{
    "ok": true,
    "slug": "ghost.org-2026-04-01",
    "stats": {
        "subs": 98,
        "all": 98,
        "resolved": 66,
        "live": 63,
        "takeover": 30,
        "juicy": 30,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/ghost.org-2026-04-01",
    "takeover_candidates": [
        "activitypub.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mactivitypub.ghost.io\u001b[0m]",
        "announcements.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mannouncements.ghost.io\u001b[0m]",
        "ask.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.tally.so\u001b[0m]",
        "auth.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.workosdns.com\u001b[0m]",
        "careers.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mproxy.homerun.co\u001b[0m]",
        "contact.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcontact.ghost.io\u001b[0m]",
        "docs.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "dub.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.dub.co\u001b[0m]",
        "e.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32me-ghost-org.netlify.app\u001b[0m]",
        "eleventy.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32meleventy-starter-ghost.netlify.com\u001b[0m]",
        "email.email.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.ghost.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.slack.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "email.testemail.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mmailgun.org\u001b[0m]",
        "error.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mtryghost.github.io\u001b[0m]",
        "feedback.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcustomdomains.featurebase.app\u001b[0m]",
        "forum.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mghost2.hosted-by-discourse.com\u001b[0m]",
        "gatsby.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mbrave-hamilton-f37fbb.netlify.com\u001b[0m]",
        "import.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mwalrus-app-yng9p.ondigitalocean.app\u001b[0m]",
        "inside.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32minside.ghost.io\u001b[0m]",
        "koenig.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mtryghost.github.io\u001b[0m]",
        "main.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mmain.ghost.is\u001b[0m]",
        "migrate.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mwalrus-app-yng9p.ondigitalocean.app\u001b[0m]",
        "offseason.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32moffseason.ghost.io\u001b[0m]",
        "probot.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mghost-probot.fly.dev\u001b[0m]",
        "referrals.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.firstpromoter.com\u001b[0m]",
        "shop.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mghost-foundation.myshopify.com\u001b[0m]",
        "slimer.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mfestive-blackwell-fff088.netlify.com\u001b[0m]",
        "traffic-analytics.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mtraffic-analytics-custom-domain.ghost.io\u001b[0m]",
        "www.ghost.org [\u001b[35mCNAME\u001b[0m] [\u001b[32mg4.netlify.app\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "ghost.org",
        "version": 4,
        "generated_at": "2026-04-01T05:43:07.327Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 1,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "ask.ghost.org",
                "cname": "cname.tally.so",
                "status": 404,
                "title": "Tally - Create Beautiful Forms for Free | Unlimited Forms & Submissions",
                "fingerprint": "tally",
                "confidence": "high",
                "claim_score": 67,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ tới Tally, nhưng HTTP 404 và tiêu đề hiển thị trang chủ Tally cho thấy ứng dụng đang hoạt động bình thường, không có dấu hiệu tài nguyên bị bỏ trống để claim.",
                "llm_labeled_at": "2026-04-01T05:43:11.623Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "ask.ghost.org"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-01T05:43:11.623Z",
            "usage": {
                "prompt_tokens": 392,
                "completion_tokens": 105,
                "total_tokens": 497,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 264
            }
        }
    }
}