{
    "ok": true,
    "slug": "gc.ca-2026-04-01",
    "stats": {
        "subs": 9665,
        "all": 9665,
        "resolved": 4412,
        "live": 63,
        "takeover": 53,
        "juicy": 73,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/gc.ca-2026-04-01",
    "takeover_candidates": [
        "admin.ct-tc-pef.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mdk0vzdz43i3mv.cloudfront.net\u001b[0m]",
        "admin.ct-tc-stg.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md2twlt5js3539y.cloudfront.net\u001b[0m]",
        "admin.ct-tc.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md2augsz4412oyw.cloudfront.net\u001b[0m]",
        "admin.pc-vp-ste.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md69ligxgdmm9a.cloudfront.net\u001b[0m]",
        "admin2.pc-vp-ste.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md69ligxgdmm9a.cloudfront.net\u001b[0m]",
        "aircca-dev.web.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-ircc-assistant-frontend-web-app.azurewebsites.net\u001b[0m]",
        "aircca-stg.web.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-ircc-assistant-frontend-web-app.azurewebsites.net\u001b[0m]",
        "aircca.web.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-ircc-assistant-frontend-web-app.azurewebsites.net\u001b[0m]",
        "api.a2sc-csa2-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md-6yoy53u1mi.execute-api.ca-central-1.amazonaws.com\u001b[0m]",
        "api.cbr-rcb.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md-uyco306uc9.execute-api.ca-central-1.amazonaws.com\u001b[0m]",
        "api.tracker-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md-zbyqn0xk31.execute-api.ca-central-1.amazonaws.com\u001b[0m]",
        "app.1759.ccbn-nbc.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mde8yhu8xx7i0r.cloudfront.net\u001b[0m]",
        "atip-aiprp-dev.web.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-atip-consent-frontend.azurewebsites.net\u001b[0m]",
        "atip-aiprp-stg.web.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-atip-consent-frontend.azurewebsites.net\u001b[0m]",
        "auth-collaborators.a2sc-csa2-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md1ut2p7dyf6iua.cloudfront.net\u001b[0m]",
        "auth-collaborators.a2sc-csa2.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md321e7jjaqdxw0.cloudfront.net\u001b[0m]",
        "auth.a2sc-csa2-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md1l9b6ifg8uxwo.cloudfront.net\u001b[0m]",
        "careers.cse-cst.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mdsxw0x7k8kacs.cloudfront.net\u001b[0m]",
        "carrieres.cse-cst.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md1f2hdbwq3fcjs.cloudfront.net\u001b[0m]",
        "cognitoproxy.authhub.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-authhub-auth-prod-proxy-alb-1348469347.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "covid-app.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32msced-covidapp-prod-355516645.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "cw.hangar.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mrcaf-hangar-prod-west-2108286176.ca-west-1.elb.amazonaws.com\u001b[0m]",
        "elang.international.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mlza-public-prod-perimeter-alb-1787101446.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "hangar.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32msced-hangar-prod-1028822649.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "ll-lv.agr.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32magpg-scs-livinglabs-prod-ext-alb-1316787226.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "ll.agr.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32magpg-scs-livinglabs-prod-ext-alb-1316787226.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "lv.agr.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32magpg-scs-livinglabs-prod-ext-alb-1316787226.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "nlb-dev.a2sc-csa2-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32maa-dev-nlb-1a351d9c89016799.elb.ca-central-1.amazonaws.com\u001b[0m]",
        "osaa2b-docs.oss.cse-cst.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mcse-cst.github.io\u001b[0m]",
        "portal-portail.pc-vp-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md3eo6oiq7z723a.cloudfront.net\u001b[0m]",
        "portal-portail.pc-vp-ste.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md13v3eb5gi65dt.cloudfront.net\u001b[0m]",
        "portal-portail.pc-vp.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md3dbvgn9prpu6j.cloudfront.net\u001b[0m]",
        "portal.geomatch-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md34kq3v2fvknp0.cloudfront.net\u001b[0m]",
        "portal.geomatch-stg.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md2oujxvj3juced.cloudfront.net\u001b[0m]",
        "portal.geomatch.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md2n4r8xhg5ek1d.cloudfront.net\u001b[0m]",
        "smmsgeo-trg.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mrcaf-smms-prod-1048852153.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "test-covid-app.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32msced-covidapp-test-1386007907.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "trg1.smms.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mrcaf-smms-prod-1048852153.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "trg2.smms.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mrcaf-smms-prod-1048852153.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "trg3.smms.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mrcaf-smms-prod-1048852153.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "trg4.smms.cloud.forces.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mrcaf-smms-prod-1048852153.ca-central-1.elb.amazonaws.com\u001b[0m]",
        "tv-tele.cmhc-schl.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mxerox-cmhc-ec2-2098429485.us-west-2.elb.amazonaws.com\u001b[0m]",
        "upload.cep-pec-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md3hilrv1zq11p5.cloudfront.net\u001b[0m]",
        "upload2.cep-pec-ste.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mdx5ibjjg5bb17.cloudfront.net\u001b[0m]",
        "uploadms.cep-pec-dev.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mdqaszcztzgzi0.cloudfront.net\u001b[0m]",
        "uploadms.cep-pec-pef.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md11yoefkuxpulv.cloudfront.net\u001b[0m]",
        "uploadms.cep-pec-ste.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md3gse3bg0wwikc.cloudfront.net\u001b[0m]",
        "uploadms.cep-pec-stg.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md2g31wavj91ppk.cloudfront.net\u001b[0m]",
        "uploadms.cep-pec-trn.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md360868e47xggp.cloudfront.net\u001b[0m]",
        "uploadms.cep-pec.apps.cic.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32md2f0lr9q8ssfu9.cloudfront.net\u001b[0m]",
        "www.nrcan.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlf0dbi3blogx.cloudfront.net\u001b[0m]",
        "www.pilotagestlaurent.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mpilotage-st-laurent.pages.dev\u001b[0m]",
        "www.rncan.gc.ca [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlf0dbi3blogx.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "gc.ca",
        "version": 4,
        "generated_at": "2026-04-01T03:23:43.847Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 13,
            "kept_strict": 0,
            "llm_review_pool": 0,
            "dropped_noise": 13,
            "deep_skipped_below_pool": 13
        },
        "candidates": [],
        "llm_review_pool": []
    }
}