{
    "ok": true,
    "slug": "gencat.cat-2026-04-01",
    "stats": {
        "subs": 7391,
        "all": 7391,
        "resolved": 2090,
        "live": 1729,
        "takeover": 59,
        "juicy": 83,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/gencat.cat-2026-04-01",
    "takeover_candidates": [
        "acces-web-bloquejat-judicialment.mossos.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3c1dxd7iirp61.cloudfront.net\u001b[0m]",
        "api.autenticaciogicar5.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2wkfak601584g.cloudfront.net\u001b[0m]",
        "aula.canalempresa.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md38g1qw0e75wzh.cloudfront.net\u001b[0m]",
        "aula.ctti.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md187ioxfxbkhl9.cloudfront.net\u001b[0m]",
        "aula.mesdigitals.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mclasslife-prod-autoscaling-420145314.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "aula.ruralcat.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2u3crfum26k2x.cloudfront.net\u001b[0m]",
        "aulavirtual.esport.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bua2pe26ldrs.cloudfront.net\u001b[0m]",
        "aulavirtual.igualtat.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2iw3nuuvwj7dr.cloudfront.net\u001b[0m]",
        "aulavirtual.interior.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mdigcgz34nzh41.cloudfront.net\u001b[0m]",
        "auth.eleccions.electia.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mddphy61eq4qqu.cloudfront.net\u001b[0m]",
        "campus.aprenges.dretssocials.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1w2t7sxsy8ty9.cloudfront.net\u001b[0m]",
        "canigo.ctti.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3l80coktum0ym.cloudfront.net\u001b[0m]",
        "cercadorgovern.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2t96d4mmmdizf.cloudfront.net\u001b[0m]",
        "codisisdisseny.salut.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mgencat.github.io\u001b[0m]",
        "coecat.serveiocupacio.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1q01kd5inm6k.cloudfront.net\u001b[0m]",
        "contacteestret.catsalut.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1tdgfmx6c428q.cloudfront.net\u001b[0m]",
        "curriculum.ics.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-ics-mantis-212812132.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "desenvolupament.sisoc.soc.intranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-cit-int-alb-ew1-001-775771053.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "eformacio.econtractacio.eco.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2q3zqcmk8ojih.cloudfront.net\u001b[0m]",
        "eleccions.electia.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1wpawij83ldbx.cloudfront.net\u001b[0m]",
        "eleccionsagraries.agricultura.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mdp8a1gg8xqg9q.cloudfront.net\u001b[0m]",
        "escola.consum.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1udu1e4xq68lz.cloudfront.net\u001b[0m]",
        "establimentsturistics.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md4u8hh8ef5t2r.cloudfront.net\u001b[0m]",
        "fontssisdisseny.salut.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nuphwkgb0vuo.cloudfront.net\u001b[0m]",
        "formacio.atc.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mdtr37hc6muz2p.cloudfront.net\u001b[0m]",
        "formacio.ics.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-ecs-pro-1656026336.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "formacio.ispcenxarxa.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2o1wj5jbre4wz.cloudfront.net\u001b[0m]",
        "formacio.salut.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1y0x3xxuyukuc.cloudfront.net\u001b[0m]",
        "formaciovirtual.cire.justicia.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2h7sscpjzs62e.cloudfront.net\u001b[0m]",
        "formularivisites.presidencia.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mds8cxhmbkqs21.cloudfront.net\u001b[0m]",
        "gestioacreditacio.fp.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mpro-elb-acredita-1895036088.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "ispcobert.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3n5p1pekdqyp9.cloudfront.net\u001b[0m]",
        "portaltresoreria.admin.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mcf-proxy-cf-eu10-004-ca8ff5b93d5f2e9b.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "portaltresoreria.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mcf-proxy-cf-eu10-004-ca8ff5b93d5f2e9b.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "pre-aula.mesdigitals.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mclasslife-prod-autoscaling-420145314.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "preproduccio.acces-web-bloquejat-judicialment.mossos.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mdred08gf23zbf.cloudfront.net\u001b[0m]",
