{
    "ok": true,
    "slug": "ihg.com-2026-04-03",
    "stats": {
        "subs": 2079,
        "all": 2079,
        "resolved": 1278,
        "live": 647,
        "takeover": 91,
        "juicy": 94,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/ihg.com-2026-04-03",
    "takeover_candidates": [
        "ac-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-vkdcojhph8.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "apac-awstraffic2.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msind1-prd-bmg1-wb-nlb-001-6f37948ada954cac.elb.ap-southeast-1.amazonaws.com\u001b[0m]",
        "apac-awstraffic3.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msind1-prd-bmg2-wb-nlb-002-c8ea541127e51c03.elb.ap-southeast-1.amazonaws.com\u001b[0m]",
        "apac-awstraffic4.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msind1-prd-bmg3-wb-nlb-003-a816bd6495b53a4c.elb.ap-southeast-1.amazonaws.com\u001b[0m]",
        "atelier.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]",
        "boost.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdwhli4oil681.cloudfront.net\u001b[0m]",
        "cf-line-d.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1duj5jq4jqdcm.cloudfront.net\u001b[0m]",
        "cf-line-p.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md6fsn3spaxg0.cloudfront.net\u001b[0m]",
        "cf-line-stg.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2chrjn295ehgu.cloudfront.net\u001b[0m]",
        "connect-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-zwakjiwsbf.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dash.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-prd-dsb-wb-alb-001-1657764415.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dashboard-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-b184720edi.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dcad1-dev-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-e5qisiqdh5.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dcad1-prd-f61-ap-ext-001.p.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-f61-ap-p-use1-public-001-1542934735.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcad1-prd-f61-ap.p.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-prod-f61-ap-alb-int-001-1221811402.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcad1-prd-f61-search.p.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-prod-f61-ap-alb-int-002-1201369523.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcad1-prd-f61-wb-merlin.p.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcad1-prod-f61-wb-alb-ext-001-589657877.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcad1-prd-f61-wb-travel.p.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcad1-prod-f61-wb-alb-ext-002-1382356786.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcad1-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-to70wyxr7b.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dcad1-stg-f61-ap-ext-001.np.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-f61-s-use1-public-001-2122449079.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcad1-stg-f61-ap.np.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-stg-f61-ap-alb-int-001-517989502.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcad1-stg-f61-search.np.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-stg-f61-ap-alb-int-002-1771871959.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dcad1-stg-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-vt17r7vf0k.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dci-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-jt7z88j4oi.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dev-auth-admin-hero.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1dkpjuwd5dajx.cloudfront.net\u001b[0m]",
        "dev-pa-admin-east.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pa-admin-alb-1839058739.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev-pf-admin-east.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pf-admin-alb-451914365.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev-sso.d.c.mfa.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-paw-pa-d-use1-public-001-855110999.us-east-1.elb.amazonaws.com\u001b[0m]",
        "digital-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-76y5uz0fn8.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "dining-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-ykx86jt436.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "frad1-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-2kc1h93w94.execute-api.eu-central-1.amazonaws.com\u001b[0m]",
        "globalbenefits.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mihg-portal-reservation-368306871.us-west-2.elb.amazonaws.com\u001b[0m]",
        "grafana.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-prd-dsb-wb-alb-001-1657764415.us-east-1.elb.amazonaws.com\u001b[0m]",
        "grud1-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-rcv5q046u6.execute-api.sa-east-1.amazonaws.com\u001b[0m]",
        "ignite.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdwhli4oil681.cloudfront.net\u001b[0m]",
        "insightvm.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-prd-rp7-ap-alb-int-001-181113369.us-east-1.elb.amazonaws.com\u001b[0m]",
        "instantgroupbooking.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3qgrb6v83zrjw.cloudfront.net\u001b[0m]",
        "lcyd1-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-2qxhjh8f55.execute-api.eu-west-2.amazonaws.com\u001b[0m]",
        "learningpool.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcuratr-prod-alb-2123666518.eu-west-2.elb.amazonaws.com\u001b[0m]",
        "lxpcontent.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md8htvm1tfg18k.cloudfront.net\u001b[0m]",
        "mea-awstraffic2.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-bmg-p-uae1-public-001-d85a6b853eccf547.elb.me-central-1.amazonaws.com\u001b[0m]",
        "mea-awstraffic3.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-bmg-p-uae1-public-002-a6d7c620d0479d6d.elb.me-central-1.amazonaws.com\u001b[0m]",
        "meetings.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3pgf5fztt6mtd.cloudfront.net\u001b[0m]",
        "mi.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2lg9w68ymge0c.cloudfront.net\u001b[0m]",
        "myfederate-dev.d.c.mfa.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-paw-pf-d-use1-public-001-1042622464.us-east-1.elb.amazonaws.com\u001b[0m]",
        "myfederate-qa.np.c.mfa.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcad1-stg-pf-mfa-wb-alb-ext-001-1248521934.us-east-1.elb.amazonaws.com\u001b[0m]",
