{
    "ok": true,
    "slug": "ecwid.com-2026-03-30",
    "stats": {
        "subs": 5871,
        "all": 5871,
        "resolved": 5748,
        "live": 61,
        "takeover": 61,
        "juicy": 63,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/ecwid.com-2026-03-30",
    "takeover_candidates": [
        "alertmanager-k8s-au-syd1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma8c99800af49c464a89f991921a1fc18-1209498671.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "alertmanager-k8s-eu-fra1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma939817ca9a844b29a8d7c01643af156-1866624964.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "alertmanager-k8s-us-vir1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32madae1a9de2bea42b99681482536bd02b-1269148503.us-east-1.elb.amazonaws.com\u001b[0m]",
        "appmarket.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "au-syd1-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma08ea3aad6cdc47bc8278837f4416471-918924612.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "au-syd2-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma08ea3aad6cdc47bc8278837f4416471-918924612.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "au-syd3-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma08ea3aad6cdc47bc8278837f4416471-918924612.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "ca-e-series-crl.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3knh8id5zs2oo.cloudfront.net\u001b[0m]",
        "defiler-k8s-au-syd1-prod0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma08ea3aad6cdc47bc8278837f4416471-918924612.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "defiler-k8s-eu-fra1-prod0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma46bc8ede155c4c6683f4ed7eabf3db6-1715819908.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "defiler-k8s-us-vir1-prod0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev-developers.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma769ff9dea72a46e8ba794be18142f33-1089956829.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "dev-www.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma769ff9dea72a46e8ba794be18142f33-1089956829.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "eu-fra1-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma46bc8ede155c4c6683f4ed7eabf3db6-1715819908.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "eu-fra2-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma46bc8ede155c4c6683f4ed7eabf3db6-1715819908.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "eu-fra3-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma46bc8ede155c4c6683f4ed7eabf3db6-1715819908.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "eu-fra4-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma46bc8ede155c4c6683f4ed7eabf3db6-1715819908.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "frontend-prototypes.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma943e502e68af474499eaa3cc563fbe9-255665670.us-east-1.elb.amazonaws.com\u001b[0m]",
        "go.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md21xbfqf423oqa.cloudfront.net\u001b[0m]",
        "grafana.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma21cd934239c04d339854f7c35fe7370-2078559452.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "help.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdualstack.a943e502e68af474499eaa3cc563fbe9-255665670.us-east-1.elb.amazonaws.com\u001b[0m]",
        "images-cdn.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2j6dbq0eux0bg.cloudfront.net\u001b[0m]",
        "images.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mimages.ecwid.com.s3.amazonaws.com\u001b[0m]",
        "into.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2jt4kka2be3x5.cloudfront.net\u001b[0m]",
        "kopshelper.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma769ff9dea72a46e8ba794be18142f33-1089956829.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "livemap.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "mta-sts.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1uulnn7bt4qd7.cloudfront.net\u001b[0m]",
        "ops-test-task-authority.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mecs-531952882.us-east-1.elb.amazonaws.com\u001b[0m]",
        "plugins.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1uezk3pf31kzm.cloudfront.net\u001b[0m]",
        "public-nexus.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma769ff9dea72a46e8ba794be18142f33-1089956829.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "queen-cstmz-k8s-us-vir1-apps0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mad51fb28141fc42a3abedfa68f617509-849821359.us-east-1.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-au-syd1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma8c99800af49c464a89f991921a1fc18-1209498671.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-au-syd1-prod0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma08ea3aad6cdc47bc8278837f4416471-918924612.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-eu-fra1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma939817ca9a844b29a8d7c01643af156-1866624964.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-eu-fra1-prod0-7.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma46bc8ede155c4c6683f4ed7eabf3db6-1715819908.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-eu-fra1-zerus0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma769ff9dea72a46e8ba794be18142f33-1089956829.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-new-us-vir1-prod0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-us-vir1-apps0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mad51fb28141fc42a3abedfa68f617509-849821359.us-east-1.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-us-vir1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32madae1a9de2bea42b99681482536bd02b-1269148503.us-east-1.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-us-vir1-prod0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "queen-k8s-us-vir1-websites0-2.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma943e502e68af474499eaa3cc563fbe9-255665670.us-east-1.elb.amazonaws.com\u001b[0m]",