        "preproduccio.api.autenticaciogicar5.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3etledpi18q1t.cloudfront.net\u001b[0m]",
        "preproduccio.aws.formacio.cejfe.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-tws-pre-lbg-ew1-ext-897701852.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "preproduccio.establimentsturistics.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md36mfxh3jipmv2.cloudfront.net\u001b[0m]",
        "preproduccio.formacio.ispcenxarxa.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3oqmvd0qdj60o.cloudfront.net\u001b[0m]",
        "preproduccio.formularivisites.presidencia.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3du688g8o8zkg.cloudfront.net\u001b[0m]",
        "preproduccio.migracio.mapaescolar.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxyzdku04ygm3.cloudfront.net\u001b[0m]",
        "preproduccio.pilot.accesvalidat.gestioeducativa.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3owl2aymt8l1y.cloudfront.net\u001b[0m]",
        "preproduccio.pilot.aplicacions.gestioeducativa.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3owl2aymt8l1y.cloudfront.net\u001b[0m]",
        "preproduccio.pilot.cercadorgovern.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md39pxb0v896d30.cloudfront.net\u001b[0m]",
        "preproduccio.pilot.salapremsa.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md3klxgoyyguu4m.cloudfront.net\u001b[0m]",
        "preproduccio.portaltresoreria.admin.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mcf-proxy-cf-eu10-004-ca8ff5b93d5f2e9b.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "preproduccio.portaltresoreria.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mcf-proxy-cf-eu10-004-ca8ff5b93d5f2e9b.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "preproduccio.publicacions.accesuniversitat.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2840jqhvelkrx.cloudfront.net\u001b[0m]",
        "preproduccio.sisoc.soc.intranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-cit-pre-alb-ew1-001-1655318246.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "publicacions.accesuniversitat.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32mdvh3sinl0fkp9.cloudfront.net\u001b[0m]",
        "salapremsa.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2dimll09nnzqv.cloudfront.net\u001b[0m]",
        "salutforma.salutweb.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1y0x3xxuyukuc.cloudfront.net\u001b[0m]",
        "sisoc.soc.intranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-cit-pro-alb-ew1-001-1979011632.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "www.aulavirtual.igualtat.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md2iw3nuuvwj7dr.cloudfront.net\u001b[0m]",
        "www.escola.consum.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1udu1e4xq68lz.cloudfront.net\u001b[0m]",
        "www.formacio.salut.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1y0x3xxuyukuc.cloudfront.net\u001b[0m]",
        "www.preproduccio.serveianonimitzacio.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1zvu8whrk5r6p.cloudfront.net\u001b[0m]",
        "www.serveianonimitzacio.extranet.gencat.cat [\u001b[35mCNAME\u001b[0m] [\u001b[32md1lv5whruhnnnr.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "gencat.cat",
        "version": 4,
        "generated_at": "2026-04-01T04:19:31.404Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 11,
            "kept_strict": 0,
            "llm_review_pool": 2,
            "dropped_noise": 11,
            "deep_skipped_below_pool": 9
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "api.autenticaciogicar5.extranet.gencat.cat",
                "cname": "d2wkfak601584g.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404, có thể là bucket S3 chưa cấu hình hoặc endpoint không public. Tuy nhiên, điểm claim thấp và không có tín hiệu rõ ràng về việc có thể chiếm quyền sở hữu.",
                "llm_labeled_at": "2026-04-01T04:19:38.439Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "preproduccio.api.autenticaciogicar5.extranet.gencat.cat",
                "cname": "d3etledpi18q1t.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự host 1, CNAME CloudFront với HTTP 404. Có thể là môi trường pre-production chưa được triển khai, nhưng không đủ bằng chứng cho khả năng claim thực tế.",
                "llm_labeled_at": "2026-04-01T04:19:38.439Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "api.autenticaciogicar5.extranet.gencat.cat",
                "preproduccio.api.autenticaciogicar5.extranet.gencat.cat"
            ],
            "batch_sources": [
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-01T04:19:38.439Z",
            "usage": {
                "prompt_tokens": 519,
                "completion_tokens": 221,
                "total_tokens": 740,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 391
            }
        }
    }
}