{
    "ok": true,
    "slug": "jnj.com-2026-04-04",
    "stats": {
        "subs": 26348,
        "all": 26348,
        "resolved": 6424,
        "live": 174,
        "takeover": 87,
        "juicy": 207,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 4,
        "takeover_hot_claim": 4,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/jnj.com-2026-04-04",
    "takeover_candidates": [
        "accessmanager.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md21gudfo6xoy3e.cloudfront.net\u001b[0m]",
        "advtherapies.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md21ijgf4owulg4.cloudfront.net\u001b[0m]",
        "api-qa.loftware-slh.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-wj427affmi.execute-api.ap-southeast-1.amazonaws.com\u001b[0m]",
        "api.advtherapies.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md21ijgf4owulg4.cloudfront.net\u001b[0m]",
        "api.fpa.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1dredgnoatba3.cloudfront.net\u001b[0m]",
        "api.loftware-slh.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-d721lxvnv3.execute-api.ap-southeast-1.amazonaws.com\u001b[0m]",
        "apvxapi.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapvxapi-1521212104.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "apvxdevapi.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapvxdevapi-933978322.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "apvxstgapi.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapvxstgapi-1608128220.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "automatius-qa.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgovernai-alb-qa-426877893.us-east-1.elb.amazonaws.com\u001b[0m]",
        "batch-eu.atara-preqa2.apps.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mab0d20ea47b23434ab216d4e9db3d9ee-8378dfafac968cdd.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "blockpage.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdodmv05i5snd5.cloudfront.net\u001b[0m]",
        "campusmetaverse.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfrontapp-309731788.ap-southeast-5.elb.amazonaws.com\u001b[0m]",
        "campusmetaverseqa.int.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mfront-back-lb-192683283.ap-southeast-5.elb.amazonaws.com\u001b[0m]",
        "clinicaltrials.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-prime-lb-481854729.us-east-2.elb.amazonaws.com\u001b[0m]",
        "clinspark.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdmz-elb-clinspark-prod-396789741.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "cns33isnal.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpub-na-wise-plfrm-34245558306d60a7.elb.us-east-1.amazonaws.com\u001b[0m]",
        "dev-api.fpa.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxs3fyukt8qpu.cloudfront.net\u001b[0m]",
        "dev-sftp-api.apps.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ae142d7162cf84d8695d64d45bf8239f-971317125.eu-west-1.elb.amazonaws.com\u001b[0m]",
        "dev.api.advtherapies.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdeg1j2ckpp0vx.cloudfront.net\u001b[0m]",
        "dev.api.hcpportals.ap.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1b1yquxejf7q2.cloudfront.net\u001b[0m]",
        "dev.assets.mtbeacon.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md29cg15q4r15wf.cloudfront.net\u001b[0m]",
        "dev.blockpage.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3shu0dqt9sbuk.cloudfront.net\u001b[0m]",
        "dev.fpa.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2r2q5sm1ytv12.cloudfront.net\u001b[0m]",
        "dev.guestpass.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md140jjed6qh0dh.cloudfront.net\u001b[0m]",
        "dev.jjtcampusrecruiting.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md419vbb1k6dmb.cloudfront.net\u001b[0m]",
        "dev.observability.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1l6hsc3g4ajdf.cloudfront.net\u001b[0m]",
        "dev.oneaccess.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2y2pex8lyazdg.cloudfront.net\u001b[0m]",
        "dev.phm.eu.api.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1pkq7yyclwr9w.cloudfront.net\u001b[0m]",
        "dev.smartcontracting.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdvdx68gn9r2ot.cloudfront.net\u001b[0m]",
        "dev.static-apac.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1d4t3heodzfc0.cloudfront.net\u001b[0m]",
        "docs.dev.login.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md17lpdf56xgs5j.cloudfront.net\u001b[0m]",
        "docs.login.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2fkqq8mqd2kge.cloudfront.net\u001b[0m]",
        "docs.stg.login.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1slsbidpaka0f.cloudfront.net\u001b[0m]",
        "dvl.covidpass.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1metyfkfib17c.cloudfront.net\u001b[0m]",
