{
    "ok": true,
    "slug": "lexisnexis.com-2026-04-05",
    "stats": {
        "subs": 1297,
        "all": 1297,
        "resolved": 738,
        "live": 356,
        "takeover": 54,
        "juicy": 59,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/lexisnexis.com-2026-04-05",
    "takeover_candidates": [
        "accessorialcalc.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md6ysbsi9bsvq0.cloudfront.net\u001b[0m]",
        "api-accessorialcalc.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mc3fs2iyfz0.execute-api.ap-southeast-2.amazonaws.com\u001b[0m]",
        "api-caseanalyser.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ivqjhb86d0m8.cloudfront.net\u001b[0m]",
        "author.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "caseanalyser.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2l8r9kwm4ynq2.cloudfront.net\u001b[0m]",
        "cert-cn2.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-livesiteruntime-8b5241b81c-500181954.us-east-1.elb.amazonaws.com\u001b[0m]",
        "cert-webanalytics.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15h5qxeyls42t.cloudfront.net\u001b[0m]",
        "cert-www.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ibpzk9e818s0.cloudfront.net\u001b[0m]",
        "collection.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "collectionsearch.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "cookislands.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m3259-cookislancd-prod-123123319.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "cortexprocessing.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "cortexreporting.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev.author.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-dev-upgrade-sitecore-1720970220.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev.blogs.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-wordpress-alb-1613716349.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev.insights.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-wordpress-alb-1613716349.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev.preview.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-dev-upgrade-sitecore-1720970220.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-dev-upgrade-sitecore-1720970220.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev.si.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-dev-upgrade-sitecore-1720970220.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev.xconnect.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-dev-upgrade-sitecore-1720970220.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ftp-ipdatadirect.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mipdd-prod-lb-ftp-21-79416c7b317de076.elb.us-east-1.amazonaws.com\u001b[0m]",
        "incasesheadnotes.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m1821-in-cases-prod-alb-979368902.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "internal.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2zjljerxsyris.cloudfront.net\u001b[0m]",
        "lexread.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3urlg9jttj0cz.cloudfront.net\u001b[0m]",
        "marketingautomation.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "marketingautomationreporting.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "pdc1c.lexisautodoc.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m3359-hotdoc-prod-966858762.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "perspectives.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md39ykzfcjaifex.cloudfront.net\u001b[0m]",
        "preview.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "processing.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.author.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.blogs.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstaging-wordpress-v00-1711965620.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.collection.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.collectionsearch.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.cortexprocessing.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.cortexreporting.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.insights.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstaging-wordpress-v00-1711965620.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.marketingautomation.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.marketingautomationreporting.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.preview.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.processing.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.referencedata.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.reporting.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.si.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-qa-upgrade-cm-512554854.us-east-1.elb.amazonaws.com\u001b[0m]",
        "referencedata.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "reporting.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "si.risk.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-upgrade-alb-cms-1337427356.us-east-1.elb.amazonaws.com\u001b[0m]",
        "store.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md19f2e6v897xoh.cloudfront.net\u001b[0m]",
        "test-www.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-livesiteruntime-eaaa4644bf-1442375202.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ukr-rol-cert.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mrole-of-law-cert-alb-508580469.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "ukr-rol.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mrol-prod-1473031284.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "webanalytics.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1q419udpq9ang.cloudfront.net\u001b[0m]",
        "www.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md365yontm7w8ma.cloudfront.net\u001b[0m]",
        "www2.lexisnexis.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ux12nk1jitwl.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "lexisnexis.com",
        "version": 4,
        "generated_at": "2026-04-04T21:15:16.710Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 3,
            "kept_strict": 0,
            "llm_review_pool": 2,
            "dropped_noise": 3,
            "deep_skipped_below_pool": 1
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "perspectives.lexisnexis.com",
                "cname": "d39ykzfcjaifex.cloudfront.net",
                "status": 404,
                "title": "404 - Page not found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 không đủ chứng tỏ tài nguyên chưa được gắn. Có thể là trang lỗi mặc định của ứng dụng đang hoạt động.",
                "llm_labeled_at": "2026-04-04T21:15:20.732Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "internal.lexisnexis.com",
                "cname": "d2zjljerxsyris.cloudfront.net",
                "status": 502,
                "title": "502 Bad Gateway",
                "fingerprint": "aws_s3",
                "confidence": "low",
                "claim_score": 43,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.6,
                "llm_rationale_vi": "CNAME CloudFront với HTTP 502. Lỗi gateway thường chỉ ra cấu hình backend có vấn đề, không phải tài nguyên chưa claim và có thể tự phục hồi.",
                "llm_labeled_at": "2026-04-04T21:15:20.732Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "perspectives.lexisnexis.com",
                "internal.lexisnexis.com"
            ],
            "batch_sources": [
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-04T21:15:20.732Z",
            "usage": {
                "prompt_tokens": 510,
                "completion_tokens": 177,
                "total_tokens": 687,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 382
            }
        }
    }
}