        "sandy.sandbox.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maae841761198b45c08430fb089c174b3-1638386748.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "slowpoke-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "static.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdj925myfyz5v.cloudfront.net\u001b[0m]",
        "static2.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdj925myfyz5v.cloudfront.net\u001b[0m]",
        "static3.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdj925myfyz5v.cloudfront.net\u001b[0m]",
        "static4.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdj925myfyz5v.cloudfront.net\u001b[0m]",
        "static5.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdj925myfyz5v.cloudfront.net\u001b[0m]",
        "support.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mecwidhelp.zendesk.com\u001b[0m]",
        "test-developers.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma769ff9dea72a46e8ba794be18142f33-1089956829.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "test-www.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma769ff9dea72a46e8ba794be18142f33-1089956829.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "try.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma943e502e68af474499eaa3cc563fbe9-255665670.us-east-1.elb.amazonaws.com\u001b[0m]",
        "us-vir1-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "us-vir2-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "us-vir3-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "us-vir4-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "us-vir5-hived-queen-k8s.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32maccbb2df539874cbf8e7d6f4de5b4a3b-1974678414.us-east-1.elb.amazonaws.com\u001b[0m]",
        "vmalert-k8s-au-syd1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma8c99800af49c464a89f991921a1fc18-1209498671.ap-southeast-2.elb.amazonaws.com\u001b[0m]",
        "vmalert-k8s-eu-fra1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma939817ca9a844b29a8d7c01643af156-1866624964.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "vmalert-k8s-us-vir1-cde0.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32madae1a9de2bea42b99681482536bd02b-1269148503.us-east-1.elb.amazonaws.com\u001b[0m]",
        "wix.ecwid.com [\u001b[35mCNAME\u001b[0m] [\u001b[32ma08ea3aad6cdc47bc8278837f4416471-918924612.ap-southeast-2.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "ecwid.com",
        "version": 4,
        "generated_at": "2026-03-30T12:36:14.366Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 10,
            "kept_strict": 0,
            "llm_review_pool": 2,
            "dropped_noise": 10,
            "deep_skipped_below_pool": 8
        },
        "candidates": [],
        "llm_review_pool": [
            {
                "host": "mta-sts.ecwid.com",
                "cname": "d1uulnn7bt4qd7.cloudfront.net",
                "status": 404,
                "title": null,
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. CloudFront phân phối S3 bucket, có thể bucket chưa tồn tại hoặc cấu hình sai. Tuy nhiên, không có bằng chứng rõ ràng về khả năng claim trực tiếp.",
                "llm_labeled_at": "2026-03-30T12:36:22.285Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "plugins.ecwid.com",
                "cname": "d1uezk3pf31kzm.cloudfront.net",
                "status": 404,
                "title": "404 Not Found",
                "fingerprint": "aws_s3",
                "confidence": "high",
                "claim_score": 44,
                "claim_tier": "low",
                "signals": [],
                "hard_noise": false,
                "real_candidate": false,
                "llm_eligible": true,
                "strict_pass": false,
                "llm_verdict": "unlikely",
                "llm_confidence": 0.7,
                "llm_rationale_vi": "Tương tự, CNAME CloudFront với HTTP 404. Cấu hình phân phối có thể chưa hoàn chỉnh, nhưng không đủ dấu hiệu cho thấy có thể chiếm quyền sở hữu subdomain một cách hợp lệ.",
                "llm_labeled_at": "2026-03-30T12:36:22.285Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "mta-sts.ecwid.com",
                "plugins.ecwid.com"
            ],
            "batch_sources": [
                "pool",
                "pool"
            ],
            "promote_revived": true,
            "labeled_at": "2026-03-30T12:36:22.285Z",
            "usage": {
                "prompt_tokens": 503,
                "completion_tokens": 204,
                "total_tokens": 707,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 375
            }
        }
    }
}