{
    "ok": true,
    "slug": "elpais.com-2026-03-31",
    "stats": {
        "subs": 227,
        "all": 227,
        "resolved": 179,
        "live": 149,
        "takeover": 31,
        "juicy": 65,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/elpais.com-2026-03-31",
    "takeover_candidates": [
        "agendapublica.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-redireccionesweb-pro-407952733.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "arcsubscriptions.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mda738f7m1xog1.cloudfront.net\u001b[0m]",
        "auth-pre.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1v13p87rs7sr5.cloudfront.net\u001b[0m]",
        "auth.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o9x5n0yc2bq4.cloudfront.net\u001b[0m]",
        "bandaancha.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-redireccionesweb-pro-407952733.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "colectives-services.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-arcsubsdocgenweb-pro-203196464.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "des.motor.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-motorwebinl-307484490.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "descubre.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdl0hpoda0ethb.cloudfront.net\u001b[0m]",
        "dev.aniversario.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3l9n1l868kipz.cloudfront.net\u001b[0m]",
        "escuela.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdd78i1h03fcdg.cloudfront.net\u001b[0m]",
        "fichasyprecios.motor.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-ingressn-ingressn-37cd5bace9-9ee9ac2e8aa9444a.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "icon.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-redireccionesweb-pro-407952733.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "imagenes-desfiles.smoda.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdq8qa6xeenepf.cloudfront.net\u001b[0m]",
        "int.motor.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-motorwebinl-307484490.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "int.retina.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-retinawebin-1409084677.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "pre.elpaissemanal.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdwik87277uo0x.cloudfront.net\u001b[0m]",
        "pre.eventos.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md259ogqoermx1.cloudfront.net\u001b[0m]",
        "pre.motor.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2i7rzhx9ip06m.cloudfront.net\u001b[0m]",
        "pre.premios.retina.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdtyxu0rqn07xi.cloudfront.net\u001b[0m]",
        "proxypublicapi.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdjv74vnj5roe8.cloudfront.net\u001b[0m]",
        "pxlctl.des.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-authweb-des-781781016.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "reg.des.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32musun-des-lb-1963268228.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "res3.registro.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1a4i63w2zyisz.cloudfront.net\u001b[0m]",
        "res5.registro.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1a4i63w2zyisz.cloudfront.net\u001b[0m]",
        "res6.registro.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1eiv14p88ku3h.cloudfront.net\u001b[0m]",
        "retina.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-redireccionesweb-pro-407952733.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "services.reg.des.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32musun-des-lb-1963268228.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "services.users.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3adwl89vrp8si.cloudfront.net\u001b[0m]",
        "smoda.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p3zazfz3v5p0.cloudfront.net\u001b[0m]",
        "www.cat.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-redireccionesweb-pro-407952733.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "www.tecnologia.elpais.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-redireccionesweb-pro-407952733.eu-west-1.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "elpais.com",
        "version": 4,
        "generated_at": "2026-03-30T18:38:56.472Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 8,
            "kept_strict": 0,
            "llm_review_pool": 2,
            "dropped_noise": 8,
            "deep_skipped_below_pool": 6
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "dev.aniversario.elpais.com",
                "cname": "d3l9n1l868kipz.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Có thể là môi trường dev\/test chưa triển khai, không chắc có thể claim được vì tài nguyên có thể vẫn được quản lý.",
                "llm_labeled_at": "2026-03-30T18:39:03.527Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "proxypublicapi.elpais.com",
                "cname": "djv74vnj5roe8.cloudfront.net",
                "status": 404,
                "title": "Error",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự, CNAME CloudFront với HTTP 404. Có thể là endpoint API chưa cấu hình, nhưng không đủ bằng chứng cho thấy có thể chiếm quyền sở hữu.",
                "llm_labeled_at": "2026-03-30T18:39:03.527Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "dev.aniversario.elpais.com",
                "proxypublicapi.elpais.com"
            ],
            "batch_sources": [
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-30T18:39:03.527Z",
            "usage": {
                "prompt_tokens": 508,
                "completion_tokens": 198,
                "total_tokens": 706,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 380
            }
        }
    }
}