        "myfederate.p.c.mfa.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcad1-prd-pf-mfa-wb-alb-ext-001-435761866.us-east-1.elb.amazonaws.com\u001b[0m]",
        "ngpms-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-sgaj9awi54.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "pa-admin-east.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pa-admin-alb-430332393.us-east-1.elb.amazonaws.com\u001b[0m]",
        "pa-admin-west.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pa-admin-alb-1490121087.us-west-1.elb.amazonaws.com\u001b[0m]",
        "pf-admin-east.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pf-admin-alb-182444366.us-east-1.elb.amazonaws.com\u001b[0m]",
        "pf-admin-west.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pf-admin-alb-1192678639.us-west-1.elb.amazonaws.com\u001b[0m]",
        "prd-fpp-ap.p.c1.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msfod1-prd-fpp-ap-alb-001-1192676420.us-west-1.elb.amazonaws.com\u001b[0m]",
        "qa-ac-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-uc0ghva23k.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-apac-applns.np.ni.c.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-sgp-lns-np-apse1-public-001-711926089.ap-southeast-1.elb.amazonaws.com\u001b[0m]",
        "qa-connect-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-ljdk7szti3.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-dashboard-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-d78i5gx4kk.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-dci-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-pge2uz4zae.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-digital-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-sv34i1rec1.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-dining-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-s0plrasp9b.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-fitness-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-wumckqqmmc.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-gio-ai-agentgarden.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-lb-mcp-agentgarden-np-use1-001-79633413.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa-ngpms-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-x32ry91725.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-pa-admin-east.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pa-admin-alb-116030348.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa-pa-admin-west.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pa-admin-alb-1437267978.us-west-1.elb.amazonaws.com\u001b[0m]",
        "qa-pf-admin-east.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pf-admin-alb-970781238.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa-pf-admin-west.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-pf-admin-alb-1868000687.us-west-1.elb.amazonaws.com\u001b[0m]",
        "qa-rc-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-etwhyqv3hl.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-reservation-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-166bj24uyk.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa-sso.np.c.mfa.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcad1-stg-pa-mfa-wb-alb-ext-001-1681273620.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa-studio-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-p4vac7g4ag.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "qa.dash.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-stg-dsb-wb-alb-001-1417781946.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qa.grafana.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-dcad1-stg-dsb-wb-alb-001-1417781946.us-east-1.elb.amazonaws.com\u001b[0m]",
        "qap.app-router.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-0uny9fcsj9.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "rc-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-b3ks5mv5d8.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "reservation-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-vi7x5d01t1.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "sfod1-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-md9bgedvh4.execute-api.us-west-1.amazonaws.com\u001b[0m]",
        "sind1-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-qxqhwa4u31.execute-api.ap-southeast-1.amazonaws.com\u001b[0m]",
        "skillsbuilder-test.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcuratr-prod-alb-2123666518.eu-west-2.elb.amazonaws.com\u001b[0m]",
        "sso.p.c.mfa.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcad1-prd-pa-mfa-wb-alb-ext-001-62652492.us-east-1.elb.amazonaws.com\u001b[0m]",
        "staging.www.dam-author.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdamstageauthdisplb-1351626921.us-east-1.elb.amazonaws.com\u001b[0m]",
        "staging.www.dam-portal.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdamstageweblb-1002849604.us-east-1.elb.amazonaws.com\u001b[0m]",
        "static-web-site-poc.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1tf28jinyf4cc.cloudfront.net\u001b[0m]",
        "stg-fpp-ap.n.c1.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdcad1-stg-fpp-ap-alb-001-1655429714.us-east-1.elb.amazonaws.com\u001b[0m]",
        "stg-meetings.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1u56h4sf39fi6.cloudfront.net\u001b[0m]",
        "storytellers.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcrystalline-longan-rzmb370xq0eibj82qpktd8sm.herokudns.com\u001b[0m]",
        "studio-api-edge.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-7mt0y5q2a9.execute-api.us-east-1.amazonaws.com\u001b[0m]",
        "sydd1-rsp-gw.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-sxvt1irnfc.execute-api.ap-southeast-2.amazonaws.com\u001b[0m]",
        "venafiawstest.n.c1.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mvenafitestlb001-1612254290.us-east-1.elb.amazonaws.com\u001b[0m]",
        "www.dam-author.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdamprodauthlb-1266668550.us-east-1.elb.amazonaws.com\u001b[0m]",
        "www.dam-portal.ihg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdamprodweblb-1888280252.us-east-1.elb.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "ihg.com",
        "version": 4,
        "generated_at": "2026-04-03T06:48:45.171Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 5,
            "kept_strict": 0,
            "llm_review_pool": 0,
            "dropped_noise": 5,
            "deep_skipped_below_pool": 5
        },
        "candidates": [],
        "llm_review_pool": []
    }
}