{ "ok": true, "slug": "klarna.com-2026-04-04", "stats": { "subs": 886, "all": 886, "resolved": 234, "live": 181, "takeover": 49, "juicy": 46, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/klarna.com-2026-04-04", "takeover_candidates": [ "app-api-staging.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1wwd2r52lg5kv.cloudfront.net\u001b[0m]", "app-api.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md13aahnm5ccb5i.cloudfront.net\u001b[0m]", "app-link-bridge.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3pnu3mpgtlacx.cloudfront.net\u001b[0m]", "app.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md36elq4brun0dg.cloudfront.net\u001b[0m]", "auth-bp.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcloudfront.production.us1.auth-bp.klarna.net\u001b[0m]", "auth.eu.portal.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkeycloak.cloudfront.production.eu1.meta.klarna.net\u001b[0m]", "auth.playground.eu.portal.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkeycloak.cloudfront.playground.eu1.meta.klarna.net\u001b[0m]", "auth.playground.us.portal.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkeycloak.cloudfront.playground.us1.meta.klarna.net\u001b[0m]", "auth.us.portal.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkeycloak.cloudfront.production.us1.meta.klarna.net\u001b[0m]", "brand.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]", "get.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "go.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "il-google-eu.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1oz4zz43mbu2.cloudfront.net\u001b[0m]", "il-google-eu.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3q85fayaixtll.cloudfront.net\u001b[0m]", "il-google-us.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcloudfront.production.us1.il-google.klarna.net\u001b[0m]", "il-google-us.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcloudfront.playground.us1.il-google.klarna.net\u001b[0m]", "il-ppp-payment-us.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapi-payment.production.us1.il-shopify.klarna.net\u001b[0m]", "il-ppp-payment-us.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapi-payment.playground.us1.il-shopify.klarna.net\u001b[0m]", "il-ppp-test-mode-us.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapi-test-mode.playground.us1.il-shopify.klarna.net\u001b[0m]", "il-ppp-us.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapi.production.us1.il-shopify.klarna.net\u001b[0m]", "il-ppp-us.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapi.playground.us1.il-shopify.klarna.net\u001b[0m]", "il-shopify-us.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapi.production.us1.il-shopify.klarna.net\u001b[0m]", "il-shopify-us.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mapi.playground.us1.il-shopify.klarna.net\u001b[0m]", "knowledge.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "mollie.issuer.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ppvkptgd3eeo.cloudfront.net\u001b[0m]", "paybright.issuer.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2smheffsrhui0.cloudfront.net\u001b[0m]", "playingforkeeps.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "portal.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcloudfront.production.eu1.merchant-portal.klarna.net\u001b[0m]", "portal.openbanking.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md22o36udif3no5.cloudfront.net\u001b[0m]", "portal.openbanking.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdxi39yv32lvfh.cloudfront.net\u001b[0m]", "portal.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcloudfront.playground.eu1.merchant-portal.klarna.net\u001b[0m]", "press.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "reports.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "search.portal.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3u1rpa8ijtr9a.cloudfront.net\u001b[0m]", "seniorshopping.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "shopify-onsitemessaging.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkosm.production.eu1.shopify-osmp.klarna.net\u001b[0m]", "skosm.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mkosm.production.eu1.shopify-osmp.klarna.net\u001b[0m]", "temp-eu.issuer.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1mzdb4tmymkcm.cloudfront.net\u001b[0m]", "temp-na.issuer.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1lybji5w1nvc.cloudfront.net\u001b[0m]", "thecheckout.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]", "uber-na.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3udg9x9qp10pg.cloudfront.net\u001b[0m]", "uber-na.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2tp7azm7zqsv.cloudfront.net\u001b[0m]", "uber.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md37803znzjnplv.cloudfront.net\u001b[0m]", "uber.playground.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2psiijprswb80.cloudfront.net\u001b[0m]", "us.search.portal.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md34fp9ki1ixvh1.cloudfront.net\u001b[0m]", "wikipink.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "www.nonprod.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1o2zx760sxd53.cloudfront.net\u001b[0m]", "www.thecheckout.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]", "zipmoney.issuer.klarna.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ppvkptgd3eeo.cloudfront.net\u001b[0m]" ], "takeover_v4": { "domain": "klarna.com", "version": 4, "generated_at": "2026-04-04T11:20:08.374Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 12, "kept_strict": 0, "llm_review_pool": 9, "dropped_noise": 12, "deep_skipped_below_pool": 3 }, "candidates": [], "llm_review_pool": [ { "host": "mollie.issuer.klarna.com", "cname": "d2ppvkptgd3eeo.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "CNAME trỏ tới CloudFront nhưng HTTP 404. Có thể là cấu hình chưa hoàn chỉnh hoặc môi trường staging, nhưng không rõ ràng để claim.", "llm_labeled_at": "2026-04-04T11:20:17.567Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "paybright.issuer.klarna.com", "cname": "d2smheffsrhui0.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.7, "llm_rationale_vi": "Tương tự, CloudFront trả về 404. Có thể là subdomain dự phòng hoặc chưa triển khai, nhưng thiếu bằng chứng rõ ràng về khả năng claim.", "llm_labeled_at": "2026-04-04T11:20:17.567Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "temp-eu.issuer.playground.klarna.com", "cname": "d1mzdb4tmymkcm.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.8, "llm_rationale_vi": "Subdomain trong môi trường playground, có khả năng cao là môi trường thử nghiệm có kiểm soát, không phải claim thực tế.", "llm_labeled_at": "2026-04-04T11:20:17.567Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "temp-na.issuer.playground.klarna.com", "cname": "d1lybji5w1nvc.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "false_positive", "llm_confidence": 0.8, "llm_rationale_vi": "Tương tự temp-eu, là môi trường playground thử nghiệm, không phải target cho claim.", "llm_labeled_at": "2026-04-04T11:20:17.567Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "uber-na.klarna.com", "cname": "d3udg9x9qp10pg.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.6, "llm_rationale_vi": "CNAME CloudFront với HTTP 404. Có thể là endpoint chưa cấu hình, nhưng không đủ mạnh để xác định claim likely.", "llm_labeled_at": "2026-04-04T11:20:17.567Z", "llm_model": "deepseek-chat", "llm_priority": "low" }, { "host": "uber-na.playground.klarna.com", "cname": "d2tp7azm7zqsv.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false }, { "host": "uber.klarna.com", "cname": "d37803znzjnplv.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false }, { "host": "uber.playground.klarna.com", "cname": "d2psiijprswb80.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false }, { "host": "zipmoney.issuer.klarna.com", "cname": "d2ppvkptgd3eeo.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false } ], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "mollie.issuer.klarna.com", "paybright.issuer.klarna.com", "temp-eu.issuer.playground.klarna.com", "temp-na.issuer.playground.klarna.com", "uber-na.klarna.com" ], "batch_sources": [ "pool", "pool", "pool", "pool", "pool" ], "promote_revived": true, "labeled_at": "2026-04-04T11:20:17.567Z", "usage": { "prompt_tokens": 852, "completion_tokens": 398, "total_tokens": 1250, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 724 } } } }