{
    "ok": true,
    "slug": "autonews.com-2026-03-26",
    "stats": {
        "subs": 121,
        "all": 121,
        "resolved": 92,
        "live": 85,
        "takeover": 30,
        "juicy": 16,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 4,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/autonews.com-2026-03-26",
    "takeover_candidates": [
        "answers.arcxp-stage.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m9f46605c6679176d.vercel-dns-013.com\u001b[0m]",
        "answers.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m9f46605c6679176d.vercel-dns-013.com\u001b[0m]",
        "data.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.andata-1851598631.us-east-2.elb.amazonaws.com\u001b[0m]",
        "datacenter.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1926ckwqf9exg.cloudfront.net\u001b[0m]",
        "help.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mautomotivenews.zendesk.com\u001b[0m]",
        "issue.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ne1y454xvt06.cloudfront.net\u001b[0m]",
        "jwt-api.arcxp-dev.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "jwt-api.arcxp-sandbox.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "jwt-api.arcxp-stage.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "jwt-api.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "lwn.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2455rhy7y49f2.cloudfront.net\u001b[0m]",
        "paywall-auth.arcxp-dev.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "paywall-auth.arcxp-prod.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "paywall-auth.arcxp-sandbox.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "paywall-auth.arcxp-stage.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "paywall-auth.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "paywalls-dev.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "paywalls-stage.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "paywalls.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "reports.data.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdjsc8fkh6bit0.cloudfront.net\u001b[0m]",
        "reports.data.dev.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdjsc8fkh6bit0.cloudfront.net\u001b[0m]",
        "s3-prod-canada.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3pjz41ayrfri7.cloudfront.net\u001b[0m]",
        "s3-prod-europe.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mksvyt3dnk8u.cloudfront.net\u001b[0m]",
        "s3-prod.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md27raglysc49wh.cloudfront.net\u001b[0m]",
        "s3-stg-europe.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdk2boktgx2syn.cloudfront.net\u001b[0m]",
        "s3-stg.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nhgd9xn49b8d.cloudfront.net\u001b[0m]",
        "static-europe.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3n87muwxq5qy5.cloudfront.net\u001b[0m]",
        "static.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md399v9rc0r0tso.cloudfront.net\u001b[0m]",
        "store.canada.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2h8muvzdfcowh.cloudfront.net\u001b[0m]",
        "virtual.autonews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ca29nhqsniz2.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "autonews.com",
        "version": 5,
        "generated_at": "2026-03-26T03:21:17.955Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 6,
            "kept_strict": 4,
            "llm_review_pool": 0,
            "dropped_noise": 2,
            "deep_skipped_below_pool": 2
        },
        "candidates": [
            {
                "host": "s3-prod-canada.autonews.com",
                "cname": "d3pjz41ayrfri7.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Có thể bucket S3 đã bị xóa hoặc cấu hình sai, nhưng không đủ bằng chứng cho thấy có thể claim trực tiếp.",
                "llm_labeled_at": "2026-03-26T03:21:29.935Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/s3-prod-canada.autonews.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "s3-prod-europe.autonews.com",
                "cname": "d3mksvyt3dnk8u.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Tương tự các host khác: CNAME CloudFront, HTTP 404. Thiếu bằng chứng rõ ràng về việc resource chưa được gắn tenant và có thể claim.",
                "llm_labeled_at": "2026-03-26T03:21:29.936Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/s3-prod-europe.autonews.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "s3-prod.autonews.com",
                "cname": "d27raglysc49wh.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "Cấu hình CloudFront với HTTP 404. Có thể là endpoint dự phòng hoặc chưa triển khai, nhưng khả năng claim thấp do không xác định được lỗ hổng cụ thể.",
                "llm_labeled_at": "2026-03-26T03:21:29.936Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/s3-prod.autonews.com\/",
                    "http_status": 404,
                    "title_snippet": "",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            },
            {
                "host": "virtual.autonews.com",
                "cname": "d2ca29nhqsniz2.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 54,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.65,
                "llm_rationale_vi": "CNAME CloudFront, HTTP 404 với title rõ ràng. Có vẻ là trang không tồn tại, nhưng không có dấu hiệu cho thấy CloudFront distribution chưa được liên kết và có thể chiếm quyền.",
                "llm_labeled_at": "2026-03-26T03:21:29.936Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low",
                "claimed": false,
                "claim_status": "needs_manual",
                "claim_details": {
                    "method": "http_verify",
                    "verify_url": "https:\/\/virtual.autonews.com\/",
                    "http_status": 404,
                    "title_snippet": "404 Not Found",
                    "verify_error": null,
                    "webhook_note": "webhook_http_200",
                    "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)"
                },
                "telegram_sent": false,
                "telegram_error": "filtered:llm_priority_low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "s3-prod-canada.autonews.com",
                "s3-prod-europe.autonews.com",
                "s3-prod.autonews.com",
                "virtual.autonews.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-26T03:21:29.936Z",
            "usage": {
                "prompt_tokens": 733,
                "completion_tokens": 366,
                "total_tokens": 1099,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 605
            }
        },
        "v5": {
            "processed_at": "2026-03-26T03:21:29.985Z",
            "auto_claim_enabled": true,
            "telegram_enabled": true,
            "slug": "autonews.com-2026-03-26"
        }
    }
}