{
    "ok": true,
    "slug": "ledger.com-2026-04-05",
    "stats": {
        "subs": 264,
        "all": 264,
        "resolved": 123,
        "live": 119,
        "takeover": 28,
        "juicy": 19,
        "nuclei": 0,
        "subjack": 0,
        "subjack_vuln": 0,
        "takeover_v4": 1,
        "takeover_hot_claim": 0,
        "takeover_claimed": 0,
        "takeover_telegram_ok": 0,
        "confirmed": false,
        "alert": true,
        "scan_log": true
    },
    "path": "\/www\/wwwroot\/tooldomain\/output\/ledger.com-2026-04-05",
    "takeover_candidates": [
        "app.devicesdk.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "bby-training.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "brand.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "careers.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md2wbophp7haufn.cloudfront.net\u001b[0m]",
        "cdn.endpoints.security.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mledgerhq.github.io\u001b[0m]",
        "dapp-browser.apps.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "developers-test.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "developers.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "dnswatcher.security.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mledgerhq.github.io\u001b[0m]",
        "docs.libcore.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mledgerhq.github.io\u001b[0m]",
        "donjon.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mledger-donjon.github.io\u001b[0m]",
        "earn.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "enterprise.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcdn.webflow.com\u001b[0m]",
        "ethereum-plugin-sdk.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mledgerhq.github.io\u001b[0m]",
        "exposure-check.security.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mexposure-check.edge-075244942eb66f5e3.vai-0b963a130a631f566.prod.verified-access.eu-central-1.amazonaws.com\u001b[0m]",
        "get-clear-signed.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "links.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32md20byndzdb0780.cloudfront.net\u001b[0m]",
        "lisi-shield.security.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mlisi-shield.edge-02e71b2f5466d37f6.vai-0a63ee50bdf2da96a.prod.verified-access.eu-central-1.amazonaws.com\u001b[0m]",
        "multiclaim.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mimaginative-lily-3befac.netlify.app\u001b[0m]",
        "multisig.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m2a0c938aee0a992a.vercel-dns-016.com\u001b[0m]",
        "passwords.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mledgerhq.github.io\u001b[0m]",
        "phish-cluster.security.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mphish-cluster.edge-0b7b4bbe8f69d4cae.vai-0b1872d85dafb2733.prod.verified-access.eu-central-1.amazonaws.com\u001b[0m]",
        "platform-app-coinify.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcfa23b508a23c432.vercel-dns-016.com\u001b[0m]",
        "shop.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "speculos.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mledgerhq.github.io\u001b[0m]",
        "store.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mshops.myshopify.com\u001b[0m]",
        "wc.apps.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32mcname.vercel-dns.com\u001b[0m]",
        "www.multisig.ledger.com [\u001b[35mCNAME\u001b[0m] [\u001b[32m2a0c938aee0a992a.vercel-dns-016.com\u001b[0m]"
    ],
    "takeover_v4": {
        "domain": "ledger.com",
        "version": 4,
        "generated_at": "2026-04-04T18:04:41.728Z",
        "ai_filter": {
            "engine": "rules_scorer_v1",
            "min_score": 48,
            "llm_pool_min": 38,
            "evaluated": 1,
            "kept_strict": 1,
            "llm_review_pool": 0,
            "dropped_noise": 0,
            "deep_skipped_below_pool": 0
        },
        "candidates": [
            {
                "host": "cdn.endpoints.security.ledger.com",
                "cname": "ledgerhq.github.io",
                "status": 404,
                "title": "Page not found · GitHub Pages",
                "fingerprint": "github_pages",
                "confidence": "high",
                "claim_score": 62,
                "claim_tier": "medium",
                "signals": [],
                "hard_noise": false,
                "real_candidate": true,
                "llm_verdict": "false_positive",
                "llm_confidence": 0.85,
                "llm_rationale_vi": "CNAME trỏ đến github.io nhưng HTTP 404, có thể là trang tùy chỉnh chưa triển khai hoặc bảo vệ. Không có bằng chứng rõ ràng về việc có thể claim tài khoản GitHub Pages.",
                "llm_labeled_at": "2026-04-04T18:04:45.088Z",
                "llm_model": "deepseek-chat",
                "llm_priority": "low"
            }
        ],
        "llm_review_pool": [],
        "llm_batch": {
            "provider": "deepseek",
            "base_url": "https:\/\/api.deepseek.com\/v1",
            "model": "deepseek-chat",
            "top_n_requested": 5,
            "batch_hosts": [
                "cdn.endpoints.security.ledger.com"
            ],
            "batch_sources": [
                "strict"
            ],
            "promote_revived": true,
            "labeled_at": "2026-04-04T18:04:45.088Z",
            "usage": {
                "prompt_tokens": 389,
                "completion_tokens": 108,
                "total_tokens": 497,
                "prompt_tokens_details": {
                    "cached_tokens": 128
                },
                "prompt_cache_hit_tokens": 128,
                "prompt_cache_miss_tokens": 261
            }
        }
    }
}