{
    "ok": true,
    "slug": "india.com-2026-04-03",
    "stats": {
        "subs": 81,
        "all": 81,
        "resolved": 61,
        "live": 49,
        "takeover": 21,
        "juicy": 21,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/india.com-2026-04-03",
    "takeover_candidates": [
        "admin.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32madmin-indiacom-prod-alb-163038987.ap-south-1.elb.amazonaws.com\u001b[0m]",
        "api-get.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md12b3y2d2r8kom.cloudfront.net\u001b[0m]",
        "bengaliadmin.zeenews.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzeenews-ad-alb-947501174.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "englishadmin.zeenews.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzeenews-ad-alb-947501174.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "hindiadmin.zeenews.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzeenews-ad-alb-947501174.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "mail.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md22fl0iwd2kqd5.cloudfront.net\u001b[0m]",
        "malayalamadmin.zeenews.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzeenews-ad-alb-947501174.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "marathiadmin.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzeenews-ad-alb-947501174.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "origin.s3.travel.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mtravel.india.com.s3.amazonaws.com\u001b[0m]",
        "playandwingame.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpocketleague-cricketcountry-com-1259136768.ap-south-1.elb.amazonaws.com\u001b[0m]",
        "sso.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mincaendo-lb-web1-713835817.ap-south-1.elb.amazonaws.com\u001b[0m]",
        "stb.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md39xj23i3qae9m.cloudfront.net\u001b[0m]",
        "ste.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2zqktczw5s9ub.cloudfront.net\u001b[0m]",
        "sth.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1fzqsbkuciztt.cloudfront.net\u001b[0m]",
        "stm.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1qvlxukmw8vmt.cloudfront.net\u001b[0m]",
        "stt.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdsgf19z03ig7p.cloudfront.net\u001b[0m]",
        "stz.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md39l8sodq2tqa4.cloudfront.net\u001b[0m]",
        "tamiladmin.zeenews.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mzeenews-ad-alb-947501174.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "user.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mincaendo-lb-web1-713835817.ap-south-1.elb.amazonaws.com\u001b[0m]",
        "znn.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2vzad372gn2ql.cloudfront.net\u001b[0m]",
        "zns.india.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ceqfnrp2317a.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "india.com",
        "version": 4,
        "generated_at": "2026-04-03T12:28:01.341Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 6,
            "kept_strict": 1,
            "llm_review_pool": 1,
            "dropped_noise": 5,
            "deep_skipped_below_pool": 4
        },
        "candidates": [
            {
                "host": "api-get.india.com",
                "cname": "d12b3y2d2r8kom.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 502 với thông báo lỗi 'request could not be satisfied' từ AWS, cho thấy distribution chưa được cấu hình đúng hoặc chưa gắn S3 origin. Có khả năng claim.",
                "llm_labeled_at": "2026-04-03T12:28:07.422Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            }
        ],
        "llm_review_pool": [
            {
                "host": "mail.india.com",
                "cname": "d22fl0iwd2kqd5.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 không rõ ràng. Điểm claim thấp, có thể là trang tĩnh trống hoặc đã được bảo vệ cơ bản, không đủ bằng chứng cho claim.",
                "llm_labeled_at": "2026-04-03T12:28:07.422Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "api-get.india.com",
                "mail.india.com"
            ],
            "batch_sources": [
                "strict",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-03T12:28:07.422Z",
            "usage": {
                "prompt_tokens": 516,
                "completion_tokens": 210,
                "total_tokens": 726,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 388
            }
        }
    }
}