{ "ok": true, "slug": "la.gov-2026-04-04", "stats": { "subs": 3802, "all": 3802, "resolved": 1230, "live": 629, "takeover": 56, "juicy": 62, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 1, "takeover_hot_claim": 1, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/la.gov-2026-04-04", "takeover_candidates": [ "alerts.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-alerts-test-2112098541.us-east-1.elb.amazonaws.com\u001b[0m]", "analytics.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ia62aib8khp.cloudfront.net\u001b[0m]", "annualreport.lhc.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mlhc-annual-report-2023.netlify.app\u001b[0m]", "ap24.coastal.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcpra-ap24.netlify.app\u001b[0m]", "ap25.coastal.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcpra-ap24.netlify.app\u001b[0m]", "ap26.coastal.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcpra-ap24.netlify.app\u001b[0m]", "ap27.coastal.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcpra-ap24.netlify.app\u001b[0m]", "capimgs.gohsep.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2rsteaiyjxeuf.cloudfront.net\u001b[0m]", "connect.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mconnectla.netlify.app\u001b[0m]", "coronavirus.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcoronaviruslb-2002474273.us-east-1.elb.amazonaws.com\u001b[0m]", "dev.vetaffairs.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-ldva-wp-prod-1835898703.us-east-1.elb.amazonaws.com\u001b[0m]", "epsmtest.goea.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-shared-2098522756.us-east-1.elb.amazonaws.com\u001b[0m]", "estimator-test.dcfs.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2v88ahb54w6vs.cloudfront.net\u001b[0m]", "estimator.dcfs.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdd4vrlp3h70lc.cloudfront.net\u001b[0m]", "fleet.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md36m0fm0dcydrt.cloudfront.net\u001b[0m]", "forms.lhc.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mlhcforms-411821598.us-east-1.elb.amazonaws.com\u001b[0m]", "goea-epsmtest.doa.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-shared-2098522756.us-east-1.elb.amazonaws.com\u001b[0m]", "gov.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mlagov-2102327432.us-east-1.elb.amazonaws.com\u001b[0m]", "linkshub.oph.dhh.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mla-prod-alb-488545440.us-east-1.elb.amazonaws.com\u001b[0m]", "locddr.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mocd-frontend.netlify.app\u001b[0m]", "lpaa.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md30mht8zkqbwwm.cloudfront.net\u001b[0m]", "new.ldaf.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]", "nextsteps.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md31ugtz3r7gk38.cloudfront.net\u001b[0m]", "offices.omv.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdltivo3qaoypa.cloudfront.net\u001b[0m]", "ogbphone.doa.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-54-164-78-28.compute-1.amazonaws.com\u001b[0m]", "ojj.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcovalentclweb01alb-ojj-1854848727.us-east-1.elb.amazonaws.com\u001b[0m]", "procurement.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdqaa1i1zrpixq.cloudfront.net\u001b[0m]", "scout.dps.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mscout-pd-prod-application-alb-351471439.us-west-2.elb.amazonaws.com\u001b[0m]", "secure.pharmacy.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcavu-alb-internet-public-1936105744.us-east-1.elb.amazonaws.com\u001b[0m]", "shelterathome.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdgf0f8wc6i0ae.cloudfront.net\u001b[0m]", "shiip.partners.ldi.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "stage.lasafeschools.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ialb-ohsep-571616472.us-east-1.elb.amazonaws.com\u001b[0m]", "stems.gohsep.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcubed-pomegranate-vxhsmmmrh4spotj6p2u5bjoh.herokudns.com\u001b[0m]", "tableau.swe.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-tableau-1516186806.us-east-1.elb.amazonaws.com\u001b[0m]", "taxes.mfn.dps.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2to57mtxo2284.cloudfront.net\u001b[0m]", "test.vetaffairs.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-ldva-wp-prod-1835898703.us-east-1.elb.amazonaws.com\u001b[0m]", "tips.dps.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mscout-pd-prod-application-alb-351471439.us-west-2.elb.amazonaws.com\u001b[0m]", "www.ap27.coastal.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcpra-ap24.netlify.app\u001b[0m]", "www.connect.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mconnectla.netlify.app\u001b[0m]", "www.dcfs.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcfs-1348629580.us-east-1.elb.amazonaws.com\u001b[0m]", "www.dss.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcovalentconsolidatedelb-1892470803.us-east-1.elb.amazonaws.com\u001b[0m]", "www.fleet.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md36m0fm0dcydrt.cloudfront.net\u001b[0m]", "www.gov.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mlagov-2102327432.us-east-1.elb.amazonaws.com\u001b[0m]", "www.hurricanelaura.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mhurricanelb-721975570.us-east-1.elb.amazonaws.com\u001b[0m]", "www.hurricanerecovery.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mhurricanerecovery-1225462694.us-east-1.elb.amazonaws.com\u001b[0m]", "www.jbe.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mjbe-lagov-2110690519.us-east-1.elb.amazonaws.com\u001b[0m]", "www.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-lagov-prd-1520624990.us-east-1.elb.amazonaws.com\u001b[0m]", "www.ldaf.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]", "www.locddr.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mocd-frontend.netlify.app\u001b[0m]", "www.louisianacares.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md30191v36jpmg0.cloudfront.net\u001b[0m]", "www.lpaa.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md30mht8zkqbwwm.cloudfront.net\u001b[0m]", "www.ojj.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcovalentclweb01alb-ojj-1854848727.us-east-1.elb.amazonaws.com\u001b[0m]", "www.pharmacy.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mpharmacy-la-gov-737958583.us-east-1.elb.amazonaws.com\u001b[0m]", "www.procurement.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdqaa1i1zrpixq.cloudfront.net\u001b[0m]", "www.shelterathome.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdgf0f8wc6i0ae.cloudfront.net\u001b[0m]", "www.wlf.la.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mwlfla-745322553.us-east-1.elb.amazonaws.com\u001b[0m]" ], "takeover_v4": { "domain": "la.gov", "version": 4, "generated_at": "2026-04-04T15:34:02.546Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 4, "kept_strict": 1, "llm_review_pool": 0, "dropped_noise": 3, "deep_skipped_below_pool": 3 }, "candidates": [ { "host": "annualreport.lhc.la.gov", "cname": "lhc-annual-report-2023.netlify.app", "status": 404, "title": null, "fingerprint": "netlify", "confidence": "high", "claim_score": 77, "claim_tier": "high", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.8, "llm_rationale_vi": "CNAME trỏ đến Netlify nhưng HTTP 404. Đây có thể là trang đã bị gỡ hoặc chưa triển khai, không phải tài nguyên chưa gắn tenant có thể claim trực tiếp.", "llm_labeled_at": "2026-04-04T15:34:05.964Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_review_pool": [], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "annualreport.lhc.la.gov" ], "batch_sources": [ "strict" ], "promote_revived": true, "labeled_at": "2026-04-04T15:34:05.964Z", "usage": { "prompt_tokens": 387, "completion_tokens": 102, "total_tokens": 489, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 259 } } } }