{ "ok": true, "slug": "buffer.com-2026-03-24", "stats": { "subs": 199, "all": 199, "resolved": 91, "live": 91, "takeover": 25, "juicy": 25, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 5, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 5, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/buffer.com-2026-03-24", "takeover_candidates": [ "analyze-api.dev.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-staging-non-prod-group-975058177.us-east-1.elb.amazonaws.com\u001b[0m]", "api.dev.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-staging-non-prod-group-975058177.us-east-1.elb.amazonaws.com\u001b[0m]", "buffer-customerio-webhook.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "buffer-reader.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "buffertools-dot-com.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "components.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1hrbuowp1adcb.cloudfront.net\u001b[0m]", "graph.dev.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-staging-non-prod-group-975058177.us-east-1.elb.amazonaws.com\u001b[0m]", "graphql-api-docs.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "graphql-changelog.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "graphql-playground.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "images.dev.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-staging-non-prod-group-975058177.us-east-1.elb.amazonaws.com\u001b[0m]", "legacy-web.dev.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-staging-non-prod-group-975058177.us-east-1.elb.amazonaws.com\u001b[0m]", "links.dev.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-staging-non-prod-group-975058177.us-east-1.elb.amazonaws.com\u001b[0m]", "open-api.dev.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-staging-non-prod-group-975058177.us-east-1.elb.amazonaws.com\u001b[0m]", "publish-api.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "publish-cdn.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxgoesq69f2gt.cloudfront.net\u001b[0m]", "sa.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md5xtqpchjkt55.cloudfront.net\u001b[0m]", "sapi.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1x0z6wpgb5vkm.cloudfront.net\u001b[0m]", "scraper.dev.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mk3-static-ip-scraper-alb-1927854712.us-east-1.elb.amazonaws.com\u001b[0m]", "segment-analytics.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md5xtqpchjkt55.cloudfront.net\u001b[0m]", "segment-api.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1x0z6wpgb5vkm.cloudfront.net\u001b[0m]", "shopgrid-reverseproxy.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "vpn.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.buffervpn-1802671786.us-east-1.elb.amazonaws.com\u001b[0m]", "vpnmanager-client.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]", "zendesk-advocates.prod-bibes.buffer.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mbuffer-k3-bibes-2-185443587.us-east-1.elb.amazonaws.com\u001b[0m]" ], "takeover_v4": { "domain": "buffer.com", "version": 5, "generated_at": "2026-03-24T03:56:08.582Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 5, "kept_strict": 5, "llm_review_pool": 0, "dropped_noise": 0, "deep_skipped_below_pool": 0 }, "candidates": [ { "host": "sa.buffer.com", "cname": "d5xtqpchjkt55.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 64, "claim_tier": "medium", "signals": [], "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Có thể bucket\/S3 chưa được cấu hình, nhưng không đủ bằng chứng cho thấy có thể claim trực tiếp qua AWS.", "llm_labeled_at": "2026-03-24T03:56:21.258Z", "llm_model": "deepseek-chat", "llm_priority": "low", "claimed": false, "claim_status": "needs_manual", "claim_details": { "method": "http_verify", "verify_url": "https:\/\/sa.buffer.com\/", "http_status": 404, "title_snippet": "", "verify_error": null, "webhook_note": "no CLAIM_WEBHOOK_URL", "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)" }, "telegram_sent": true, "telegram_error": null }, { "host": "sapi.buffer.com", "cname": "d1x0z6wpgb5vkm.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 64, "claim_tier": "medium", "signals": [], "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "Tương tự sa.buffer.com, CNAME CloudFront, HTTP 404. Thiếu bằng chứng cụ thể về việc có thể chiếm quyền sở hữu tài nguyên.", "llm_labeled_at": "2026-03-24T03:56:21.259Z", "llm_model": "deepseek-chat", "llm_priority": "low", "claimed": false, "claim_status": "needs_manual", "claim_details": { "method": "http_verify", "verify_url": "https:\/\/sapi.buffer.com\/", "http_status": 404, "title_snippet": "", "verify_error": null, "webhook_note": "no CLAIM_WEBHOOK_URL", "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)" }, "telegram_sent": true, "telegram_error": null }, { "host": "segment-analytics.buffer.com", "cname": "d5xtqpchjkt55.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 64, "claim_tier": "medium", "signals": [], "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "Cùng CNAME với sa.buffer.com, HTTP 404. Tình trạng giống nhau, khả năng claim thấp do không có dấu hiệu rò rỉ tenant cụ thể.", "llm_labeled_at": "2026-03-24T03:56:21.259Z", "llm_model": "deepseek-chat", "llm_priority": "low", "claimed": false, "claim_status": "needs_manual", "claim_details": { "method": "http_verify", "verify_url": "https:\/\/segment-analytics.buffer.com\/", "http_status": 404, "title_snippet": "", "verify_error": null, "webhook_note": "no CLAIM_WEBHOOK_URL", "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)" }, "telegram_sent": true, "telegram_error": null }, { "host": "segment-api.buffer.com", "cname": "d1x0z6wpgb5vkm.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 64, "claim_tier": "medium", "signals": [], "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "Cùng CNAME với sapi.buffer.com, HTTP 404. Mẫu lặp lại, không có tín hiệu mạnh cho thấy có thể chiếm quyền sở hữu.", "llm_labeled_at": "2026-03-24T03:56:21.259Z", "llm_model": "deepseek-chat", "llm_priority": "low", "claimed": false, "claim_status": "needs_manual", "claim_details": { "method": "http_verify", "verify_url": "https:\/\/segment-api.buffer.com\/", "http_status": 404, "title_snippet": "", "verify_error": null, "webhook_note": "no CLAIM_WEBHOOK_URL", "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)" }, "telegram_sent": true, "telegram_error": null }, { "host": "components.buffer.com", "cname": "d1hrbuowp1adcb.cloudfront.net", "status": 403, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 56, "claim_tier": "medium", "signals": [], "real_candidate": true, "llm_verdict": "false_positive", "llm_confidence": 0.7, "llm_rationale_vi": "HTTP 403 thay vì 404, cho thấy tài nguyên có thể tồn tại và được bảo vệ (ví dụ: bucket policy), không phải là trang trống có thể claim.", "llm_labeled_at": "2026-03-24T03:56:21.259Z", "llm_model": "deepseek-chat", "llm_priority": "low", "claimed": false, "claim_status": "needs_manual", "claim_details": { "method": "http_verify", "verify_url": "https:\/\/components.buffer.com\/", "http_status": 403, "title_snippet": "", "verify_error": null, "webhook_note": "no CLAIM_WEBHOOK_URL", "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)" }, "telegram_sent": true, "telegram_error": null } ], "llm_review_pool": [], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "sa.buffer.com", "sapi.buffer.com", "segment-analytics.buffer.com", "segment-api.buffer.com", "components.buffer.com" ], "batch_sources": [ "strict", "strict", "strict", "strict", "strict" ], "promote_revived": true, "labeled_at": "2026-03-24T03:56:21.259Z", "usage": { "prompt_tokens": 828, "completion_tokens": 415, "total_tokens": 1243, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 700 } }, "v5": { "processed_at": "2026-03-24T03:56:21.305Z", "auto_claim_enabled": true, "telegram_enabled": true, "slug": "buffer.com-2026-03-24" } } }