{
  "generated": "2026-07-05T21:19:46Z",
  "tlp": "clear",
  "source": "https://ciphercortex.com",
  "series": "Hooked Scams",
  "feed_url": "https://ciphercortex.com/research/feeds/hooked-scams/indicators.json",
  "total": 165,
  "cases": [
    {
      "slug": "coin-front-io",
      "title": "Case 001: coin-front.io",
      "date": "2026-04-29",
      "case_url": "https://ciphercortex.com/research/hooked-scams/cases/coin-front-io",
      "indicator_count": 144,
      "indicators": [
        {
          "type": "domain",
          "value": "bizzyearners.net",
          "context": "front, probrokerapis2",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "capitaltechpip.net",
          "context": "front, probrokerapis3",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "coin-front.io",
          "context": "front, probrokerapis3, DDoS-Guard fronted, BACloud Lithuania",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": "DDoS-Guard fronted, BACloud Lithuania"
        },
        {
          "type": "domain",
          "value": "crestmarkets.org",
          "context": "front, probrokerapis2, single BTC wallet took $426K in 30 days",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": "single BTC wallet took $426K in 30 days"
        },
        {
          "type": "domain",
          "value": "cryptopalmsmarket.com",
          "context": "front, probrokerapis3",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "deluxepluswealth.com",
          "context": "front, probrokerapis3",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "fidexexpert.com",
          "context": "front, probrokerapis3",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "fortunelivex.com",
          "context": "front, probrokerapis2",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "parsonexmarket.com",
          "context": "front, probrokerapis3, /api/graph open without auth",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": "/api/graph open without auth"
        },
        {
          "type": "domain",
          "value": "quorixtrading.com",
          "context": "front, probrokerapis3",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "rocketstake.net",
          "context": "front, probrokerapis3",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "signalsurge.net",
          "context": "front, probrokerapis2",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "solvexcapitallimited.io",
          "context": "front, probrokerapis2",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "synergytrades.live",
          "context": "front, probrokerapis3",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "tillidfx.net",
          "context": "front, self-hosted, own backend, same kit",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": "own backend, same kit"
        },
        {
          "type": "domain",
          "value": "tradesphere.pro",
          "context": "front, self-hosted, own backend, same kit",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": "own backend, same kit"
        },
        {
          "type": "domain",
          "value": "veltrixcapitalpro.com",
          "context": "front, probrokerapis3",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "bb.prowebsitesamples.com",
          "context": "vendor, default admin login info@prowebsitesamples.com / samplepassword",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "default admin login info@prowebsitesamples.com / samplepassword"
        },
        {
          "type": "domain",
          "value": "pms.prowebsitesamples.com",
          "context": "vendor",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "prowebsitesamples.com",
          "context": "vendor, sells templates BB / PMS / WWW",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "sells templates BB / PMS / WWW"
        },
        {
          "type": "domain",
          "value": "federalsecurenet.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "cryptometaedge.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "toptracepointco.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "smartearncapital.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "vtmarketpro.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "fxcapitalnexus.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "fleetpathlogistics.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "topchoicedelivery.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "corepathdelivery.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "logistavaexpress.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "urbandeliverygroup.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "citylinedelivery.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "crestgateinvestment.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "hashtradehub.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "pipsparadise.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "prop-pulsecapitals.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "prop-pulsecapital.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "humilisinvest.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "profitpulsepeak.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "parsonexbase.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "parsonexclimax.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "parsonexmarkets.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "arbitragebrokerage.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "corebulltrade.