{
    "ok": true,
    "slug": "go.ke-2026-04-01",
    "stats": {
        "subs": 9015,
        "all": 9015,
        "resolved": 6613,
        "live": 59,
        "takeover": 51,
        "juicy": 54,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 0,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/go.ke-2026-04-01",
    "takeover_candidates": [
        "accounts-uat.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma3b7b782741624d368d2b5402efa6312-159001422.af-south-1.elb.amazonaws.com\u001b[0m]",
        "accounts.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "accounts.payer.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "accounts.provider.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "admin.biashara.machakos.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "afyalink-test.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma863617b3fd5c4ea5bc99d0189493aa6-3bdde1efa3f5992c.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "afyalink.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma115c412312a8433fb0b1a386dcad342-2b6af8a410599354.elb.eu-west-2.amazonaws.com\u001b[0m]",
        "ambulance.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-shell-emt.web.app\u001b[0m]",
        "api-edi.payer.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "api-edi.provider.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "api-growthbook.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "api.biometrics.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "api.payer.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "api.provider.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "app.biashara.machakos.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "chatbot.ecitizen.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mda19ec5a232e97b6.vercel-dns-017.com\u001b[0m]",
        "citydbis.kisumu.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mabb84b19704b53d9.vercel-dns-017.com\u001b[0m]",
        "compliance-360.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma115c412312a8433fb0b1a386dcad342-2b6af8a410599354.elb.eu-west-2.amazonaws.com\u001b[0m]",
        "conference.cog.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32md1qaeqoywd39ec.cloudfront.net\u001b[0m]",
        "dashboard-v2.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma700e8df3e9064d7993a757fa874ecf7-3b4bc5574e5529d3.elb.eu-west-1.amazonaws.com\u001b[0m]",
        "developments.migori.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32m74f1b18d948afde6.vercel-dns-017.com\u001b[0m]",
        "edams.tharakanithi.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32md3h41v2zvb4079.cloudfront.net\u001b[0m]",
        "empower.ncikenya.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mprod-empower.web.app\u001b[0m]",
        "erp.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma115c412312a8433fb0b1a386dcad342-2b6af8a410599354.elb.eu-west-2.amazonaws.com\u001b[0m]",
        "eservices.mombasa.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-mombasac-msfronte-9bba0c0c2d-140537714.eu-central-1.elb.amazonaws.com\u001b[0m]",
        "fines.ntsa.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mlb-enforce-public-web-1-1669722604.af-south-1.elb.amazonaws.com\u001b[0m]",
        "growthbook.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "hie-docs.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "ilm-dev.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma3b7b782741624d368d2b5402efa6312-159001422.af-south-1.elb.amazonaws.com\u001b[0m]",
        "ilm-hie.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "ilm.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "iol.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "lims.meru.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32md3s0zrrvbf22ue.cloudfront.net\u001b[0m]",
        "lims.tharakanithi.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32md3h41v2zvb4079.cloudfront.net\u001b[0m]",
        "media.kenas.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32md2pseq9x2dob7w.cloudfront.net\u001b[0m]",
        "mediation.court.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mmammalian-stoat-vjzej8udlk0i7dl2vgyuf0kk.herokudns.com\u001b[0m]",
        "ncr.nema.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32md23lyczxbzi026.cloudfront.net\u001b[0m]",
        "nhts.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "nhts.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "nshr-analytics.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "nshr-dashboards.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "nshr.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "nshr.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma7b535134be7e489cbe89f05aaa39a62-825260277.af-south-1.elb.amazonaws.com\u001b[0m]",
        "portal.ncikenya.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mk8s-apisixga-alb-0d50ae3cbf-667648087.af-south-1.elb.amazonaws.com\u001b[0m]",
        "portal.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mslade360-sha-uat-65691.web.app\u001b[0m]",
        "post-office-adapter.sha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mgateway-alb-620194796.af-south-1.elb.amazonaws.com\u001b[0m]",
        "supplier.biashara.machakos.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "uat.dha.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32ma863617b3fd5c4ea5bc99d0189493aa6-3bdde1efa3f5992c.elb.eu-central-1.amazonaws.com\u001b[0m]",
        "www.conference.cog.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32md1qaeqoywd39ec.cloudfront.net\u001b[0m]",
        "www.hr.sasdef.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mwww.hr.sasdef.go.ke.s3-website.eu-west-2.amazonaws.com\u001b[0m]",
        "www.staging.hr.sasdef.go.ke [\u001b[35mCNAME\u001b[0m] [\u001b[32mwww.staging.hr.sasdef.go.ke.s3-website.eu-west-2.amazonaws.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "go.ke",
        "version": 4,
        "generated_at": "2026-04-01T10:17:03.335Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 2,
            "kept_strict": 0,
            "llm_review_pool": 0,
            "dropped_noise": 2,
            "deep_skipped_below_pool": 2
        },
        "candidates": [],
        "llm_review_pool": []
    }
}