{ "ok": true, "slug": "kpmg.com-2026-04-04", "stats": { "subs": 9023, "all": 9023, "resolved": 2427, "live": 1139, "takeover": 37, "juicy": 75, "nuclei": 0, "subjack": 0, "subjack_vuln": 0, "takeover_v4": 0, "takeover_hot_claim": 0, "takeover_claimed": 0, "takeover_telegram_ok": 0, "confirmed": false, "alert": true, "scan_log": true }, "path": "\/www\/wwwroot\/tooldomain\/output\/kpmg.com-2026-04-04", "takeover_candidates": [ "author.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpr-author-elbext-2126483639.eu-west-1.elb.amazonaws.com\u001b[0m]", "dev-author.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-author-elbext-1239932755.us-east-1.elb.amazonaws.com\u001b[0m]", "dev-developers.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-elbext-1282337444.us-east-1.elb.amazonaws.com\u001b[0m]", "devorigin.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdev-elbext-1282337444.us-east-1.elb.amazonaws.com\u001b[0m]", "drorigin.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdr-elbext-985110878.us-east-1.elb.amazonaws.com\u001b[0m]", "events-meetings.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2565zm6wq97zs.cloudfront.net\u001b[0m]", "gspsystem.in.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgsp-kpmg-prod-nginx-lb-gstn-1198901642.ap-south-1.elb.amazonaws.com\u001b[0m]", "hqa-assets.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhqa-elbext-2079377168.us-east-1.elb.amazonaws.com\u001b[0m]", "hqa-developers.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhqa-elbext-2079377168.us-east-1.elb.amazonaws.com\u001b[0m]", "hqa.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mhqa-elbext-2079377168.us-east-1.elb.amazonaws.com\u001b[0m]", "ignition.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "ignitioncontextforchange.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy-ssl.webflow.com\u001b[0m]", "ignitioncontextforchange.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]", "lakehouseapi.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-lc5ultsdqf.execute-api.us-east-1.amazonaws.com\u001b[0m]", "lakehouseapidev.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-jmglx5x73d.execute-api.us-east-1.amazonaws.com\u001b[0m]", "lakehouseapiqa.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-2o2m6tks6e.execute-api.us-east-1.amazonaws.com\u001b[0m]", "lakehouseapistg.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md-g632urqvl9.execute-api.us-east-1.amazonaws.com\u001b[0m]", "lakehouseportal.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdht6i9n2w0ge2.cloudfront.net\u001b[0m]", "lakehouseportaldev.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2m1sqebxbio7a.cloudfront.net\u001b[0m]", "lakehouseportalqa.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md21iurdbs6yq6o.cloudfront.net\u001b[0m]", "lakehouseportaluat.us.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdqn1pdyva92wq.cloudfront.net\u001b[0m]", "login1.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1uhhe1fnz6n1i.cloudfront.net\u001b[0m]", "origin.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mpr-elbext-98674429.eu-west-1.elb.amazonaws.com\u001b[0m]", "qa-author.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mqa-author-elbext-1672285400.us-east-1.elb.amazonaws.com\u001b[0m]", "qa-developers.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mqa-elbext-1124752804.us-east-1.elb.amazonaws.com\u001b[0m]", "qaorigin.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mqa-elbext-1124752804.us-east-1.elb.amazonaws.com\u001b[0m]", "semaphore.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mprd-studio-698777813.eu-west-1.elb.amazonaws.com\u001b[0m]", "stg-author.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-author-elbext-475889656.us-east-1.elb.amazonaws.com\u001b[0m]", "stg-developers.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-elbext-1500910468.us-east-1.elb.amazonaws.com\u001b[0m]", "stg-publish.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-publish-elbext-1325882064.us-east-1.elb.amazonaws.com\u001b[0m]", "stg-semaphore.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-smartlogic-2031689480.us-east-1.elb.amazonaws.com\u001b[0m]", "stgorigin.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mstg-elbext-1500910468.us-east-1.elb.amazonaws.com\u001b[0m]", "tdsexpense.in.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32msrl-mum-nlb-prod-a55fd912300370d9.elb.ap-south-1.amazonaws.com\u001b[0m]", "www.kics-uat.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mdlx7fnwonvlow.cloudfront.net\u001b[0m]", "www.kics.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2in7uko9jr1t2.cloudfront.net\u001b[0m]", "www.kicsrpt-uat.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md1jqv6i1nmegsr.cloudfront.net\u001b[0m]", "www.kicsrpt.kpmg.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md3fjsph0k6au1q.cloudfront.net\u001b[0m]" ], "takeover_v4": { "domain": "kpmg.com", "version": 4, "generated_at": "2026-04-04T12:29:13.339Z", "ai_filter": { "engine": "rules_scorer_v1", "min_score": 48, "llm_pool_min": 38, "evaluated": 2, "kept_strict": 0, "llm_review_pool": 1, "dropped_noise": 2, "deep_skipped_below_pool": 1 }, "candidates": [], "llm_review_pool": [ { "host": "login1.kpmg.com", "cname": "d1uhhe1fnz6n1i.cloudfront.net", "status": 404, "title": null, "fingerprint": "aws_s3", "confidence": "high", "claim_score": 44, "claim_tier": "low", "signals": [], "hard_noise": false, "real_candidate": false, "llm_eligible": true, "strict_pass": false, "llm_verdict": "unlikely", "llm_confidence": 0.9, "llm_rationale_vi": "CNAME trỏ tới CloudFront, nhưng HTTP 404 không đủ để kết luận có thể chiếm quyền. Dịch vụ AWS S3\/CloudFront thường được cấu hình chặt, cần thêm bằng chứng như lỗi 'NoSuchBucket' hoặc 'InvalidDistribution'.", "llm_labeled_at": "2026-04-04T12:29:17.291Z", "llm_model": "deepseek-chat", "llm_priority": "low" } ], "llm_batch": { "provider": "deepseek", "base_url": "https:\/\/api.deepseek.com\/v1", "model": "deepseek-chat", "top_n_requested": 5, "batch_hosts": [ "login1.kpmg.com" ], "batch_sources": [ "pool" ], "promote_revived": true, "labeled_at": "2026-04-04T12:29:17.291Z", "usage": { "prompt_tokens": 390, "completion_tokens": 119, "total_tokens": 509, "prompt_tokens_details": { "cached_tokens": 128 }, "prompt_cache_hit_tokens": 128, "prompt_cache_miss_tokens": 262 } } } }