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "finestmarkets.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "eversteadoptions.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "pipsgainhub.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "crestdynamo.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "bullishpeak.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "aitradeteam.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "pipstradelab.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "pipsoptionstrade.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "livingtrades.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "fortunelivemarkets.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "oakvestpro.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "aceofbulls.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "bullishace.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "bullvestpro.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "strativuscapital.com",
          "context": "catalog, banking-categorized",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "banking-categorized"
        },
        {
          "type": "domain",
          "value": "zyoracapital.com",
          "context": "catalog, banking-categorized",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "banking-categorized"
        },
        {
          "type": "domain",
          "value": "metawealthwatch.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "betamarketwatch.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "bullishclimax.com",
          "context": "catalog",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "hannahlewismarkets.com",
          "context": "catalog, appears in vendor catalog dump 2026-04-30; deployed but kit-confirmation not verified by this researcher",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "appears in vendor catalog dump 2026-04-30; deployed but kit-confirmation not verified by this researcher"
        },
        {
          "type": "domain",
          "value": "mail.coin-front.io",
          "context": "operator outbound mail",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "operator outbound mail"
        },
        {
          "type": "domain",
          "value": "mail.parsonexmarket.com",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "mail.veltrixcapitalpro.com",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "domain",
          "value": "probrokerapis2.com",
          "context": "5 fronts share this backend",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "5 fronts share this backend"
        },
        {
          "type": "domain",
          "value": "probrokerapis3.com",
          "context": "9 fronts share this backend",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "9 fronts share this backend"
        },
        {
          "type": "domain",
          "value": "probrokerapis6.com",
          "context": "configured but gated",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "configured but gated"
        },
        {
          "type": "domain",
          "value": "probrokersockets-com-god8.onrender.com",
          "context": "kit-shared signal feed",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "kit-shared signal feed"
        },
        {
          "type": "ip",
          "value": "98.97.77.181",
          "context": "Cory Bates persona, captured via Grabify canary 2026-04-30 21:37:49 UTC, AS14593 SpaceX Starlink, Lagos Nigeria, hostname customer.lgosnga1.isp.starlink.com, geo 6.4541, 3.3947",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "Cory Bates persona, captured via Grabify canary 2026-04-30 21:37:49 UTC, AS14593 SpaceX Starlink, Lagos Nigeria, hostname customer.lgosnga1.isp.starlink.com, geo 6.4541, 3.3947"
        },
        {
          "type": "email",
          "value": "noreply@coin-front.io",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "email",
          "value": "noreply@parsonexmarket.com",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "phone",
          "value": "+12133976550",
          "context": "US +1 (213) 397-6550, Cory Bates persona, RCS-capable; LA area code but operator IP geolocates to Lagos NG, so this is a US VoIP relay (TextNow/Bandwidth-class)",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "US +1 (213) 397-6550, Cory Bates persona, RCS-capable; LA area code but operator IP geolocates to Lagos NG, so this is a US VoIP relay (TextNow/Bandwidth-class)"
        },
        {
          "type": "username",
          "value": "@cory_bates1895",
          "context": "aged 2011, 405 followers / 3,221 following, jiu-jitsu + bitcoin bio, dropped coin-front.io",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "aged 2011, 405 followers / 3,221 following, jiu-jitsu + bitcoin bio, dropped coin-front.io"
        },
        {
          "type": "wallet",
          "value": "bc1q6tayfjwdt44tmsruryc2ferry62fu5l8yayrpc",
          "context": "$128K single deposit, swept to 1HV2BNfCeaeQ9c1RsUnnZLLVE6uyQSZWXb",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "swept",
          "notes": "$128K single deposit, swept to 1HV2BNfCeaeQ9c1RsUnnZLLVE6uyQSZWXb"
        },
        {
          "type": "wallet",
          "value": "bc1qzgsxlhq65l3m8lc5yzkrmevtp0qh90vqvkrfju",
          "context": "single 0.297 BTC shot 2025-07-04",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "dormant",
          "notes": "single 0.297 BTC shot 2025-07-04"
