{
    "ok": true,
    "slug": "github.com-2026-04-01",
    "stats": {
        "subs": 4285,
        "all": 4285,
        "resolved": 318,
        "live": 272,
        "takeover": 53,
        "juicy": 58,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 4,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/github.com-2026-04-01",
    "takeover_candidates": [
        "accelerator.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "accessibility.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "archiveprogram.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "asset-generator.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "awesome-copilot.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "blog.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "bounty.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "boxen.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "brand.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "brandguide.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "bug-bash.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "cli.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcli.github.io\u001b[0m]",
        "codeql.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "desktop.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "developer.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "developers.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "diversity.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "ducky.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "event-sponsorship.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "forgoodfirstissue.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "galaxy.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "gameoff.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "ghicons.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "git-lfs.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "github.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "government.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "guides.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "hub.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "hubot.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "import2.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mporter-production-1232719825.us-east-1.elb.amazonaws.com\u001b[0m]",
        "importer2.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mporter-production-1232719825.us-east-1.elb.amazonaws.com\u001b[0m]",
        "innovationgraph.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "mac.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "maintainermonth.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "model-launchkit.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "mona-arcade.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "octicons.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "octodex.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "octoverse.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "pages.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "porter.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mporter-production-1232719825.us-east-1.elb.amazonaws.com\u001b[0m]",
        "porter2.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mporter-production-1232719825.us-east-1.elb.amazonaws.com\u001b[0m]",
        "securitylab.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "skills.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "skyline.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "socialimpact.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "spotlights-feed.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "training.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "transparencycenter.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "vpn-ca.iad.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "vscode-auth.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "vscode.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]",
        "windows.github.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mgithub.github.io\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "github.com",
        "version": 4,
        "generated_at": "2026-04-01T06:47:51.029Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 4,
            "kept_strict": 4,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "brandguide.github.com",
                "cname": "github.github.io",
                "status": 404,
                "title": "Page not found · GitHub Pages",
                "fingerprint": "github_pages",
                "confidence": "high",
                "claim_score": 62,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "CNAME trỏ đến github.github.io, một dịch vụ Pages chính thức của GitHub. HTTP 404 là hành vi mặc định, không phải tài nguyên chưa gắn tenant.",
                "llm_labeled_at": "2026-04-01T06:48:02.634Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "github.github.com",
                "cname": "github.github.io",
                "status": 404,
                "title": "Site not found · GitHub Pages",
                "fingerprint": "github_pages",
                "confidence": "high",
                "claim_score": 62,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "Tương tự, CNAME trỏ đến dịch vụ Pages chính thức của GitHub. Lỗi 404 không chỉ ra khả năng chiếm quyền điều khiển.",
                "llm_labeled_at": "2026-04-01T06:48:02.635Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "mona-arcade.github.com",
                "cname": "github.github.io",
                "status": 404,
                "title": "Site not found · GitHub Pages",
                "fingerprint": "github_pages",
                "confidence": "high",
                "claim_score": 62,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.9,
                "llm_rationale_vi": "Cấu hình CNAME và phản hồi 404 nhất quán với các subdomain khác, cho thấy đây là hành vi dự kiến của GitHub Pages, không phải lỗ hổng.",
                "llm_labeled_at": "2026-04-01T06:48:02.635Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            },
            {
                "host": "vpn-ca.iad.github.com",
                "cname": "github.github.io",
                "status": 404,
                "title": "Page not found · GitHub Pages",
                "fingerprint": "github_pages",
                "confidence": "high",
                "claim_score": 62,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "Mặc dù tên host gợi ý cơ sở hạ tầng nội bộ, CNAME trỏ đến dịch vụ Pages và phản hồi 404 cho thấy không có tài nguyên nào có thể claim được.",
                "llm_labeled_at": "2026-04-01T06:48:02.635Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "brandguide.github.com",
                "github.github.com",
                "mona-arcade.github.com",
                "vpn-ca.iad.github.com"
            ],
            "batch_sources": [
                "strict",
                "strict",
                "strict",
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-01T06:48:02.635Z",
            "usage": {
                "prompt_tokens": 705,
                "completion_tokens": 346,
                "total_tokens": 1051,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 577
            }
        }
    }
}