        "email.ahq.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.itsm.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "fpa.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2wvkplh1x7z0a.cloudfront.net\u001b[0m]",
        "halolink.dev.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdmz-elb-halolink-dev-jnj-com-208768194.us-east-1.elb.amazonaws.com\u001b[0m]",
        "help.vpcx.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mjnj-confluence-redirect.s3-website-us-east-1.amazonaws.com\u001b[0m]",
        "imks.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mims-elastic-prod-420611723.us-east-1.elb.amazonaws.com\u001b[0m]",
        "jjconnectjp.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-79h7hpqvs9.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "jjedsdata2.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mjjedsdata2.jnj.com.s3-website-eu-west-1.amazonaws.com\u001b[0m]",
        "jjssodemoapp.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-ippo1dro6e.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "jjtcampusrecruiting.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tlqe5dt7e4pr.cloudfront.net\u001b[0m]",
        "logging.aggrify.route53.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msearch-eks-app-logs-test-domain-35v5sreeuunodimst4c54njtuu.us-east-1.es.amazonaws.com\u001b[0m]",
        "mdlvlims-qa.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-12352toawuse1-1671673674.us-east-1.elb.amazonaws.com\u001b[0m]",
        "mdlvlims.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-12352poawuse1-1472153230.us-east-1.elb.amazonaws.com\u001b[0m]",
        "mftpod.be.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32meu-shrd-mbox-dev-0357c969379dd59f.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "mftpodap.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32map-shrd-mbox-dev-1ae535e442213712.elb.ap-southeast-1.amazonaws.com\u001b[0m]",
        "mftpodna.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mna-shrd-mbox-dev-3ea03b92cf6b5fae.elb.us-east-1.amazonaws.com\u001b[0m]",
        "oneaccess.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3b4jhq8yu78t2.cloudfront.net\u001b[0m]",
        "phm.eu.api.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md34sxz8rzl7ehk.cloudfront.net\u001b[0m]",
        "polarion-dev.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpolarion-dev-dmz-2071428190.us-east-1.elb.amazonaws.com\u001b[0m]",
        "predev-imks.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mims-elastic-dmz-1682712374.us-east-1.elb.amazonaws.com\u001b[0m]",
        "predev.api.advtherapies.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdt1927ppqra8h.cloudfront.net\u001b[0m]",
        "preqa.api.advtherapies.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdhnq97jd61m8m.cloudfront.net\u001b[0m]",
        "qa.api.advtherapies.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3spbmezd89y13.cloudfront.net\u001b[0m]",
        "saxpress.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msaxpress-nlb-c540943eda2b721a.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "scmcommunity.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mjnj-confluence-redirect.s3-website-us-east-1.amazonaws.com\u001b[0m]",
        "slt-dev.route53.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-264rii517e.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "slt-prod.route53.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-vt7yb72zh8.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "slt-qa.route53.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-1uk2wndi8f.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "stage-imks.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mimselastic-qa-dmz-1992400623.us-east-1.elb.amazonaws.com\u001b[0m]",
        "stage.api.hcpportals.ap.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15bjt90gxmai1.cloudfront.net\u001b[0m]",
        "stage.brandscan.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md19mfo78gsm534.cloudfront.net\u001b[0m]",
        "stage.fpa.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1p21ue2vhtacr.cloudfront.net\u001b[0m]",
        "stage.headless.careadvantage.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhp-headless-stage-338187643.us-east-1.elb.amazonaws.com\u001b[0m]",
        "stage.static-apac.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1vk3a2evg0rq.cloudfront.net\u001b[0m]",
        "staging.oneaccess.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2lub8tqs9wkrw.cloudfront.net\u001b[0m]",
        "static-apac.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3crxb7zgp4avw.cloudfront.net\u001b[0m]",
        "static.dev.phm.id.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md395870zrbo0d7.cloudfront.net\u001b[0m]",
