{
    "ok": true,
    "slug": "k-state.edu-2026-04-04",
    "stats": {
        "subs": 2186,
        "all": 2186,
        "resolved": 1807,
        "live": 1003,
        "takeover": 73,
        "juicy": 72,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 1,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/k-state.edu-2026-04-04",
    "takeover_candidates": [
        "4-h.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdszw3h96q0wsl.cloudfront.net\u001b[0m]",
        "4h.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdszw3h96q0wsl.cloudfront.net\u001b[0m]",
        "advance.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32madvancek-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "america250.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mamerica250k-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "bulk-solids.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mbulk-solidsk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "bulksolids.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mbulk-solidsk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "catcash.union.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcatcashunionksuedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "cba.sandboxstudio.aws.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mds16aohrf4m5u.cloudfront.net\u001b[0m]",
        "cisa.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcisak-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "commstudies.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcommstudiesk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "conference.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3d0u8iqi326h3.cloudfront.net\u001b[0m]",
        "dimensions.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdimensionsk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "docs.it.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mest-confluence-p-app-1548181492.us-east-1.elb.amazonaws.com\u001b[0m]",
        "edwards.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwedwardsk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "email.axioshq.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "eventhosting.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3d0u8iqi326h3.cloudfront.net\u001b[0m]",
        "extension.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mextensionk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "hays.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwhaysk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "huckboyd.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdmdo3synpezvu.cloudfront.net\u001b[0m]",
        "internal-careers.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md19qcrmic2qtlh.cloudfront.net\u001b[0m]",
        "intranet.mne.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mmne-smartlab-p-web-lb-289029503.us-east-1.elb.amazonaws.com\u001b[0m]",
        "isoftp.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32miso-fjord-p2-ftp-lb-lb-9624aeb9323a9dae.elb.us-east-1.amazonaws.com\u001b[0m]",
        "kansasprideprogram.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mkansasprideprogramk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "kansassare.ksre.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md16nj47emqdbse.cloudfront.net\u001b[0m]",
        "landscape.it.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-it-landscape-p-web-01-alb-276822071.us-east-1.elb.amazonaws.com\u001b[0m]",
        "lter.konza.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md28q8372vrdsf5.cloudfront.net\u001b[0m]",
        "masterplan.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "northwest.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwnorthwestk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "onecard.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32monecardksuedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "resnet.housing.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mresnethousingksuedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "royalpurple.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mroyalpurplek-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "ruralgrocery.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md239slaqkx45h.cloudfront.net\u001b[0m]",
        "smartlab.mne.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mmne-smartlab-p-web-lb-289029503.us-east-1.elb.amazonaws.com\u001b[0m]",
        "southwest.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwsouthwestk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "stafford.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwstaffordk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "status.its.lib.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mkstatelibrariesit.github.io\u001b[0m]",
        "status.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md2iy12od0yv6ke.cloudfront.net\u001b[0m]",
        "support.housing.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32msupporthousingksuedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "survey.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32msurveyk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "surveys.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32msurveyk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "test.www.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md24oji5ezbiocz.cloudfront.net\u001b[0m]",
        "teval.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mome-teval-p3-lb-1553813207.us-east-1.elb.amazonaws.com\u001b[0m]",
        "tribune.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwtribunek-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "webhooks.lib.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md-nf24ewwk65.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "wiki.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mest-confluence-p-app-1548181492.us-east-1.elb.amazonaws.com\u001b[0m]",
        "wildcatcreek.engg.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mengg-wcc-p-app-lb-1420093693.us-east-1.elb.amazonaws.com\u001b[0m]",
        "www.4-h.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdszw3h96q0wsl.cloudfront.net\u001b[0m]",
        "www.4h.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdszw3h96q0wsl.cloudfront.net\u001b[0m]",
        "www.advance.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32madvancek-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.america250.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mamerica250k-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.bulk-solids.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mbulk-solidsk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.bulksolids.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mbulk-solidsk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.cisa.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcisak-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.commstudies.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcommstudiesk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.conference.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3d0u8iqi326h3.cloudfront.net\u001b[0m]",
        "www.conferences.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3d0u8iqi326h3.cloudfront.net\u001b[0m]",
        "www.edwards.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwedwardsk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.eventhosting.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3d0u8iqi326h3.cloudfront.net\u001b[0m]",
        "www.extension.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mextensionk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.hays.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwhaysk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.huckboyd.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdmdo3synpezvu.cloudfront.net\u001b[0m]",
        "www.kansasprideprogram.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mkansasprideprogramk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.kansassare.ksre.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md16nj47emqdbse.cloudfront.net\u001b[0m]",
        "www.lter.konza.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md28q8372vrdsf5.cloudfront.net\u001b[0m]",
        "www.math.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwmathksuedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.northwest.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwnorthwestk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.royalpurple.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mroyalpurplek-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.ruralgrocery.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md239slaqkx45h.cloudfront.net\u001b[0m]",
        "www.southwest.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwsouthwestk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.stafford.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwstaffordk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.survey.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32msurveyk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.surveys.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32msurveyk-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]",
        "www.tribune.k-state.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mwwwtribunek-stateedu.cloudfront.prod.aws.ksu.edu\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "k-state.edu",
        "version": 4,
        "generated_at": "2026-04-04T06:38:09.283Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 1,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "test.www.k-state.edu",
                "cname": "d24oji5ezbiocz.cloudfront.net",
                "status": 502,
                "title": "ERROR: The request could not be satisfied",
                "fingerprint": "aws_s3",
                "confidence": "medium",
                "claim_score": 83,
                "claim_tier": "critical",
                "signals": [
                    "the request could not be satisfied"
                ],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 502 với thông báo lỗi của AWS cho thấy dịch vụ đang được cấu hình nhưng có sự cố tạm thời, không phải tài nguyên bị bỏ trống để claim.",
                "llm_labeled_at": "2026-04-04T06:38:12.877Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "test.www.k-state.edu"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-04T06:38:12.877Z",
            "usage": {
                "prompt_tokens": 404,
                "completion_tokens": 114,
                "total_tokens": 518,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 276
            }
        }
    }
}