{ "ok": true, "slug": "colorado.gov-2026-03-28", "stats": { "subs": 1072, "all": 1072, "resolved": 839, "live": 651, "takeover": 29, "juicy": 24, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/colorado.gov-2026-03-28", "takeover_candidates": [ "axg-train.prod.portal.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1mgk604s8df2l.cloudfront.net\u001b[0m]", "axg-train.test.portal.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2nkybtd43qo7v.cloudfront.net\u001b[0m]", "content.leg.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-alb-1660494790.us-west-2.elb.amazonaws.com\u001b[0m]", "dysyouthfamily.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2478cvjaebplm.cloudfront.net\u001b[0m]", "elt-reporting.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-oit-elt-reporting-p-alb-1349585244.us-east-1.elb.amazonaws.com\u001b[0m]", "energysavings.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mregular-cherry-fxcrdbhrdl8vbne8gwokfa16.herokudns.com\u001b[0m]", "healthdashboard.famlinonprod.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-hd-lb-20260207121825060400000009-1357742794.us-east-1.elb.amazonaws.com\u001b[0m]", "healthdashboard.famliprod.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-hd-lb-2026022616483684020000000e-161683592.us-east-1.elb.amazonaws.com\u001b[0m]", "help.upk.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcoupk.zendesk.com\u001b[0m]", "internal-dev.cocomp-d.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1gxyocc1m27d6.cloudfront.net\u001b[0m]", "internal-qa.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2hmzz0faxffzn.cloudfront.net\u001b[0m]", "internal-qa2.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md37aeod3wlgebd.cloudfront.net\u001b[0m]", "internal-uat.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1yiksx1vxtcyi.cloudfront.net\u001b[0m]", "internal.cocomp.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1g051pihyco2p.cloudfront.net\u001b[0m]", "leg.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mpowerful-perch-2q8iugoczo0zk2xw0qm85e8s.herokudns.com\u001b[0m]", "portal-dev.cocomp-d.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2g7xzrow6pqqk.cloudfront.net\u001b[0m]", "portal-qa.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md3o8xlhiyp7hdy.cloudfront.net\u001b[0m]", "portal-qa2.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1vwq70za8l87d.cloudfront.net\u001b[0m]", "portal-uat.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md35anyn3fu4f5p.cloudfront.net\u001b[0m]", "portal.cocomp.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md28ri7u3w18nng.cloudfront.net\u001b[0m]", "production.leg.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mshallow-weasel-75cmpzgpo44t7rvwtmwk9nfk.herokudns.com\u001b[0m]", "services-dev.cocomp-d.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md6hs7kqhkp1da.cloudfront.net\u001b[0m]", "services-qa.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md226eq2zxffbxq.cloudfront.net\u001b[0m]", "services-qa2.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md5wd2py1ijl0m.cloudfront.net\u001b[0m]", "services-uat.cocomp-u.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md3v1rnev4hfyh7.cloudfront.net\u001b[0m]", "services.cocomp.cdle.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1dqiqkqen60ei.cloudfront.net\u001b[0m]", "staging.leg.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32msleepy-roadrunner-cx2pvf30sx2hppjvh3hxk5e2.herokudns.com\u001b[0m]", "test-apps2.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcolorado-online-test-public-710859358.us-east-1.elb.amazonaws.com\u001b[0m]", "www.leg.colorado.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mpowerful-perch-2q8iugoczo0zk2xw0qm85e8s.herokudns.com\u001b[0m]" ], "takeover_v4": { "domain": "colorado.gov", "version": 4, "generated_at": "2026-03-28T12:38:58.325Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 7, "kept_strict": 0, "llm_review_pool": 5, "dropped_noise": 7, "deep_skipped_below_pool": 2 }, "candidates": [], "llm_review_pool": [ { "host": "services-dev.cocomp-d.cdle.colorado.gov", "cname": "d6hs7kqhkp1da.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Có thể là môi trường dev chưa triển khai, không chắc có thể claim trực tiếp.", "llm_labeled_at": "2026-03-28T12:39:10.994Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "services-qa.cocomp-u.cdle.colorado.gov", "cname": "d226eq2zxffbxq.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "CNAME CloudFront với 404. Môi trường QA thường được quản lý nội bộ, khả năng claim thấp.", "llm_labeled_at": "2026-03-28T12:39:10.994Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "services-qa2.cocomp-u.cdle.colorado.gov", "cname": "d5wd2py1ijl0m.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "Tương tự các host QA khác, CloudFront 404 có thể là cấu hình chưa hoàn tất, không phải tài nguyên bị bỏ rơi.", "llm_labeled_at": "2026-03-28T12:39:10.994Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "services-uat.cocomp-u.cdle.colorado.gov", "cname": "d3v1rnev4hfyh7.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "UAT thường là môi trường staging được kiểm soát. 404 không tự động có nghĩa là có thể claim được.", "llm_labeled_at": "2026-03-28T12:39:10.994Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "services.cocomp.cdle.colorado.gov", "cname": "d1dqiqkqen60ei.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "Tên miền có vẻ là production (không có hậu tố môi trường) nhưng trả về 404. Tuy nhiên, CNAME CloudFront có thể vẫn đang được quản lý bởi tổ chức.", "llm_labeled_at": "2026-03-28T12:39:10.994Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "services-dev.cocomp-d.cdle.colorado.gov", "services-qa.cocomp-u.cdle.colorado.gov", "services-qa2.cocomp-u.cdle.colorado.gov", "services-uat.cocomp-u.cdle.colorado.gov", "services.cocomp.cdle.colorado.gov" ], "batch_sources": [ "pool", "pool", "pool", "pool", "pool" ], "promote_revived": true, "labeled_at": "2026-03-28T12:39:10.994Z", "usage": { "prompt_tokens": 861, "completion_tokens": 415, "total_tokens": 1276, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 733 } } } }