{ "ok": true, "slug": "corriere.it-2026-03-29", "stats": { "subs": 5815, "all": 5815, "resolved": 5384, "live": 37, "takeover": 35, "juicy": 31, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/corriere.it-2026-03-29", "takeover_candidates": [ "acquisti.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2zxtbdi4dodso.cloudfront.net\u001b[0m]", "api-video.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md24p96brdjmljd.cloudfront.net\u001b[0m]", "asigliano-vercellese.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32m8100.corriere.it\u001b[0m]", "audio-article-manager.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md1xa2yogknevh2.cloudfront.net\u001b[0m]", "borgo-vercelli.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32m8100.corriere.it\u001b[0m]", "borsa-stage.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md1uxz7bffh3hlk.cloudfront.net\u001b[0m]", "borsa.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2d6uv36u5el6s.cloudfront.net\u001b[0m]", "coupons.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2p6oegbzjhyw5.cloudfront.net\u001b[0m]", "css.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md36awvekxqtvrp.cloudfront.net\u001b[0m]", "edicola-pdf.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md22nh0sp0miz81.cloudfront.net\u001b[0m]", "elearning.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md3esju3p2uh3jf.cloudfront.net\u001b[0m]", "embed.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32mdjmrxntin7m5t.cloudfront.net\u001b[0m]", "forumcorriere.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mixdy9px9a4c.cloudfront.net\u001b[0m]", "infografichelalettura.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2pkghb6jqtiln.cloudfront.net\u001b[0m]", "listino-motori.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md49sc6jyrna21.cloudfront.net\u001b[0m]", "living.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ared931d3fdm.cloudfront.net\u001b[0m]", "media2.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2s3yebuo74i6n.cloudfront.net\u001b[0m]", "nextatlas.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]", "palazzolo-vercellese.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32m8100.corriere.it\u001b[0m]", "point-deploy-preprod-gcp.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md1c49m8rwc9i16.cloudfront.net\u001b[0m]", "quinto-vercellese.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32m8100.corriere.it\u001b[0m]", "stream.lavoro.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md33kiiee455i5s.cloudfront.net\u001b[0m]", "topicsmanagerservice.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ymgp9xaxe69x.cloudfront.net\u001b[0m]", "tronzano-vercellese.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32m8100.corriere.it\u001b[0m]", "vercelli.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32m8100.corriere.it\u001b[0m]", "viaggi.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2u5yt6i2ryja6.cloudfront.net\u001b[0m]", "video.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p15w45f27aqk.cloudfront.net\u001b[0m]", "video.corrieredelfriuliveneziagiulia.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2y6dat79vn728.cloudfront.net\u001b[0m]", "video.corrieredellaltoadige.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2y6dat79vn728.cloudfront.net\u001b[0m]", "video.corrieredelmezzogiorno.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p15w45f27aqk.cloudfront.net\u001b[0m]", "video.corrieredeltrentino.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md2y6dat79vn728.cloudfront.net\u001b[0m]", "video.corrieredelveneto.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p15w45f27aqk.cloudfront.net\u001b[0m]", "video.corrieredibologna.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p15w45f27aqk.cloudfront.net\u001b[0m]", "video.corrierefiorentino.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p15w45f27aqk.cloudfront.net\u001b[0m]", "vivimilano.corriere.it [\u001b[35mCNAME\u001b[0m] [\u001b[32md3o6v88vzalyw4.cloudfront.net\u001b[0m]" ], "takeover_v4": { "domain": "corriere.it", "version": 4, "generated_at": "2026-03-29T09:21:22.278Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 7, "kept_strict": 0, "llm_review_pool": 5, "dropped_noise": 7, "deep_skipped_below_pool": 2 }, "candidates": [], "llm_review_pool": [ { "host": "api-video.corriere.it", "cname": "d24p96brdjmljd.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng trả về 404. Có thể bucket\/tài nguyên đã bị xóa hoặc chưa cấu hình, nhưng không có bằng chứng rõ ràng về khả năng chiếm quyền sở hữu.", "llm_labeled_at": "2026-03-29T09:21:36.965Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "audio-article-manager.corriere.it", "cname": "d1xa2yogknevh2.cloudfront.net", "status": 404, "title": "404 Not Found", "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CNAME CloudFront với 404. Tên miền phụ có vẻ là nội bộ\/quản lý, khả năng chiếm quyền thấp do không có dấu hiệu tài nguyên bị bỏ hoặc có thể claim.", "llm_labeled_at": "2026-03-29T09:21:36.965Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "css.corriere.it", "cname": "d36awvekxqtvrp.cloudfront.net", "status": 404, "title": "404 Not Found", "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.8, "llm_rationale_vi": "Tên miền phụ 'css' thường dùng cho tài nguyên tĩnh. CloudFront 404 có thể là cấu hình sai hoặc tài nguyên đã di chuyển, nhưng không phải mục tiêu claim điển hình.", "llm_labeled_at": "2026-03-29T09:21:36.965Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "infografichelalettura.corriere.it", "cname": "d2pkghb6jqtiln.cloudfront.net", "status": 404, "title": "404 Not Found", "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CNAME CloudFront trả về 404. Tên miền phụ có vẻ cho ứng dụng cụ thể, có thể đã ngừng hoạt động nhưng không có chỉ số rõ ràng về khả năng claim.", "llm_labeled_at": "2026-03-29T09:21:36.965Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "topicsmanagerservice.corriere.it", "cname": "d2ymgp9xaxe69x.cloudfront.net", "status": 404, "title": "Error", "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CloudFront 404 với tiêu đề 'Error'. Dịch vụ có vẻ nội bộ, không có bằng chứng cho thấy tài nguyên có thể bị chiếm quyền từ nhà cung cấp.", "llm_labeled_at": "2026-03-29T09:21:36.965Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "api-video.corriere.it", "audio-article-manager.corriere.it", "css.corriere.it", "infografichelalettura.corriere.it", "topicsmanagerservice.corriere.it" ], "batch_sources": [ "pool", "pool", "pool", "pool", "pool" ], "promote_revived": true, "labeled_at": "2026-03-29T09:21:36.965Z", "usage": { "prompt_tokens": 851, "completion_tokens": 451, "total_tokens": 1302, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 723 } } } }