        },
        {
          "type": "wallet",
          "value": "TUNqd7gyhx6noMetAZLu4ZtrhqBke7ndoB",
          "context": "USDT-TRC20 receiver",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "active",
          "notes": "USDT-TRC20 receiver"
        },
        {
          "type": "wallet",
          "value": "bitcoincash:qzqdykddz7kyd7eql4s2t3df0f2hsllhsyuqlwm7sw",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "active",
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0xE9e02797772381527Fe35776a3871ec4FEE29d43",
          "context": "ETH-native receiver",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "active",
          "notes": "ETH-native receiver"
        },
        {
          "type": "wallet",
          "value": "TYJPhHqtnFv94gWqdWqwoFC9NxH9SqBHNV",
          "context": "USDT-TRC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "active",
          "notes": "USDT-TRC20"
        },
        {
          "type": "wallet",
          "value": "TCJAJ6wVhABtxZfJmFFaCGSzxHA8CpfAJh",
          "context": "TRX rotation wallet",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "swept",
          "notes": "TRX rotation wallet"
        },
        {
          "type": "wallet",
          "value": "1P9wocCxnF1QGX71Xa5eWohuba4dr58jYD",
          "context": "271-day span, $86 median",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "active",
          "notes": "271-day span, $86 median"
        },
        {
          "type": "wallet",
          "value": "0xFF8513cDdaE9BD91ed0c11F3c49866A1b38B2C3A",
          "context": "USDT-ERC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "USDT-ERC20"
        },
        {
          "type": "wallet",
          "value": "TXvBrSpVby3gKqoMkcr8GJqjXTECm4ZE6M",
          "context": "USDT-TRC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "USDT-TRC20"
        },
        {
          "type": "wallet",
          "value": "bc1qn228waxytzugvm322unp0dyz97t9kzkkx5eg9l",
          "context": "471-day span, looks like demo flows",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "active",
          "notes": "471-day span, looks like demo flows"
        },
        {
          "type": "wallet",
          "value": "0x5dC045569a5114F59D997613756a4d551c58FBA1",
          "context": "ETH-native",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH-native"
        },
        {
          "type": "wallet",
          "value": "bc1qxg7dap9wmhh8twzgthwkd3chnx7x46mfdga2mz",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "dormant",
          "notes": null
        },
        {
          "type": "wallet",
          "value": "bc1ql8hlfymt889wnxgxvf75rexehktc4fakv34kfg",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": "active",
          "notes": null
        },
        {
          "type": "wallet",
          "value": "bc1q775qtkejh5fnxadx2mey8k3g25zsvwahl6dqgl",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "TXaPDV2T37XJbmpkc3PwbFijhZCSPPXyAr",
          "context": "USDT-TRC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "USDT-TRC20"
        },
        {
          "type": "wallet",
          "value": "bc1qcxfmz7zs8suzenkw9zng20l4kvknr9h4k7ftea",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "17jmaT1PpjeJfdGg5Q2746MeVnvWQLwWVm",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "1FcFEH3Kx85JL6wTDVDr4RDBBKYbvguyNT",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "bc1q9nyvdjr2jyxxhx0ea9tf69y6j20ea4l83fd269",
          "context": "primary BTC, swept",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "primary BTC, swept"
        },
        {
          "type": "wallet",
          "value": "TDpqPGesMxGL9oxcWhPChdawPw5rASyWSd",
          "context": "USDT-TRC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "USDT-TRC20"
        },
        {
          "type": "wallet",
          "value": "0xF172c996598fdd558BB21D5312B2da99c6844120",
          "context": "rotation, ETH-native",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "rotation, ETH-native"
        },
        {
          "type": "wallet",
          "value": "0x0a5659BAf2cF27DC19ea87ddAAbEb651ad3E117e",
          "context": "advertised hot wallet, barely funded",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "advertised hot wallet, barely funded"
        },
        {
          "type": "wallet",
          "value": "TYcGojypFj6BwtqYGV7PWmZX8KiH4xakvA",
          "context": "advertised primary, swept",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "advertised primary, swept"
        },
        {
          "type": "wallet",
          "value": "Azy4rkMjEtipK2mDFiBCdYq8cXM4dvw8bLPZ1qm6vYAS",
          "context": "snapshot zero",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "snapshot zero"
        },
        {
          "type": "wallet",
          "value": "r4uHqWeEFHKKqiqQaGNYKr37UiijUWA4ez",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "DMdqGNV4qKFsgshRdX75tPCFsWp9Y5hhXJ",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "bc1qaacjkf7qtufw0922qpkzdupc7fz7pnzj9lmqxe",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0xbbe67CD6D4A613435842Da6D3b0E27E6A0c23856",
          "context": "ETH ERC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH ERC20"
        },
        {
          "type": "wallet",
          "value": "rGbvKPcTd52XJYpbBxQ2MWXzpM6RbyY8TT",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0x1A82AFB40690ed0bb3bFC122D79811E4FA23Fc3F",
          "context": "ETH/USDT ERC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH/USDT ERC20"
