{ "ok": true, "slug": "esri.com-2026-03-31", "stats": { "subs": 659, "all": 659, "resolved": 286, "live": 256, "takeover": 41, "juicy": 41, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/esri.com-2026-03-31", "takeover_candidates": [ "2023-prd-general-ist-06-shared-external-lb.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-ingressn-ingressn-eeb7e43fae-ed4ec1d2da9cd90c.elb.us-west-2.amazonaws.com\u001b[0m]", "accounts.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mist-sec-i-loadbala-5i92ppvs2ctg-1368762309.us-west-2.elb.amazonaws.com\u001b[0m]", "ago-assistant.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3gmlbq9xaenqv.cloudfront.net\u001b[0m]", "decisionrules-dev.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mesri-development.web.app\u001b[0m]", "decisionrules-stg.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mesri-test-e8340.web.app\u001b[0m]", "decisionrules.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mesri-production.web.app\u001b[0m]", "docs.sse.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mesri-codehub.github.io\u001b[0m]", "explore-mars.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mesri.github.io\u001b[0m]", "fa.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3sef4y4wt5kgb.cloudfront.net\u001b[0m]", "fhnga-ms.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mforthillagselb-1520682486.us-east-1.elb.amazonaws.com\u001b[0m]", "fhnga-msstg.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mforthillagselb-stg-137678482.us-east-1.elb.amazonaws.com\u001b[0m]", "geoxc-apps.bd.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3q00nry4mwcpz.cloudfront.net\u001b[0m]", "geoxc-apps2.bd.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md160jg1uiwx1eg.cloudfront.net\u001b[0m]", "geoxc-apps4.bd.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3iizaqftbjjyt.cloudfront.net\u001b[0m]", "istapi.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3r34kts9zg965.cloudfront.net\u001b[0m]", "istapidev.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-r5r8pdk3n1.execute-api.us-west-2.amazonaws.com\u001b[0m]", "istapistg.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1avu4h3ny88ld.cloudfront.net\u001b[0m]", "labs.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3c0e6tziipfci.cloudfront.net\u001b[0m]", "labsdev.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2r5jw28tkljr7.cloudfront.net\u001b[0m]", "m4cc-ms.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mm4ccprd-558892486.us-west-1.elb.amazonaws.com\u001b[0m]", "m4cc-msstg.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mm4ccstg-170698638.us-west-1.elb.amazonaws.com\u001b[0m]", "m4ccoauth-ms-stg.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2brufubff6azo.cloudfront.net\u001b[0m]", "m4ccoauth-ms.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2x6gr15pyazqv.cloudfront.net\u001b[0m]", "michigan-msstg.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mmichigan-stg-1486368094.us-east-1.elb.amazonaws.com\u001b[0m]", "monitoring-emcs.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32memcsmonitor-alb-807465536.us-east-1.elb.amazonaws.com\u001b[0m]", "neenterprise.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-34-198-145-178.compute-1.amazonaws.com\u001b[0m]", "negeoevt.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-34-200-154-78.compute-1.amazonaws.com\u001b[0m]", "neserver.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-34-196-187-16.compute-1.amazonaws.com\u001b[0m]", "portal.coldbrew.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcoldbrew-portal-681172859.us-east-1.elb.amazonaws.com\u001b[0m]", "pythonapi.playground.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpythonapi-playground-2041737339.us-east-2.elb.amazonaws.com\u001b[0m]", "qaus1-monitoring.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcl-pro-loadb-dypzxxtqdl7b-968234175.us-west-2.elb.amazonaws.com\u001b[0m]", "r.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mr-arcgis.github.io\u001b[0m]", "redistricting2.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mredistricting-2-prd-525243990.us-east-1.elb.amazonaws.com\u001b[0m]", "sentinel2explorer.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3txr31i3zyne3.cloudfront.net\u001b[0m]", "static.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdj0hk9lkmhb3s.cloudfront.net\u001b[0m]", "storymaps.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstorymaps-webserver-elb-1097644936.us-east-1.elb.amazonaws.com\u001b[0m]", "topodemords.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-44-209-10-108.compute-1.amazonaws.com\u001b[0m]", "trainingassets.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2xhauwgfr81b2.cloudfront.net\u001b[0m]", "velocitysizer.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvelocitypiperlb-198395703.us-west-2.elb.amazonaws.com\u001b[0m]", "wdcintelportal.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mec2-184-72-233-67.compute-1.amazonaws.com\u001b[0m]", "workflowsample.esri.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md39g6cwhqv0ot4.cloudfront.net\u001b[0m]" ], "takeover_v4": { "domain": "esri.com", "version": 4, "generated_at": "2026-03-30T22:11:17.591Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 5, "kept_strict": 0, "llm_review_pool": 2, "dropped_noise": 5, "deep_skipped_below_pool": 3 }, "candidates": [], "llm_review_pool": [ { "host": "m4ccoauth-ms-stg.esri.com", "cname": "d2brufubff6azo.cloudfront.net", "status": 404, "title": "404 Not Found", "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Có thể là môi trường staging chưa triển khai, không chắc chắn có thể claim.", "llm_labeled_at": "2026-03-30T22:11:22.084Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "m4ccoauth-ms.esri.com", "cname": "d2x6gr15pyazqv.cloudfront.net", "status": 404, "title": "404 Not Found", "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "Tương tự, CNAME CloudFront với HTTP 404. Có thể là endpoint chưa được cấu hình đầy đủ, nhưng không đủ bằng chứng cho claim.", "llm_labeled_at": "2026-03-30T22:11:22.084Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "m4ccoauth-ms-stg.esri.com", "m4ccoauth-ms.esri.com" ], "batch_sources": [ "pool", "pool" ], "promote_revived": true, "labeled_at": "2026-03-30T22:11:22.084Z", "usage": { "prompt_tokens": 511, "completion_tokens": 166, "total_tokens": 677, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 383 } } } }