{ "ok": true, "slug": "chop.edu-2026-03-28", "stats": { "subs": 1030, "all": 1030, "resolved": 494, "live": 340, "takeover": 18, "juicy": 27, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/chop.edu-2026-03-28", "takeover_candidates": [ "apps-prod2.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3vv08sftd31lh.cloudfront.net\u001b[0m]", "apps.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcoldfusion-elb-external-1945520066.us-east-1.elb.amazonaws.com\u001b[0m]", "corista-image.research.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32ma932d3eae48b34311b15a1c51e0f2f26-825092850.us-east-1.elb.amazonaws.com\u001b[0m]", "corista.research.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32ma932d3eae48b34311b15a1c51e0f2f26-825092850.us-east-1.elb.amazonaws.com\u001b[0m]", "education-dev.arcus.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md2a5jgfwizz6wz.cloudfront.net\u001b[0m]", "epicro.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mepc-default-lb-i-1487054680.us-east-1.elb.amazonaws.com\u001b[0m]", "harborire.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mepc-default-lb-i-1487054680.us-east-1.elb.amazonaws.com\u001b[0m]", "harvest.research.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mharvest.research.chop.edu.s3-website-us-east-1.amazonaws.com\u001b[0m]", "hearts.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3ewecoir5psni.cloudfront.net\u001b[0m]", "magic.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md2sg7qw84n0rt0.cloudfront.net\u001b[0m]", "media-tst.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3hidy7ns7ewfk.cloudfront.net\u001b[0m]", "media.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md12uivtvaypil9.cloudfront.net\u001b[0m]", "mobileire.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mepc-default-lb-i-1487054680.us-east-1.elb.amazonaws.com\u001b[0m]", "mta-sts.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md145ar9u79aw3n.cloudfront.net\u001b[0m]", "mta-sts.email.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mdundfxf69yz6y.cloudfront.net\u001b[0m]", "mta-sts.genome.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3jvh84ksi4wwf.cloudfront.net\u001b[0m]", "mta-sts.scomalert.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32md3104hv3pt6y1w.cloudfront.net\u001b[0m]", "reach.chop.edu [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]" ], "takeover_v4": { "domain": "chop.edu", "version": 4, "generated_at": "2026-03-27T23:10:59.065Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 6, "kept_strict": 0, "llm_review_pool": 4, "dropped_noise": 6, "deep_skipped_below_pool": 2 }, "candidates": [], "llm_review_pool": [ { "host": "mta-sts.chop.edu", "cname": "d145ar9u79aw3n.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.9, "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 có thể là cấu hình S3\/CloudFront hợp lệ, chưa đủ bằng chứng cho thấy tài nguyên bị bỏ hoặc có thể chiếm đoạt.", "llm_labeled_at": "2026-03-27T23:11:08.303Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "mta-sts.email.chop.edu", "cname": "dundfxf69yz6y.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.9, "llm_rationale_vi": "Tương tự, CNAME CloudFront với 404, có khả năng là cấu hình chủ đích hoặc chưa triển khai, không phải lỗ hổng chiếm đoạt rõ ràng.", "llm_labeled_at": "2026-03-27T23:11:08.303Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "mta-sts.genome.chop.edu", "cname": "d3jvh84ksi4wwf.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.9, "llm_rationale_vi": "Cấu trúc giống các host khác, điểm claim thấp, 404 không tự động có nghĩa là có thể claim được tài nguyên CloudFront\/S3.", "llm_labeled_at": "2026-03-27T23:11:08.303Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "mta-sts.scomalert.chop.edu", "cname": "d3104hv3pt6y1w.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.9, "llm_rationale_vi": "Mẫu chung: CloudFront trả 404. Điều này thường là false positive trong bối cảnh cấu hình dịch vụ chưa hoàn thiện, không phải lỗ hổng chiếm đoạt.", "llm_labeled_at": "2026-03-27T23:11:08.303Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "mta-sts.chop.edu", "mta-sts.email.chop.edu", "mta-sts.genome.chop.edu", "mta-sts.scomalert.chop.edu" ], "batch_sources": [ "pool", "pool", "pool", "pool" ], "promote_revived": true, "labeled_at": "2026-03-27T23:11:08.303Z", "usage": { "prompt_tokens": 731, "completion_tokens": 369, "total_tokens": 1100, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 603 } } } }