{
    "ok": true,
    "slug": "gsu.edu-2026-04-02",
    "stats": {
        "subs": 9311,
        "all": 9311,
        "resolved": 5446,
        "live": 45,
        "takeover": 32,
        "juicy": 48,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/gsu.edu-2026-04-02",
    "takeover_candidates": [
        "api-blab.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md-o2j7fmw1mc.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "api-dev.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md-29fl9iimm2.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "api-qa.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlikg5l6myqyj.cloudfront.net\u001b[0m]",
        "api.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdc6o5ro5m0kj.cloudfront.net\u001b[0m]",
        "cdn-dev.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md36r0831o1565b.cloudfront.net\u001b[0m]",
        "cdn-qa.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md1q7dexyrjyudj.cloudfront.net\u001b[0m]",
        "cdn.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md1tk9b20ayzpxr.cloudfront.net\u001b[0m]",
        "coinstac.rs.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-3-211-131-5.compute-1.amazonaws.com\u001b[0m]",
        "coinstacdev01.rs.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-52-204-186-176.compute-1.amazonaws.com\u001b[0m]",
        "covapi.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md-wzi5xy4vbh.execute-api.us-east-2.amazonaws.com\u001b[0m]",
        "graph-dev.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md27va14tj7qzy9.cloudfront.net\u001b[0m]",
        "graph-qa.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md1kzjs3lia0wuo.cloudfront.net\u001b[0m]",
        "graph.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ir4qwhupnsc.cloudfront.net\u001b[0m]",
        "hpc.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-52-54-205-49.compute-1.amazonaws.com\u001b[0m]",
        "idp.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32midp-gsu-edu-prd-nlb-b3330e8c019b670c.elb.us-east-1.amazonaws.com\u001b[0m]",
        "irbaccountrequest.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdrh6y11ze7v65.cloudfront.net\u001b[0m]",
        "lighthost.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mgastate.github.io\u001b[0m]",
        "login.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md1vjr936p6qyo9.cloudfront.net\u001b[0m]",
        "nh.redcap.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-52-203-235-78.compute-1.amazonaws.com\u001b[0m]",
        "onlineorientation-qa.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md1rqqpj6eds5x7.cloudfront.net\u001b[0m]",
        "onlineorientation.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md1a1yrhhmxxoj6.cloudfront.net\u001b[0m]",
        "pantherfamily.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md362yi1e5h55sh.cloudfront.net\u001b[0m]",
        "pawsportal.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md30oswuc5yxs5u.cloudfront.net\u001b[0m]",
        "pawsportalblab.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md9tpev6o824e5.cloudfront.net\u001b[0m]",
        "pawsportaldev.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ezhpq65e176e.cloudfront.net\u001b[0m]",
        "pawsportalqa.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md1wck1t5sqjhfd.cloudfront.net\u001b[0m]",
        "portal.gatitleive.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-34-196-30-150.compute-1.amazonaws.com\u001b[0m]",
        "redcap.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-52-201-156-35.compute-1.amazonaws.com\u001b[0m]",
        "redcapbeta.rs.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-50-19-205-189.compute-1.amazonaws.com\u001b[0m]",
        "redcapdev.rs.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-52-201-60-105.compute-1.amazonaws.com\u001b[0m]",
        "rswiki.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-44-217-221-24.compute-1.amazonaws.com\u001b[0m]",
        "tracker.gsu.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md32o6m8hgkeipy.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "gsu.edu",
        "version": 4,
        "generated_at": "2026-04-02T05:09:33.284Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 5,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 4,
            "deep_skipped_below_pool": 4
        },
        "candidates": [
            {
                "host": "onlineorientation-qa.gsu.edu",
                "cname": "d1rqqpj6eds5x7.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng lỗi 502 'request could not be satisfied' thường là cấu hình sai hoặc backend lỗi, không phải resource chưa claim. Không có bằng chứng rõ ràng về khả năng takeover.",
                "llm_labeled_at": "2026-04-02T05:09:37.841Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "onlineorientation-qa.gsu.edu"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-02T05:09:37.841Z",
            "usage": {
                "prompt_tokens": 408,
                "completion_tokens": 108,
                "total_tokens": 516,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 280
            }
        }
    }
}