{
    "ok": true,
    "slug": "ed.gov-2026-03-30",
    "stats": {
        "subs": 2106,
        "all": 2106,
        "resolved": 810,
        "live": 390,
        "takeover": 72,
        "juicy": 118,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/ed.gov-2026-03-30",
    "takeover_candidates": [
        "21apr.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.21apr-elb-app-349786063.us-east-1.elb.amazonaws.com\u001b[0m]",
        "aaec.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32maaec-alb-99961337.us-gov-east-1.elb.amazonaws.com\u001b[0m]",
        "analytics-platform-pdo.edmaps.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mprmtr-edmaps-p-ap-pdo-nlb-sv5-e4a53feae087b14a.elb.us-gov-west-1.amazonaws.com\u001b[0m]",
        "analytics-platform.edmaps.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mprmtr-edmaps-p-ap-nlb-sv1-1296effb0b30f69d.elb.us-gov-west-1.amazonaws.com\u001b[0m]",
        "api.covid-relief-data.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md39a6eero8r7yx.cloudfront.net\u001b[0m]",
        "api.edpass.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md-a20sqdkbkh.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "api.enaep.cotw-ng.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md-1q5v9miu6l.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "api21apr.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md-c18g78sqqj.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "apitest21apr.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md-sb6ysj9jl7.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "apitrain21apr.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md-jtvyd5f10g.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "appsapp.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-sharepoint2016-68e61cfc4e4bc2b2.elb.us-east-1.amazonaws.com\u001b[0m]",
        "charterschoolcenter.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mncsrc-prod-alb-v2-606330870.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "cmts.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcmtsprd-747351500.us-east-1.elb.amazonaws.com\u001b[0m]",
        "covid-relief-data.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md8ni8cw3pmhp1.cloudfront.net\u001b[0m]",
        "cte.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mnprs-2022-alb-1325847643.us-east-1.elb.amazonaws.com\u001b[0m]",
        "datareview.msix.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-ext-01-1247967637.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev.msix.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-ext-01-1247967637.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dr.msix.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-ext-03-1493334781.us-west-1.elb.amazonaws.com\u001b[0m]",
        "eddataexpress.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32medde-prod-1937419211.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "eddataexpress.stage.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32medde-stage-1771909752.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "edpass.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md3dd7evfn0sp0r.cloudfront.net\u001b[0m]",
        "embargo.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-sharepoint2016-68e61cfc4e4bc2b2.elb.us-east-1.amazonaws.com\u001b[0m]",
        "embargoapp.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-sharepoint2016-68e61cfc4e4bc2b2.elb.us-east-1.amazonaws.com\u001b[0m]",
        "enaep-stage.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2qobgs2gwj15z.cloudfront.net\u001b[0m]",
        "enaep.cotw-ng.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md260rryvrtuntr.cloudfront.net\u001b[0m]",
        "enaep.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2hrj2otrkjjal.cloudfront.net\u001b[0m]",
        "etg5web.dectest.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32metg5web-external-tic-908681054.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "g5etst.dectest.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2k9k9zmuaalxj.cloudfront.net\u001b[0m]",
        "gearup.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mgearup-linuxweb-alb-prod-1532408016.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "hepis.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mhepis-linuxweb-alb-prod-1561601777.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "impactaid.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1yecrtju600hg.cloudfront.net\u001b[0m]",
        "internal.api.fsapartners.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-0531966a69fce260e-j1vs1q1c.vpce-svc-096d23fdc314643a4.us-gov-west-1.vpce.amazonaws.com\u001b[0m]",
        "ipms-dev.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mipms-dev-alb-1686718433.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ipms.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mipms-prd-alb-1246571014.us-east-1.elb.amazonaws.com\u001b[0m]",
        "iris.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32miris-elb-prod-566090100.us-east-1.elb.amazonaws.com\u001b[0m]",
        "msix.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-ext-02-1743096707.us-east-1.elb.amazonaws.com\u001b[0m]",
        "naepq-stage.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md3tqaj97u49p2t.cloudfront.net\u001b[0m]",
        "naepq.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md3du70hbsbhklq.cloudfront.net\u001b[0m]",
