{ "ok": true, "slug": "finra.org-2026-03-31", "stats": { "subs": 4259, "all": 4259, "resolved": 1012, "live": 981, "takeover": 28, "juicy": 25, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 1, "takeover_hot_claim": 1, "takeover_claimed": 0, "takeover_telegram_ok": 1, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/finra.org-2026-03-31", "takeover_candidates": [ "diver-sec.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawsalbediverep01sec-2018948810.us-east-1.elb.amazonaws.com\u001b[0m]", "diver-sec.qa.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawsalbedivereq01sec-1196480968.us-east-1.elb.amazonaws.com\u001b[0m]", "dsp-firehose.dr.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbedspalbt02-701942917.us-east-2.elb.amazonaws.com\u001b[0m]", "dsp-firehose.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbedspalbt01-2004661029.us-east-1.elb.amazonaws.com\u001b[0m]", "dsp-firehose.qa.dr.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbedspalbq02-1050383993.us-east-2.elb.amazonaws.com\u001b[0m]", "dsp.dr.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbedsphecet02-813333822.us-east-2.elb.amazonaws.com\u001b[0m]", "dsp.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbedsphecet01-1174970092.us-east-1.elb.amazonaws.com\u001b[0m]", "dsp.qa.dr.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbedspheceq02-1086516909.us-east-2.elb.amazonaws.com\u001b[0m]", "errorgf.devsectest.qa.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32merror2.pages.dev\u001b[0m]", "events.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlwy6q9w9xksb.cloudfront.net\u001b[0m]", "fiperrortest.devsec.dev.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mfiperror.pages.dev\u001b[0m]", "fixedincomedistributions.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md3dmk6l93no47p.cloudfront.net\u001b[0m]", "fnrw-acquiadata.dev.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md20en0tgfscb9m.cloudfront.net\u001b[0m]", "gateway-devint.dev.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ntnjtt6y5r1o.cloudfront.net\u001b[0m]", "log.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbedspnetet01-450ac245c9021429.elb.us-east-1.amazonaws.com\u001b[0m]", "logforwarder.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbesplunkssed01-3e99e7c31b845dc9.elb.us-east-1.amazonaws.com\u001b[0m]", "newsfeeds.etlmgmt.ct.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbeetlmgmtnwsnfxtlbec-645816117.us-east-1.elb.amazonaws.com\u001b[0m]", "newsfeeds.etlmgmt.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawslbeetlmgmtnwsnfxtlbep-2116647318.us-east-1.elb.amazonaws.com\u001b[0m]", "ola-sec.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawsalbefastolaep01sec-1373780742.us-east-1.elb.amazonaws.com\u001b[0m]", "ola-sec.qa.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawsalbefastolaeq01sec-253927228.us-east-1.elb.amazonaws.com\u001b[0m]", "page1.devsec.qa.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mpages-test-1-e2z.pages.dev\u001b[0m]", "prodmirror.crd.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawsalberampejj13-824679139.us-east-1.elb.amazonaws.com\u001b[0m]", "static.dots-int.dev.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md-13qkqnuu7g.execute-api.us-east-1.amazonaws.com\u001b[0m]", "static.f4dxt.dev.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md3mh4diw8e3e88.cloudfront.net\u001b[0m]", "tsp.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md331m8mdl4rw0y.cloudfront.net\u001b[0m]", "webcrdrenewals.crd.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawsalberampejj12-214242337.us-east-1.elb.amazonaws.com\u001b[0m]", "webcrdtesting.crd.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mawsalberampejj11-387251195.us-east-1.elb.amazonaws.com\u001b[0m]", "weblock-crd.finra.org [\u001b[35mCNAME\u001b[0m] [\u001b[32md1htgnjsu0z8bi.cloudfront.net\u001b[0m]" ], "takeover_v4": { "domain": "finra.org", "version": 5, "generated_at": "2026-03-31T14:16:57.277Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 4, "kept_strict": 1, "llm_review_pool": 0, "dropped_noise": 3, "deep_skipped_below_pool": 3 }, "candidates": [ { "host": "fiperrortest.devsec.dev.finra.org", "cname": "fiperror.pages.dev", "status": 404, "title": null, "fingerprint": "pages_dev", "confidence": "high", "claim_score": 79, "claim_tier": "high", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "claim_likely", "llm_confidence": 0.85, "llm_rationale_vi": "CNAME trỏ tới pages.dev, HTTP 404, không có title. Dịch vụ Cloudflare Pages có thể chưa được triển khai, tạo cơ hội claim subdomain.", "llm_labeled_at": "2026-03-31T14:17:01.683Z", "llm_model": "deepseek-chat", "llm_priority": "high", "claimed": false, "claim_status": "needs_manual", "claim_details": { "method": "http_verify", "verify_url": "https:\/\/fiperrortest.devsec.dev.finra.org\/", "http_status": 404, "title_snippet": "", "verify_error": null, "webhook_note": "webhook_http_200", "comment": "Automated SaaS claim requires provider API keys — verify manually (Webflow\/Netlify\/…)" }, "telegram_sent": true, "telegram_error": null } ], "llm_review_pool": [], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "fiperrortest.devsec.dev.finra.org" ], "batch_sources": [ "strict" ], "promote_revived": true, "labeled_at": "2026-03-31T14:17:01.683Z", "usage": { "prompt_tokens": 386, "completion_tokens": 98, "total_tokens": 484, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 258 } }, "v5": { "processed_at": "2026-03-31T14:17:01.769Z", "auto_claim_enabled": true, "telegram_enabled": true, "slug": "finra.org-2026-03-31" } } }