        },
        {
          "type": "wallet",
          "value": "TSWmZQXM9S4ZupeMSBJH6yAX5N3bBMLR7z",
          "context": "USDT-TRC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "USDT-TRC20"
        },
        {
          "type": "wallet",
          "value": "rntmJoNjyuxTurLMtuLsevofV6vZFTtXv3",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "AK2JqnCTfebKiUsDBeDrLEUFA6TnFYsxh5T5HVQsb6wP",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "r3YhwVdoYMS8aheu7MXmaSkkq2nfYLXdtY",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "8XJFAons9pKaTBiiZZv7HHcGutMDibDYjpDQzK788DxQ",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0x7218Bf3498511f26085eddBd16609eA524dbCfE6",
          "context": "ETH-native",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH-native"
        },
        {
          "type": "wallet",
          "value": "0xff41c057b016b6760c4c95ed5ddb997e4bb885b3",
          "context": "USDC ERC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "USDC ERC20"
        },
        {
          "type": "wallet",
          "value": "16awnCpQgnyWYswXPyNftAVi85aQkq2hfg",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0x37Fa6BaB7e02b9ea42E9719bDe5954A65E3d0305",
          "context": "ETH ERC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH ERC20"
        },
        {
          "type": "wallet",
          "value": "0xC25B38EAF27455663D484b6B9E38CA6168795673",
          "context": "ETH/USDT ERC20",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH/USDT ERC20"
        },
        {
          "type": "wallet",
          "value": "FHiUph6qKwrdubsMHGMVZym2Qt6SCYfLAi2JTfJGDQ9K",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "bc1qs33nn3kfze2zcm242xqyh7a64h3mr5hxahd7x8",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0x75140DE3e7097ffB4239419371e4AfF01D319EC2",
          "context": "ETH/BNB",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH/BNB"
        },
        {
          "type": "wallet",
          "value": "r5L5FDiXxdmUoUimsvDaSTmrnUH9CbKki",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "2Zf9ZmCriZX9ou1MG8JEEKoQcsP1uvpKrr1CCzqwtWaT",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0xFf3c512b6D17746040dff4f6146B74E67E7089C0",
          "context": "ETH/USDT cross-chain",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH/USDT cross-chain"
        },
        {
          "type": "wallet",
          "value": "rnqeuL1CSmCagZX2jSsXazbazQjyQ1z8uC",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "qrv5mcnhr09ga3h69p349mqvr9h8s80gwqu302jwes",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "addr1q8dvghts7kcmc5jqzra50z5urwhge7486n6rjdtyelhjj4jsxhz05ds5sfe0fkzw4r7g2jaw9gp6rw9n70e2tqzsapms4amsgj",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "DEv8mnLYcRFnpAcPLaG8Dn4TJKK7dC2SYx",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0x6Bc0Cd974e0CE5dcE198AD016d54a99e19549ab1",
          "context": "ETH/BNB",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "ETH/BNB"
        },
        {
          "type": "wallet",
          "value": "0xaAC43EB4E17ee938f0Af3374f0285811485925b2",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "LfHCzkJx6sEg83dNnUBtbaWfBPfHu6wzgH",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "1KWpKpBqcL7GXXDYfBtpwyXxjQwYJk2KJe",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "0x21c865300ddc573fed1f922670429d9b2df95d2d",
          "context": "USDC/USDT BSC",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "USDC/USDT BSC"
        },
        {
          "type": "wallet",
          "value": "rJn2zAPdFA193sixJwuFixRkYDUtx3apQh",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "G3b3SW9DStUwCB1Pd4XnFzGYLwHkbYcWkkN2fxaqha3v",
          "context": "USDT-Solana",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "USDT-Solana"
        },
        {
          "type": "wallet",
          "value": "LgEJ6bQFaMB7wZAbE8TL4RLMiwEVtsJYyv",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "wallet",
          "value": "1HV2BNfCeaeQ9c1RsUnnZLLVE6uyQSZWXb",
          "context": "next-hop sweep target from crestmarkets BTC wallet",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "next-hop sweep target from crestmarkets BTC wallet"
        },
        {
          "type": "hash",
          "value": "6beb02b513f811da0ad2a837f203feffbc6900a552ad23f024e019da3c2526b3",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "hash",
          "value": "8abbbfe54ff466d05dff7d5ec2ae215c",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "hash",
          "value": "-1032583768",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "hash",
          "value": "3f76ad861342405b5f0a5059de35bfb2fc880e9748975929083f5cfe2d5a385a",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "hash",
          "value": "427b0c476fa99fa037d026c4549fb124",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "hash",
          "value": "d952ca796a5c973e632bc7cdf841343a3d845c54061b14639097f0eb836e475d",
          "context": "",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": null
        },
        {
          "type": "key",
          "value": "4aeb1fdb9a261fa98524e37134fd905a4ef8e7ce",
          "context": "live-chat widget account ID",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "live-chat widget account ID"
        },
        {
          "type": "key",
          "value": "BKt9tSMCKnDEjraPoYp-MpP_th8ivocl9AwuM8-xB550Zl9DPi9au9uFwLQvOSGU8yBkRADsCSboGwBEj-iZkfU",
