{
    "ok": true,
    "slug": "collegeboard.org-2026-03-28",
    "stats": {
        "subs": 2855,
        "all": 2855,
        "resolved": 1728,
        "live": 584,
        "takeover": 49,
        "juicy": 50,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/collegeboard.org-2026-03-28",
    "takeover_candidates": [
        "admin.searchresults.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcollegeboard10-index-alb-v00-762101581.us-east-1.elb.amazonaws.com\u001b[0m]",
        "alation.datamanagement-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-alation-nonprod-elb-586471170.us-east-1.elb.amazonaws.com\u001b[0m]",
        "alation.datamanagement-prod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-alation-elb-1156973567.us-east-1.elb.amazonaws.com\u001b[0m]",
        "anomalo.datamanagement-prod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-prod-anomalo-elb-496788067.us-east-1.elb.amazonaws.com\u001b[0m]",
        "apcentral-media.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdpam1p5ybqpwr.cloudfront.net\u001b[0m]",
        "apclassroom-prpts.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcb-pdf-api-prod-lb-2094649173.us-east-1.elb.amazonaws.com\u001b[0m]",
        "apclassroom-rctesting-prpts.apqainfotech-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcb-pdf-uat-staging-1333538030.us-east-1.elb.amazonaws.com\u001b[0m]",
        "apclassroom-testing-prpts.apqainfotech-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcb-pdf-uat-staging-1333538030.us-east-1.elb.amazonaws.com\u001b[0m]",
        "apclassroompdf-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcb-pdf-api-staging-lb-586589070.us-east-1.elb.amazonaws.com\u001b[0m]",
        "apclassroompdf.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcollege-board-pdf-api-935684679.us-east-1.elb.amazonaws.com\u001b[0m]",
        "apple.pps-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md264mkzgpye1fq.cloudfront.net\u001b[0m]",
        "apro.apfym-prod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md3b9odq24nfksc.cloudfront.net\u001b[0m]",
        "apscores-dev.ap-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2i2aptf4m8nk7.cloudfront.net\u001b[0m]",
        "apscores-qa.ap-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdfftz8o4murvi.cloudfront.net\u001b[0m]",
        "artifactory-saas.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-0f97ff42dc2b1836a-eiow9qmg.vpce-svc-0b245d99885c0eef6.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "aspen.pps-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md3hw05vkvb7qh8.cloudfront.net\u001b[0m]",
        "assets-list.aposre-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcollegeboard-software.github.io\u001b[0m]",
        "assets-list.appotential-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcollegeboard-software.github.io\u001b[0m]",
        "cbsso.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcb-ping-engine-vpc-lb-308690317.us-east-1.elb.amazonaws.com\u001b[0m]",
        "crowdstrike-api.ess-prod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md-9qdkvgr4i7.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "designsystem.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "eventreg.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1yv1r948jotsn.cloudfront.net\u001b[0m]",
        "inas-ui-api-waf.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md4wae3ztes6t9.cloudfront.net\u001b[0m]",
        "llandwehr-widget-api.consent-management-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2qughrr58mdvy.cloudfront.net\u001b[0m]",
        "mabeer-widget-api.consent-management-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1enocfrmkg2ov.cloudfront.net\u001b[0m]",
        "media-origin-cf-prod-live.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1e2powac328zt.cloudfront.net\u001b[0m]",
        "media-origin-cf.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2x9nn50j5tdwu.cloudfront.net\u001b[0m]",
        "msbsm.datascience-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bcbus0ypx1fg.cloudfront.net\u001b[0m]",
        "nhs.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ek6tfo2lk5yg.cloudfront.net\u001b[0m]",
        "notebook.datascience-prod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1uuiqbmeecmrp.cloudfront.net\u001b[0m]",
        "oak.pps-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md23ybvyx4bzavo.cloudfront.net\u001b[0m]",
        "offboarding-survey.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2cxklhumr06ll.cloudfront.net\u001b[0m]",
        "opensearch.tdtk-prod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpc-tdtk-opensearch-duyfis662yuz35t3g2zsfvzk3i.us-east-1.es.amazonaws.com\u001b[0m]",
        "origin-b22a3f2f-6f89-4333-80eb-8ecd6342dbbf.genai-prod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md3uh9x7elwb2hi.cloudfront.net\u001b[0m]",
        "palm.pps-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md35nhwuwntqmem.cloudfront.net\u001b[0m]",
