{
    "ok": true,
    "slug": "ky.gov-2026-04-04",
    "stats": {
        "subs": 3908,
        "all": 3908,
        "resolved": 2490,
        "live": 821,
        "takeover": 28,
        "juicy": 105,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/ky.gov-2026-04-04",
    "takeover_candidates": [
        "988.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mdzo9np0rjua9a.cloudfront.net\u001b[0m]",
        "data.nedss.devdmi.chfs.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32maccc1e94499524376ba015a1cb8b87c3-29f18f80e65a0dc4.elb.us-east-2.amazonaws.com\u001b[0m]",
        "dev.kentuckystatepolice.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1dgpt1wb0mg7f.cloudfront.net\u001b[0m]",
        "dev.wp.kentuckystatepolice.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mksppwa-dev-alb-1192718686.us-east-2.elb.amazonaws.com\u001b[0m]",
        "dev1-alb.elc.kuip.tax.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-elc-kuip-dev1-backend-263155173.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev1-api.elc.kuip.tax.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mvpce-0bd20ba5274790392-328hek6a.execute-api.us-east-1.vpce.amazonaws.com\u001b[0m]",
        "dev1-jbpm-alb.elc.kuip.tax.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-elc-kuip-dev1-jbpm-73028146.us-east-1.elb.amazonaws.com\u001b[0m]",
        "dev1-jbpm-nlb.elc.kuip.tax.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melc-kuip-dev1-jbpm-nlb-0edb7e2a3e0b40ba.elb.us-east-1.amazonaws.com\u001b[0m]",
        "dev1-nlb.elc.kuip.tax.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32melc-kuip-dev1-nlb-8d3bfd48c2f3d4bc.elb.us-east-1.amazonaws.com\u001b[0m]",
        "ebi43feduat.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-alb-cot-ebi-gov-uat43-01-903265801.us-gov-east-1.elb.amazonaws.com\u001b[0m]",
        "ebi43ft.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32minternal-alb-cot-ebi-gov-nonprod-01-936340189.us-gov-east-1.elb.amazonaws.com\u001b[0m]",
        "extranet.parks.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mcurrent-pike-up8f6oa8n7zlt6dy7serwkxf.herokudns.com\u001b[0m]",
        "kentuckyartisancenter.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2w51y5fvbm0un.cloudfront.net\u001b[0m]",
        "kentuckystatepolice.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md29jxpi8h4pegy.cloudfront.net\u001b[0m]",
        "landoffice.sos.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32msos-alb-01-350404112.us-east-2.elb.amazonaws.com\u001b[0m]",
        "landofficeimages.sos.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32msos-alb-01-350404112.us-east-2.elb.amazonaws.com\u001b[0m]",
        "passtheword.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2ollnotht1nbj.cloudfront.net\u001b[0m]",
        "prd.kehds.chfs.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mky-admin-portal-prod-east-alb-1395743750.us-gov-east-1.elb.amazonaws.com\u001b[0m]",
        "redcap.chfs.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mawseb-awseb-x953egrfqqr5-639855509.us-gov-east-1.elb.amazonaws.com\u001b[0m]",
        "sosbes.sos.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32msos-alb-01-350404112.us-east-2.elb.amazonaws.com\u001b[0m]",
        "staging.988.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md2pl3gfhbqxf84.cloudfront.net\u001b[0m]",
        "test.kentuckystatepolice.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md1bh2j1yx50sec.cloudfront.net\u001b[0m]",
        "test.wp.kentuckystatepolice.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mksp-qa-alb-695911109.us-east-2.elb.amazonaws.com\u001b[0m]",
        "trak.kytc.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mkytransportationreporting.web.app\u001b[0m]",
        "web.sos.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32msos-alb-01-350404112.us-east-2.elb.amazonaws.com\u001b[0m]",
        "wp.kentuckystatepolice.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mksp-prod-alb-1987669027.us-east-2.elb.amazonaws.com\u001b[0m]",
        "www.extranet.parks.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32mmammalian-celery-7131eecyum7einnbmcm4fpji.herokudns.com\u001b[0m]",
        "www.kentuckystatepolice.ky.gov [\u001b[35mCNAME\u001b[0m] [\u001b[32md29jxpi8h4pegy.cloudfront.net\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "ky.gov",
        "version": 4,
        "generated_at": "2026-04-04T14:38:40.948Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 1,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "transit.frankfort.ky.gov",
                "cname": "ghs.googlehosted.com",
                "status": 404,
                "title": "Error 404 (Not Found)!!1",
                "fingerprint": "firebase",
                "confidence": "high",
                "claim_score": 50,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.8,
                "llm_rationale_vi": "CNAME trỏ đến ghs.googlehosted.com (Google) nhưng HTTP 404 có thể là trang lỗi mặc định của ứng dụng đang hoạt động, không phải tài nguyên chưa được claim.",
                "llm_labeled_at": "2026-04-04T14:38:44.361Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "transit.frankfort.ky.gov"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-04T14:38:44.361Z",
            "usage": {
                "prompt_tokens": 390,
                "completion_tokens": 97,
                "total_tokens": 487,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 262
            }
        }
    }
}