        "naepqfeedback.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mapp-ngvb-2019-prod-350971271.us-east-1.elb.amazonaws.com\u001b[0m]",
        "naepqfeedbackapi.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mapp-ngvb-2019-prod-350971271.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ncela.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-prod-ncela-v2-1807799369.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "neglected-delinquent.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mwww-neglected-delinquent-ed-gov-1447394137.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "nrs.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mnrs-alb-1817210668.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "nrts.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mapp-nrts-prod-240765657.us-east-1.elb.amazonaws.com\u001b[0m]",
        "perkins.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mnprs-2022-alb-1325847643.us-east-1.elb.amazonaws.com\u001b[0m]",
        "proxy-vpc-es.edmaps.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-082b422efcb43c58a-s00tan88.vpce-svc-03149b83a3a4fefad.us-gov-west-1.vpce.amazonaws.com\u001b[0m]",
        "rules.edpass.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md-rw966do3i3.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "schemaregistry-ext-prod.edmaps.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mprmtr-edmaps-p-registry-nlb-sv1-74ff18e7233f4246.elb.us-gov-west-1.amazonaws.com\u001b[0m]",
        "sdb-api.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mapp-security-dashboard-prod-655950149.us-east-1.elb.amazonaws.com\u001b[0m]",
        "sdb.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mapp-security-dashboard-prod-655950149.us-east-1.elb.amazonaws.com\u001b[0m]",
        "securitytouch.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32msectouch-prod-alb-94857008.us-east-1.elb.amazonaws.com\u001b[0m]",
        "service-api-osc.fsapartners.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mprmtr-ppo-p-system-api-nlb-sv5-c48bbd358cfd79f0.elb.us-gov-west-1.amazonaws.com\u001b[0m]",
        "service-api-priv.cod.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-prmtr-cod-p-system-api-alb-1445837699.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "service-api-priv.edmaps.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-prmtr-edmaps-p-system-api-alb-488366385.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "service-api-priv.fsapartners.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-prmtr-ppo-p-system-api-alb-1805497875.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "service-priv.api.nsldsfap.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-prmtr-nslds-p-system-api-alb-972100195.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "spapp.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mapp-sharepoint-prod-nlb-fdeb55e320d5cc52.elb.us-east-1.amazonaws.com\u001b[0m]",
        "sso.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mnlb-svc-adfswap-naepedgov-c7fe0c0f3b943f2e.elb.us-east-1.amazonaws.com\u001b[0m]",
        "survey.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mapp-sharepoint-prod-nlb-fdeb55e320d5cc52.elb.us-east-1.amazonaws.com\u001b[0m]",
        "t4pacenter.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mt4pa-lb-1899211718.us-gov-east-1.elb.amazonaws.com\u001b[0m]",
        "test-fixpath-pdt-system-api-priv.fsapartners.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-prmtr-ppo-t-system-api-alb-51403738.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "test.msix.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-ext-01-1247967637.us-east-1.elb.amazonaws.com\u001b[0m]",
        "test21apr.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.test21apr-app-2033062091.us-east-1.elb.amazonaws.com\u001b[0m]",
        "testgearup.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mgearup-linuxweb-alb-stage-1935462998.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "testhepis.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mhepis-linuxweb-alb-stage-735267357.us-gov-west-1.elb.amazonaws.com\u001b[0m]",
        "train21apr.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.train21apr-app-1356565323.us-east-1.elb.amazonaws.com\u001b[0m]",
        "training.msix.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-ext-01-1247967637.us-east-1.elb.amazonaws.com\u001b[0m]",
        "training2.msix.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-ext-01-1247967637.us-east-1.elb.amazonaws.com\u001b[0m]",
        "training3.msix.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-ext-01-1247967637.us-east-1.elb.amazonaws.com\u001b[0m]",
        "vpc-es-cod-internal.api.nsldsfap.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-021828a90d696e395-kjc6x43w.vpce-svc-021f69db61c0ce3db.us-gov-west-1.vpce.amazonaws.com\u001b[0m]",
        "www.naep.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mapp-sharepoint-prod-nlb-fdeb55e320d5cc52.elb.us-east-1.amazonaws.com\u001b[0m]",
        "www.ncela.ed.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-prod-ncela-v2-1807799369.us-gov-west-1.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "ed.gov",
        "version": 4,
        "generated_at": "2026-03-30T13:09:10.848Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 8,
            "kept_strict": 0,
            "llm_review_pool": 0,
            "dropped_noise": 8,
            "deep_skipped_below_pool": 8
        },
        "candidates": [],
        "llm_review_pool": []
    }
}