{ "ok": true, "slug": "gettyimages.com-2026-04-01", "stats": { "subs": 752, "all": 752, "resolved": 419, "live": 156, "takeover": 40, "juicy": 44, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/gettyimages.com-2026-04-01", "takeover_candidates": [ "aia.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpki-cdp-lb-1697091879.us-east-1.elb.amazonaws.com\u001b[0m]", "api.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdzrpbziog0twy.cloudfront.net\u001b[0m]", "authentication.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1naylolfaihlv.cloudfront.net\u001b[0m]", "cdp.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpki-cdp-lb-1697091879.us-east-1.elb.amazonaws.com\u001b[0m]", "chromecast.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1zz97xd6nn4kn.cloudfront.net\u001b[0m]", "connect.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdzrpbziog0twy.cloudfront.net\u001b[0m]", "contributors-beta.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcontributor-community-ext-alb-1377187983.us-west-2.elb.amazonaws.com\u001b[0m]", "contributors-new.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcontributor-community-ext-alb-1377187983.us-west-2.elb.amazonaws.com\u001b[0m]", "contributors.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcontributor-community-ext-alb-1377187983.us-west-2.elb.amazonaws.com\u001b[0m]", "creative.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu4u3zxsqjxgp.cloudfront.net\u001b[0m]", "damhelp.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgettyimageshelp.zendesk.com\u001b[0m]", "delivery.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3eqitnom5unv3.cloudfront.net\u001b[0m]", "editorial.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu4u3zxsqjxgp.cloudfront.net\u001b[0m]", "esp.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32masset-prod-sub-alb-1154015933.us-west-2.elb.amazonaws.com\u001b[0m]", "ews.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mext-ews-lb-1292473405.us-west-2.elb.amazonaws.com\u001b[0m]", "facialrecognition.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-demo-ui-alb-412035569.us-west-2.elb.amazonaws.com\u001b[0m]", "help.customcontent.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcustomcontent.zendesk.com\u001b[0m]", "keeperautomator.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkeeper-prod-alb-999853740.us-west-2.elb.amazonaws.com\u001b[0m]", "maildr.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mexchange-elb-ext-139727365.us-west-2.elb.amazonaws.com\u001b[0m]", "mailtest.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mexchange-elb-ext-139727365.us-west-2.elb.amazonaws.com\u001b[0m]", "newsandsport.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdu4u3zxsqjxgp.cloudfront.net\u001b[0m]", "newsroom.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-marketing-wbnext-946347598.us-west-2.elb.amazonaws.com\u001b[0m]", "origin-api.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-getty-api-public-alb-1867697154.us-west-2.elb.amazonaws.com\u001b[0m]", "origin-staging-in.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-in-930533132.us-west-2.elb.amazonaws.com\u001b[0m]", "origin-staging-mm.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-mm-47869792.us-west-2.elb.amazonaws.com\u001b[0m]", "partnerapi.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md15kbb68gzbli3.cloudfront.net\u001b[0m]", "press.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-marketing-wbnext-946347598.us-west-2.elb.amazonaws.com\u001b[0m]", "reports.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mreports.gettyimages.com.s3-website-us-west-2.amazonaws.com\u001b[0m]", "scim.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2wc5z05e5ei30.cloudfront.net\u001b[0m]", "sitemaps.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1x99pfb5b3eng.cloudfront.net\u001b[0m]", "spectrum-test.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mjaguar-stage-spectrum-1083853783.us-west-2.elb.amazonaws.com\u001b[0m]", "stage-delivery.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3sbkvmfilzya9.cloudfront.net\u001b[0m]", "stage-workbenchcms.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcand-marketing-wbnext-2146277008.us-west-2.elb.amazonaws.com\u001b[0m]", "staging-in.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdtuzyz0969fem.cloudfront.net\u001b[0m]", "staging-mm.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3oribv0eexcve.cloudfront.net\u001b[0m]", "static.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2cfjncbaa70hr.cloudfront.net\u001b[0m]", "uw2-mm.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-uw2-mm-250365958.us-west-2.elb.amazonaws.com\u001b[0m]", "verify.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxnpne3aiisby.cloudfront.net\u001b[0m]", "visualscience.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3lehp9dqb01q6.cloudfront.net\u001b[0m]", "workbenchcms.gettyimages.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-marketing-wbnext-946347598.us-west-2.elb.amazonaws.com\u001b[0m]" ], "takeover_v4": { "domain": "gettyimages.com", "version": 4, "generated_at": "2026-04-01T05:34:48.329Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 9, "kept_strict": 0, "llm_review_pool": 2, "dropped_noise": 9, "deep_skipped_below_pool": 7 }, "candidates": [], "llm_review_pool": [ { "host": "reports.gettyimages.com", "cname": "reports.gettyimages.com.s3-website-us-west-2.amazonaws.com", "status": 404, "title": "404 Not Found", "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.8, "llm_rationale_vi": "CNAME trỏ đến S3 bucket nhưng trả về 404 Not Found, có thể bucket đã bị xóa hoặc chưa cấu hình. Tuy nhiên, đây là tên miền phụ của một dịch vụ lớn, khả năng cao là cố ý hoặc đã được bảo vệ.", "llm_labeled_at": "2026-04-01T05:34:56.803Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "verify.gettyimages.com", "cname": "dxnpne3aiisby.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.8, "llm_rationale_vi": "CNAME trỏ đến CloudFront với HTTP 404. CloudFront thường được cấu hình chặt chẽ bởi các dịch vụ lớn, và lỗi 404 có thể là do phân phối chưa được xuất bản hoặc đã bị gỡ.", "llm_labeled_at": "2026-04-01T05:34:56.804Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "reports.gettyimages.com", "verify.gettyimages.com" ], "batch_sources": [ "pool", "pool" ], "promote_revived": true, "labeled_at": "2026-04-01T05:34:56.804Z", "usage": { "prompt_tokens": 504, "completion_tokens": 235, "total_tokens": 739, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 376 } } } }