{ "ok": true, "slug": "corel.com-2026-03-29", "stats": { "subs": 259, "all": 259, "resolved": 143, "live": 118, "takeover": 53, "juicy": 52, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/corel.com-2026-03-29", "takeover_candidates": [ "account.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-prd-platform-external-alb-720633355.us-east-1.elb.amazonaws.com\u001b[0m]", "amznsubs.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-prd-platform-external-alb-720633355.us-east-1.elb.amazonaws.com\u001b[0m]", "api.mkt.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ms08a1a7wqh.execute-api.us-east-1.amazonaws.com\u001b[0m]", "appstore.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-prd-platform-external-alb-720633355.us-east-1.elb.amazonaws.com\u001b[0m]", "assets.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mduxrzigwqnrm8.cloudfront.net\u001b[0m]", "awxdev2.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-awxdev2-lb-1319951611.us-east-1.elb.amazonaws.com\u001b[0m]", "awxtest2.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ops-tst-it-ops-test-alb-182703116.us-east-1.elb.amazonaws.com\u001b[0m]", "cfs2.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-54-210-54-236.compute-1.amazonaws.com\u001b[0m]", "cfs3.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-54-210-19-191.compute-1.amazonaws.com\u001b[0m]", "chat.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpbot-chat-prod.pages.dev\u001b[0m]", "cloud-beta.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcd-beta-corel-external-alb-436004079.us-east-1.elb.amazonaws.com\u001b[0m]", "cloud-cdn.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2osa63fhhect1.cloudfront.net\u001b[0m]", "cloud-dev.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcd-dev-corel-external-alb-371903399.us-east-1.elb.amazonaws.com\u001b[0m]", "cloud-stg.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcd-tst-corel-external-alb-912878447.us-east-1.elb.amazonaws.com\u001b[0m]", "cloud.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcd-prd-corel-external-alb-2000375351.us-east-1.elb.amazonaws.com\u001b[0m]", "community.go.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdiia3sgsrr9gq.cloudfront.net\u001b[0m]", "coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md8duwxe1lgajb.cloudfront.net\u001b[0m]", "dev.akamai-tool.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pl-dev-platform-internal-alb-40879272.us-east-1.elb.amazonaws.com\u001b[0m]", "dev.api.mkt.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mnpkx74lxs6.execute-api.us-east-1.amazonaws.com\u001b[0m]", "dev.appstore.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-dev-platform-external-alb-1275760369.us-east-1.elb.amazonaws.com\u001b[0m]", "dev.beacon.myaccount.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-dev-platform-external-alb-1275760369.us-east-1.elb.amazonaws.com\u001b[0m]", "dev.evergreenredeem.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mspwg82h2pd.execute-api.us-east-1.amazonaws.com\u001b[0m]", "dev.sp.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-dev-platform-external-alb-1275760369.us-east-1.elb.amazonaws.com\u001b[0m]", "dev.subportal.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpd-dev-platform-external-alb-1941105939.us-east-1.elb.amazonaws.com\u001b[0m]", "ecomjenkins.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-ecom-jenkins-784725596.us-east-1.elb.amazonaws.com\u001b[0m]", "evergreenredeem.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m6haavvfd0f.execute-api.us-east-1.amazonaws.com\u001b[0m]", "ftp2.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-54-210-192-173.compute-1.amazonaws.com\u001b[0m]", "go.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3a5duirh0y6y3.cloudfront.net\u001b[0m]", "helpdesk.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhelpdeskredirect.s3-website-us-east-1.amazonaws.com\u001b[0m]", "idp.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-prd-platform-external-alb-720633355.us-east-1.elb.amazonaws.com\u001b[0m]", "iws.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-prd-platform-external-alb-720633355.us-east-1.elb.amazonaws.com\u001b[0m]", "kms.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcorel-dm-kms-prd-lb1-804933407.us-east-1.elb.amazonaws.com\u001b[0m]", "links.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdx357khonxrgh.cloudfront.net\u001b[0m]", "msg.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcc-prd-cdk-ipm-api-alb-1077480401.us-east-1.elb.amazonaws.com\u001b[0m]", "myaccount.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-prd-platform-external-alb-720633355.us-east-1.elb.amazonaws.com\u001b[0m]", "prd.iws.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-prd-platform-external-alb-720633355.us-east-1.elb.amazonaws.com\u001b[0m]", "qa-account.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-stg-platform-external-alb-1558420014.us-east-1.elb.amazonaws.com\u001b[0m]", "qa.amznsubs.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-stg-platform-external-alb-1558420014.us-east-1.elb.amazonaws.com\u001b[0m]", "qa2.amznsubs.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-stg-platform-external-alb-1558420014.us-east-1.elb.amazonaws.com\u001b[0m]", "redirect.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.elb-redirector-corel-com-prd-1474431395.us-east-1.elb.amazonaws.com\u001b[0m]", "stg.akamai-tool.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pl-stg-platform-internal-alb-412710481.us-east-1.elb.amazonaws.com\u001b[0m]", "stg.api.mkt.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgwel11tc6h.execute-api.us-east-1.amazonaws.com\u001b[0m]", "stg.evergreenredeem.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m7ffyh3317a.execute-api.us-east-1.amazonaws.com\u001b[0m]", "stg.iws.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-stg-platform-external-alb-1558420014.us-east-1.elb.amazonaws.com\u001b[0m]", "stg.sp.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-stg-platform-external-alb-1558420014.us-east-1.elb.amazonaws.com\u001b[0m]", "stg.subportal.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpd-test-platform-external-alb-2014041595.us-east-1.elb.amazonaws.com\u001b[0m]", "stg2-iws.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-stg-platform-external-alb-1558420014.us-east-1.elb.amazonaws.com\u001b[0m]", "test-idp.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-stg-platform-external-alb-1558420014.us-east-1.elb.amazonaws.com\u001b[0m]", "test-idp2.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpl-dev-platform-external-alb-1275760369.us-east-1.elb.amazonaws.com\u001b[0m]", "trial.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md8duwxe1lgajb.cloudfront.net\u001b[0m]", "ws-beta.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcd-beta-corel-external-alb-436004079.us-east-1.elb.amazonaws.com\u001b[0m]", "ws-dev.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcd-dev-corel-external-alb-371903399.us-east-1.elb.amazonaws.com\u001b[0m]", "ws.coreldraw.corel.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcd-prd-corel-external-alb-2000375351.us-east-1.elb.amazonaws.com\u001b[0m]" ], "takeover_v4": { "domain": "corel.com", "version": 4, "generated_at": "2026-03-29T08:29:54.749Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 1, "kept_strict": 0, "llm_review_pool": 1, "dropped_noise": 1, "deep_skipped_below_pool": 0 }, "candidates": [], "llm_review_pool": [ { "host": "assets.corel.com", "cname": "duxrzigwqnrm8.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.9, "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404 không đủ để kết luận có thể chiếm quyền. Dịch vụ AWS S3\/CloudFront thường được cấu hình chặt, cần thêm bằng chứng như bucket không tồn tại hoặc lỗi cấu hình cụ thể.", "llm_labeled_at": "2026-03-29T08:30:00.161Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "assets.corel.com" ], "batch_sources": [ "pool" ], "promote_revived": true, "labeled_at": "2026-03-29T08:30:00.161Z", "usage": { "prompt_tokens": 383, "completion_tokens": 121, "total_tokens": 504, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 255 } } } }