        "static.poc.phm.id.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdoekagmhcza7f.cloudfront.net\u001b[0m]",
        "static.stg.phm.id.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3su2wiatggmno.cloudfront.net\u001b[0m]",
        "stg-api.fpa.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdayhg8be6chif.cloudfront.net\u001b[0m]",
        "stg.covidpass.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdncae0nniuz40.cloudfront.net\u001b[0m]",
        "stg.phm.eu.api.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md6zhaspx1yaby.cloudfront.net\u001b[0m]",
        "stg.smartcontracting.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1amu64ypm93di.cloudfront.net\u001b[0m]",
        "tcp.phm.eu.api.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1oie8fj7czy15.cloudfront.net\u001b[0m]",
        "test.oneaccess.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md257eakelij7lz.cloudfront.net\u001b[0m]",
        "uat.phm.eu.api.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md11r1o597e1avx.cloudfront.net\u001b[0m]",
        "uat.smartcontracting.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2niokgvu5lyvd.cloudfront.net\u001b[0m]",
        "www.clinicaltrials.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-prime-lb-481854729.us-east-2.elb.amazonaws.com\u001b[0m]",
        "www.dev.jjtcampusrecruiting.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md419vbb1k6dmb.cloudfront.net\u001b[0m]",
        "www.gsdcontactinfo.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md292b2btlxpn9n.cloudfront.net\u001b[0m]",
        "www.jjtcampusrecruiting.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tlqe5dt7e4pr.cloudfront.net\u001b[0m]",
        "www.vital.jnj.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md33yysnsw82b8q.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "jnj.com",
        "version": 4,
        "generated_at": "2026-04-04T02:31:27.058Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 22,
            "kept_strict": 4,
            "llm_review_pool": 1,
            "dropped_noise": 18,
            "deep_skipped_below_pool": 17
        },
        "candidates": [
            {
                "host": "dev.api.advtherapies.jnj.com",
                "cname": "deg1j2ckpp0vx.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront, lỗi 502 'request could not be satisfied' cho thấy phân phối chưa được cấu hình đúng, có thể claim.",
                "llm_labeled_at": "2026-04-04T02:31:37.776Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            },
            {
                "host": "predev.api.advtherapies.jnj.com",
                "cname": "dt1927ppqra8h.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "Tương tự host khác, CNAME CloudFront với lỗi 502, phân phối có vẻ chưa được gắn với tài nguyên S3 hợp lệ.",
                "llm_labeled_at": "2026-04-04T02:31:37.776Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            },
            {
                "host": "preqa.api.advtherapies.jnj.com",
                "cname": "dhnq97jd61m8m.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "Cấu hình CloudFront lỗi 502, mẫu lỗi đặc trưng cho phân phối chưa được liên kết, khả năng claim cao.",
                "llm_labeled_at": "2026-04-04T02:31:37.777Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            },
            {
                "host": "qa.api.advtherapies.jnj.com",
                "cname": "d3spbmezd89y13.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "claim_likely",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CloudFront trả lỗi 502, dấu hiệu phân phối chưa cấu hình xong, có thể bị chiếm quyền sở hữu.",
                "llm_labeled_at": "2026-04-04T02:31:37.777Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "high"
            }
        ],
        "llm_review_pool": [
            {
                "host": "api.fpa.jnj.com",
                "cname": "d1dredgnoatba3.cloudfront.net",
                "status": 502,
                "title": "502 Bad Gateway",
                "fingerprint": "aws_s3",
                "confidence": "low",
                "claim_score": 43,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME CloudFront nhưng lỗi 502 'Bad Gateway' chung chung, điểm claim thấp, có thể là cấu hình sai tạm thời hơn là có thể claim.",
                "llm_labeled_at": "2026-04-04T02:31:37.777Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "dev.api.advtherapies.jnj.com",
                "predev.api.advtherapies.jnj.com",
                "preqa.api.advtherapies.jnj.com",
                "qa.api.advtherapies.jnj.com",
                "api.fpa.jnj.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-04T02:31:37.777Z",
            "usage": {
                "prompt_tokens": 927,
                "completion_tokens": 424,
                "total_tokens": 1351,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 799
            }
        }
    }
}