{
    "ok": true,
    "slug": "foxnews.com-2026-04-01",
    "stats": {
        "subs": 367,
        "all": 367,
        "resolved": 224,
        "live": 153,
        "takeover": 17,
        "juicy": 49,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/foxnews.com-2026-04-01",
    "takeover_candidates": [
        "analytics.dev-nova.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1u3pbazdfhqya.cloudfront.net\u001b[0m]",
        "analytics.nova.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdx1gkwb6s79ss.cloudfront.net\u001b[0m]",
        "click.ses.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1m4zi0o5iasda.cloudfront.net\u001b[0m]",
        "collection-builder.nation.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnation-natio-afkmzvxfnvr6-2021335077.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev-click.ses.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3g2aayb7onrhn.cloudfront.net\u001b[0m]",
        "dev-electionhub.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md25o16edta85oo.cloudfront.net\u001b[0m]",
        "fb-cms.vpc.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfb-cms-webal-plk29iahix7e-374478361.us-east-1.elb.amazonaws.com\u001b[0m]",
        "fn-cms.vpc.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfn-cms-webal-y6fdllrhukvj-2067518706.us-east-1.elb.amazonaws.com\u001b[0m]",
        "fn-hp-cms.vpc.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfn-hp-webal-cxbjm7b2qgkd-1024519255.us-east-1.elb.amazonaws.com\u001b[0m]",
        "fndigitaldocs.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfoxnews.github.io\u001b[0m]",
        "genstack1.vpc.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgenstack1-webelast-cbmnpama2vs7-597628132.us-east-1.elb.amazonaws.com\u001b[0m]",
        "help.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfoxnews.zendesk.com\u001b[0m]",
        "merch.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "moxiedocs.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfoxnews.github.io\u001b[0m]",
        "partners.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdjxebetxc7ozr.cloudfront.net\u001b[0m]",
        "stage-click.ses.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md20llprfoh0d9d.cloudfront.net\u001b[0m]",
        "tools.foxnews.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtools.foxnews.com.s3-website-us-east-1.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "foxnews.com",
        "version": 4,
        "generated_at": "2026-03-31T18:31:02.061Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 7,
            "kept_strict": 0,
            "llm_review_pool": 3,
            "dropped_noise": 7,
            "deep_skipped_below_pool": 4
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "analytics.dev-nova.foxnews.com",
                "cname": "d1u3pbazdfhqya.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 không đủ chứng tỏ resource chưa được gắn tenant. Có thể là endpoint chưa cấu hình nhưng đã được bảo vệ.",
                "llm_labeled_at": "2026-03-31T18:31:10.563Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "analytics.nova.foxnews.com",
                "cname": "dx1gkwb6s79ss.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự host khác, CloudFront trả về 404. Điểm claim thấp và không có tín hiệu rõ ràng về resource bị bỏ hoang có thể claim.",
                "llm_labeled_at": "2026-03-31T18:31:10.564Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "partners.foxnews.com",
                "cname": "djxebetxc7ozr.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Cấu hình CloudFront với HTTP 404. Không có bằng chứng resource chưa được gắn tenant hoặc có thể claim qua nhà cung cấp.",
                "llm_labeled_at": "2026-03-31T18:31:10.564Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "analytics.dev-nova.foxnews.com",
                "analytics.nova.foxnews.com",
                "partners.foxnews.com"
            ],
            "batch_sources": [
                "pool",
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-31T18:31:10.564Z",
            "usage": {
                "prompt_tokens": 614,
                "completion_tokens": 253,
                "total_tokens": 867,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 486
            }
        }
    }
}