        "partnerdocs.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nxe2bit5ye4o.cloudfront.net\u001b[0m]",
        "pps-preprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md33mzzcjnrpyv8.cloudfront.net\u001b[0m]",
        "pr-366-widget-api.consent-management-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md3tlj13vnw0guq.cloudfront.net\u001b[0m]",
        "pr-368-widget-api.consent-management-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xqzhklhtglf8.cloudfront.net\u001b[0m]",
        "prod-widget-api.consent-management-prod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md9cse056q6xls.cloudfront.net\u001b[0m]",
        "schoolcode.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2m3406rmpcb10.cloudfront.net\u001b[0m]",
        "scoresendcode.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2m3406rmpcb10.cloudfront.net\u001b[0m]",
        "sdms.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2by7voahrgxz5.cloudfront.net\u001b[0m]",
        "searchresults.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcollegeboard10-search-alb-v00-404679868.us-east-1.elb.amazonaws.com\u001b[0m]",
        "secure-ppmedia.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2bahilovbefpa.cloudfront.net\u001b[0m]",
        "softphone-logout.conquerors-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md2kzij6hoh9v6e.cloudfront.net\u001b[0m]",
        "ssdreview-dev.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mauraportallb-416209474.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ssdreview.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mauraportal-alb-2122308033.us-east-1.elb.amazonaws.com\u001b[0m]",
        "uat-widget-api.consent-management-nonprod.collegeboard.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md3kv3jzeswzjq.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "collegeboard.org",
        "version": 4,
        "generated_at": "2026-03-28T11:57:06.815Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 16,
            "kept_strict": 0,
            "llm_review_pool": 5,
            "dropped_noise": 16,
            "deep_skipped_below_pool": 11
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "llandwehr-widget-api.consent-management-nonprod.collegeboard.org",
                "cname": "d2qughrr58mdvy.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Tên host có vẻ là môi trường non-prod nội bộ, có thể được quản lý bởi tổ chức. Không có bằng chứng rõ ràng về việc có thể chiếm quyền.",
                "llm_labeled_at": "2026-03-28T11:57:24.441Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "mabeer-widget-api.consent-management-nonprod.collegeboard.org",
                "cname": "d1enocfrmkg2ov.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự các host non-prod khác, CNAME CloudFront với 404. Có khả năng là tài nguyên được cấu hình nội bộ, không phải là mục tiêu claim công khai.",
                "llm_labeled_at": "2026-03-28T11:57:24.441Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "pr-366-widget-api.consent-management-nonprod.collegeboard.org",
                "cname": "d3tlj13vnw0guq.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Host có tiền tố 'pr-366' cho thấy môi trường pull request\/non-prod. CloudFront 404 nhưng có thể là cấu hình tạm thời, không phải lỗ hổng claim thực sự.",
                "llm_labeled_at": "2026-03-28T11:57:24.441Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "prod-widget-api.consent-management-prod.collegeboard.org",
                "cname": "d9cse056q6xls.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "Mặc dù là môi trường prod và trả về 404, nhưng tên miền chính thức của tổ chức lớn. Khả năng cao được giám sát và quản lý, không dễ bị chiếm quyền.",
                "llm_labeled_at": "2026-03-28T11:57:24.441Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "uat-widget-api.consent-management-nonprod.collegeboard.org",
                "cname": "d3kv3jzeswzjq.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Host UAT (User Acceptance Testing) non-prod. Cấu hình CloudFront 404 có thể là do chưa triển khai đầy đủ, nhưng không phải lỗ hổng claim thực tế.",
                "llm_labeled_at": "2026-03-28T11:57:24.441Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "llandwehr-widget-api.consent-management-nonprod.collegeboard.org",
                "mabeer-widget-api.consent-management-nonprod.collegeboard.org",
                "pr-366-widget-api.consent-management-nonprod.collegeboard.org",
                "prod-widget-api.consent-management-prod.collegeboard.org",
                "uat-widget-api.consent-management-nonprod.collegeboard.org"
            ],
            "batch_sources": [
                "pool",
                "pool",
                "pool",
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-28T11:57:24.441Z",
            "usage": {
                "prompt_tokens": 882,
                "completion_tokens": 531,
                "total_tokens": 1413,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 754
            }
        }
    }
}