{
    "ok": true,
    "slug": "gov.pl-2026-04-02",
    "stats": {
        "subs": 25086,
        "all": 25086,
        "resolved": 16889,
        "live": 55,
        "takeover": 20,
        "juicy": 62,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/gov.pl-2026-04-02",
    "takeover_candidates": [
        "baza.nawa.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32mslippery-ostrich-m6rwt4dsumhsqm868w9r6gib.herokudns.com\u001b[0m]",
        "creativetech.ipk.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "elusivesense.ipk.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "expo.ipk.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "info.niepodlegla.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ylryhphqi5z3.cloudfront.net\u001b[0m]",
        "klon.sm.efs.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32msm-efs-klon-external-alb-523700893.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "klon.sowa2021.efs.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32msowa-efs-klon-external-alb-1938728244.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "programy.ipk.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "staging.fina.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32md3uhkfj5uxp5s.cloudfront.net\u001b[0m]",
        "szkol.sm.efs.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32msm-efs-szkol-external-alb-522821744.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "szkol.sowa2021.efs.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32msowa-efs-szkol-external-alb-1040491810.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "www.designbiznes.ipk.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.expo.ipk.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "www.fina.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32md3uhkfj5uxp5s.cloudfront.net\u001b[0m]",
        "www.info.niepodlegla.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ylryhphqi5z3.cloudfront.net\u001b[0m]",
        "www.klon.sm.efs.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32msm-efs-klon-external-alb-523700893.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "www.klon.sowa2021.efs.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32msowa-efs-klon-external-alb-1938728244.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "www.szkol.sm.efs.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32msm-efs-szkol-external-alb-522821744.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "www.szkol.sowa2021.efs.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32msowa-efs-szkol-external-alb-1040491810.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "www.wom.nio.gov.pl [\u001b[35mCNAME\u001b[0m] [\u001b[32m1184fe479e2ef6cc.vercel-dns-017.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "gov.pl",
        "version": 4,
        "generated_at": "2026-04-02T02:01:22.694Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 1,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "telemetria-api-blackhole.kim.gov.pl",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ tới ghs.googlehosted.com (Google) nhưng HTTP 404 là phản hồi chung của Google cho host chưa cấu hình, không chứng minh được có thể chiếm quyền sở hữu từ chính phủ.",
                "llm_labeled_at": "2026-04-02T02:01:27.917Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "telemetria-api-blackhole.kim.gov.pl"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-02T02:01:27.917Z",
            "usage": {
                "prompt_tokens": 392,
                "completion_tokens": 114,
                "total_tokens": 506,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 264
            }
        }
    }
}