          "context": "browser-push subscriber key, kit-shared",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "coin-front-io",
          "case_title": "coin-front.io",
          "confidence": "observed",
          "status": null,
          "notes": "browser-push subscriber key, kit-shared"
        }
      ]
    },
    {
      "slug": "snap-bargain-hub",
      "title": "Case 002: snapbargainhub.com",
      "date": "2026-07-01",
      "case_url": "https://ciphercortex.com/research/hooked-scams/cases/snap-bargain-hub",
      "indicator_count": 21,
      "indicators": [
        {
          "type": "domain",
          "value": "snapbargainhub.com",
          "context": "primary checkout",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "xmmyb2.us",
          "context": "disposable email sender",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "dead",
          "notes": null
        },
        {
          "type": "domain",
          "value": "usualtimateur.in.net",
          "context": "redirector farm",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "qsdq.usualtimateur.in.net",
          "context": "GCS redirect hop",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "commerstreamed.com",
          "context": "JS cloaker",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "workinsomniac.com",
          "context": "JS cloaker, Kobalt path",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "vaultsphere.su",
          "context": "affiliate tracker aff_id=1575",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "url",
          "value": "storage.googleapis.com/sd6514s6589dsd/22.html",
          "context": "email first-hop GCS lure",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "email",
          "value": "support@snapbargainhub.com",
          "context": "merchant support on terms",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "email",
          "value": "qorjwdaibmxzii.84229514974732@7tlf5p.li0oa0.xmmyb2.us",
          "context": "observed lure From",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "dead",
          "notes": null
        },
        {
          "type": "phone",
          "value": "+18777693140",
          "context": "877-769-3140 cancellation line",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "ip",
          "value": "57.128.147.19",
          "context": "usualtimateur.in.net OVH",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "ip",
          "value": "83.143.119.26",
          "context": "commerstreamed.com",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "ip",
          "value": "103.126.162.25",
          "context": "workinsomniac.com",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "string",
          "value": "Discount Consumer Saving",
          "context": "hidden membership brand in terms",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "string",
          "value": "YOU ARE OUR WINNER Kobalt Tool Set from Lowe's",
          "context": "email lure headline",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "string",
          "value": "aff_id=1575",
          "context": "vaultsphere affiliate publisher",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "hash",
          "value": "6d1b58b44056b5dd733797f6f730cd7283273825784bc381ca6816569ab3d492",
          "context": "form_handler.js",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "hash",
          "value": "e8cf1117d737b83f697062332e4a5b383e69f77d6a1d3d2c44fef347ee58d78f",
          "context": "app.js",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "verified",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "offer.getallurahairremover.com",
          "context": "checktrafficnew platform sibling",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "observed",
          "status": "live",
          "notes": null
        },
        {
          "type": "domain",
          "value": "www.naturalblissgummies.com",
          "context": "checktrafficnew platform sibling",
          "tlp": "clear",
          "source_type": "hooked_scams",
          "case_slug": "snap-bargain-hub",
          "case_title": "snapbargainhub.com",
          "confidence": "observed",
          "status": "live",
          "notes": null
        }
      ]
    }
  ],
  "indicators": [
    {
      "type": "domain",
      "value": "bizzyearners.net",
      "context": "front, probrokerapis2",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "capitaltechpip.net",
      "context": "front, probrokerapis3",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "coin-front.io",
      "context": "front, probrokerapis3, DDoS-Guard fronted, BACloud Lithuania",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": "DDoS-Guard fronted, BACloud Lithuania"
    },
    {
      "type": "domain",
      "value": "crestmarkets.org",
      "context": "front, probrokerapis2, single BTC wallet took $426K in 30 days",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": "single BTC wallet took $426K in 30 days"
    },
    {
      "type": "domain",
      "value": "cryptopalmsmarket.com",
      "context": "front, probrokerapis3",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "deluxepluswealth.com",
      "context": "front, probrokerapis3",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "fidexexpert.com",
      "context": "front, probrokerapis3",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "fortunelivex.com",
      "context": "front, probrokerapis2",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "parsonexmarket.com",
