{ "ok": true, "slug": "go.cr-2026-04-01", "stats": { "subs": 4847, "all": 4847, "resolved": 2997, "live": 2220, "takeover": 19, "juicy": 51, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 4, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/go.cr-2026-04-01", "takeover_candidates": [ "app.recoleccion.residuos.muniesparza.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32md22d1rnms52ctk.cloudfront.net\u001b[0m]", "archivo.tucurrique.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mmelvinsalas.github.io\u001b[0m]", "btm.procomer.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-onlife01-981551618.us-east-2.elb.amazonaws.com\u001b[0m]", "btmvirtual.procomer.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-onlife01-981551618.us-east-2.elb.amazonaws.com\u001b[0m]", "cdn.registrelo.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-registrelo2-webserver-426353906.us-east-1.elb.amazonaws.com\u001b[0m]", "crpreviene.correos.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mcrpreviene-1448399135.us-west-2.elb.amazonaws.com\u001b[0m]", "encadenados.procomer.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-onlife01-981551618.us-east-2.elb.amazonaws.com\u001b[0m]", "formatos.inamu.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32md2da2n3x9cm3sg.cloudfront.net\u001b[0m]", "itinerarios.cgr.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32md1l31a8xz8796.cloudfront.net\u001b[0m]", "mantenimiento.micitt.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mestebanmonge-micitt.github.io\u001b[0m]", "maucc.procomer.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-onlife01-981551618.us-east-2.elb.amazonaws.com\u001b[0m]", "mauccvirtual.procomer.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-onlife01-981551618.us-east-2.elb.amazonaws.com\u001b[0m]", "qa-atv.comprobanteselectronicos.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mapi-atv-externos-1026566722.us-east-1.elb.amazonaws.com\u001b[0m]", "tdcar.tramiteya.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32malb-webserver-production-950504083.us-east-1.elb.amazonaws.com\u001b[0m]", "v2.registrelo.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-registrelo2-webserver-426353906.us-east-1.elb.amazonaws.com\u001b[0m]", "www.cgr.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32md35ec7ulzksxxc.cloudfront.net\u001b[0m]", "www.registrelo.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-registrelo2-webserver-426353906.us-east-1.elb.amazonaws.com\u001b[0m]", "www.sicid.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32melb-sicid-2016193619.us-east-2.elb.amazonaws.com\u001b[0m]", "yoalcalde.curridabat.go.cr [\u001b[35mCNAME\u001b[0m] [\u001b[32mservicios-silice-557115876.us-west-2.elb.amazonaws.com\u001b[0m]" ], "takeover_v4": { "domain": "go.cr", "version": 4, "generated_at": "2026-04-01T09:01:03.849Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 5, "kept_strict": 4, "llm_review_pool": 0, "dropped_noise": 1, "deep_skipped_below_pool": 1 }, "candidates": [ { "host": "correo.mideplan.go.cr", "cname": "ghs.googlehosted.com", "status": 404, "title": "Error 404 (Not Found)!!1", "fingerprint": "firebase", "confidence": "high", "claim_score": 50, "claim_tier": "medium", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CNAME trỏ đến dịch vụ Google nhưng trả về lỗi 404 chung. Không có bằng chứng rõ ràng về việc có thể chiếm quyền sở hữu (claim) dịch vụ này.", "llm_labeled_at": "2026-04-01T09:01:17.856Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "correo.municarrillo.go.cr", "cname": "ghs.googlehosted.com", "status": 404, "title": "Error 404 (Not Found)!!1", "fingerprint": "firebase", "confidence": "high", "claim_score": 50, "claim_tier": "medium", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "Tương tự các host khác, CNAME đến Google và lỗi 404. Thiếu tín hiệu cụ thể cho thấy tài nguyên chưa được gắn tenant và có thể claim.", "llm_labeled_at": "2026-04-01T09:01:17.857Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "mail.esm.go.cr", "cname": "ghs.googlehosted.com", "status": 404, "title": "Error 404 (Not Found)!!1", "fingerprint": "firebase", "confidence": "high", "claim_score": 50, "claim_tier": "medium", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "Cấu hình CNAME rủi ro nhưng phản hồi lỗi 404 tiêu chuẩn từ Google. Khả năng claim thấp, có thể là bản ghi còn sót lại.", "llm_labeled_at": "2026-04-01T09:01:17.857Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "webmail.sanramon.go.cr", "cname": "ghs.googlehosted.com", "status": 404, "title": "Error 404 (Not Found)!!1", "fingerprint": "firebase", "confidence": "high", "claim_score": 50, "claim_tier": "medium", "signals": [], "hard_noise": false, "real_candidate": true, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "Mẫu lỗi 404 từ Google Hosted. Không đủ bằng chứng để xác định đây là tài nguyên có thể claim được, có thể là false positive.", "llm_labeled_at": "2026-04-01T09:01:17.857Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_review_pool": [], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "correo.mideplan.go.cr", "correo.municarrillo.go.cr", "mail.esm.go.cr", "webmail.sanramon.go.cr" ], "batch_sources": [ "strict", "strict", "strict", "strict" ], "promote_revived": true, "labeled_at": "2026-04-01T09:01:17.857Z", "usage": { "prompt_tokens": 738, "completion_tokens": 355, "total_tokens": 1093, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 610 } } } }