{ "ok": true, "slug": "com.ar-2026-03-28", "stats": { "subs": 5914, "all": 5914, "resolved": 1953, "live": 1381, "takeover": 25, "juicy": 26, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 2, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/com.ar-2026-03-28", "takeover_candidates": [ "demo.0221.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mdemo.0221.com.ar.herokudns.com\u001b[0m]", "demo.0223.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32manimated-crane-9t7kd4dnt9pnsjgsi4oo3icb.herokudns.com\u001b[0m]", "especiales.0221.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32msleepy-anteater-teg5eg3njifx021lcm6nqfsx.herokudns.com\u001b[0m]", "lasegunda.conexia.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-ext-lasegundaart-prod-483237869.sa-east-1.elb.amazonaws.com\u001b[0m]", "logistica.puntosypremios.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mpyppdalb-1154450621.us-east-1.elb.amazonaws.com\u001b[0m]", "manager.0221.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mmanager.0221.com.ar.herokudns.com\u001b[0m]", "manager.0223.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mmanager.0223.com.ar.herokudns.com\u001b[0m]", "pxb.cdn.0221.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mcontoured-shelf-p0r4y6bh9xhpdkpn6631dq3d.herokudns.com\u001b[0m]", "staging.marykay.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32md3qiejh1l1hl9e.cloudfront.net\u001b[0m]", "www.asdirect.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-asdirect-2048132890.us-east-1.elb.amazonaws.com\u001b[0m]", "www.bayer-retail.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mbayer-retail-lb-1185515701.us-east-1.elb.amazonaws.com\u001b[0m]", "www.bejermanweb.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32ma200277-estud-alb-prod-ext-alb-1857746984.sa-east-1.elb.amazonaws.com\u001b[0m]", "www.cervezanorte.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]", "www.consultatioasset.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32m522a3534ac8894a6.vercel-dns-016.com\u001b[0m]", "www.eflexweb.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32ma200276-eflex-app-prod-ext-alb-282191658.us-east-1.elb.amazonaws.com\u001b[0m]", "www.estudioone.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32ma200277-estud-alb-prod-ext-alb-1857746984.sa-east-1.elb.amazonaws.com\u001b[0m]", "www.hertz.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlvi3h19yma82.cloudfront.net\u001b[0m]", "www.interturis.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32md1qh4d0o3hw7u4.cloudfront.net\u001b[0m]", "www.lavandetiquetas.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mcalculadora-de-etiquetas.web.app\u001b[0m]", "www.marykay.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32md1jpd2y4nn8wsc.cloudfront.net\u001b[0m]", "www.meguiars.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32m4d20ee5147349f56.vercel-dns-017.com\u001b[0m]", "www.mifacturaonline.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32ma200276-eflex-app-prod-ext-alb-282191658.us-east-1.elb.amazonaws.com\u001b[0m]", "www.nataclor.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]", "www.tiomusa.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]", "www.tripadvisor.com.ar [\u001b[35mCNAME\u001b[0m] [\u001b[32md2wb3gpo9o7ows.cloudfront.net\u001b[0m]" ], "takeover_v4": { "domain": "com.ar", "version": 4, "generated_at": "2026-03-28T13:47:44.547Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 3, "kept_strict": 2, "llm_review_pool": 0, "dropped_noise": 1, "deep_skipped_below_pool": 1 }, "candidates": [ { "host": "f.creativosonline.com.ar", "cname": "ghs.googlehosted.com", "status": 404, "title": "Error 404 (Not Found)!!1", "fingerprint": "firebase", "confidence": "high", "claim_score": 50, "claim_tier": "medium", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CNAME trỏ đến ghs.googlehosted.com nhưng HTTP 404, có thể là subdomain không được cấu hình đúng trên Google Workspace hoặc Firebase. Tuy nhiên, không có bằng chứng rõ ràng resource chưa gắn tenant và có thể claim trực tiếp.", "llm_labeled_at": "2026-03-28T13:47:52.504Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "www.controltotal.com.ar", "cname": "ghs.googlehosted.com", "status": 404, "title": "Error 404 (Not Found)!!1", "fingerprint": "firebase", "confidence": "high", "claim_score": 50, "claim_tier": "medium", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "Tương tự, CNAME trỏ đến ghs.googlehosted.com với HTTP 404. Điều này thường cho thấy cấu hình DNS chưa hoàn chỉnh hoặc resource đã bị bỏ nhưng chưa chắc có thể claim được do cơ chế bảo vệ của nhà cung cấp.", "llm_labeled_at": "2026-03-28T13:47:52.505Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_review_pool": [], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "f.creativosonline.com.ar", "www.controltotal.com.ar" ], "batch_sources": [ "strict", "strict" ], "promote_revived": true, "labeled_at": "2026-03-28T13:47:52.505Z", "usage": { "prompt_tokens": 502, "completion_tokens": 235, "total_tokens": 737, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 374 } } } }