h.cloudfront.net",
                "status": 403,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 56,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "403 từ CloudFront, tương tự cli.raycast.com. Đây có thể là cấu hình bảo mật có chủ đích, không phải tài nguyên bị bỏ hoang.",
                "llm_labeled_at": "2026-03-24T03:39:13.836Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/files.raycast.com\/",
                    "http_status": 403,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            },
            {
                "host": "wrapped.raycast.com",
                "cname": "d1mzrvqermjawv.cloudfront.net",
                "status": 403,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 56,
                "claim_tier": "medium",
                "signals": [],
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "HTTP 403, mẫu tương tự các subdomain khác. Khả năng cao là false positive do cấu hình ứng dụng hợp lệ.",
                "llm_labeled_at": "2026-03-24T03:39:13.836Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/wrapped.raycast.com\/",
                    "http_status": 403,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "no CLAIM_WEBHOOK_URL",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": true,
                "telegram_error": null
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "assets.raycast.com",
                "backend.raycast.com",
                "cli.raycast.com",
                "files.raycast.com",
                "wrapped.raycast.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-24T03:39:13.836Z",
            "usage": {
                "prompt_tokens": 832,
                "completion_tokens": 418,
                "total_tokens": 1250,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 704
            }
        },
        "v5": {
            "processed_at": "2026-03-24T03:39:13.880Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "raycast.com-2026-03-24"
        }
    }
}