      "context": "front, probrokerapis3, /api/graph open without auth",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": "/api/graph open without auth"
    },
    {
      "type": "domain",
      "value": "quorixtrading.com",
      "context": "front, probrokerapis3",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "rocketstake.net",
      "context": "front, probrokerapis3",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "signalsurge.net",
      "context": "front, probrokerapis2",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "solvexcapitallimited.io",
      "context": "front, probrokerapis2",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "synergytrades.live",
      "context": "front, probrokerapis3",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "tillidfx.net",
      "context": "front, self-hosted, own backend, same kit",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": "own backend, same kit"
    },
    {
      "type": "domain",
      "value": "tradesphere.pro",
      "context": "front, self-hosted, own backend, same kit",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": "own backend, same kit"
    },
    {
      "type": "domain",
      "value": "veltrixcapitalpro.com",
      "context": "front, probrokerapis3",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "bb.prowebsitesamples.com",
      "context": "vendor, default admin login info@prowebsitesamples.com / samplepassword",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "default admin login info@prowebsitesamples.com / samplepassword"
    },
    {
      "type": "domain",
      "value": "pms.prowebsitesamples.com",
      "context": "vendor",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "prowebsitesamples.com",
      "context": "vendor, sells templates BB / PMS / WWW",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "sells templates BB / PMS / WWW"
    },
    {
      "type": "domain",
      "value": "federalsecurenet.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "cryptometaedge.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "toptracepointco.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "smartearncapital.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "vtmarketpro.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "fxcapitalnexus.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "fleetpathlogistics.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "topchoicedelivery.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "corepathdelivery.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "logistavaexpress.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "urbandeliverygroup.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "citylinedelivery.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "crestgateinvestment.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "hashtradehub.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "pipsparadise.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "prop-pulsecapitals.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "prop-pulsecapital.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "humilisinvest.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "profitpulsepeak.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "parsonexbase.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "parsonexclimax.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "parsonexmarkets.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "arbitragebrokerage.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "corebulltrade.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "finestmarkets.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "eversteadoptions.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "pipsgainhub.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "crestdynamo.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "bullishpeak.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "aitradeteam.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "pipstradelab.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "pipsoptionstrade.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "livingtrades.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "fortunelivemarkets.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "oakvestpro.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "aceofbulls.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "bullishace.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "bullvestpro.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "strativuscapital.com",
      "context": "catalog, banking-categorized",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "banking-categorized"
    },
    {
      "type": "domain",
      "value": "zyoracapital.com",
      "context": "catalog, banking-categorized",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "banking-categorized"
    },
    {
      "type": "domain",
      "value": "metawealthwatch.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "betamarketwatch.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "bullishclimax.com",
      "context": "catalog",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "hannahlewismarkets.com",
      "context": "catalog, appears in vendor catalog dump 2026-04-30; deployed but kit-confirmation not verified by this researcher",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "appears in vendor catalog dump 2026-04-30; deployed but kit-confirmation not verified by this researcher"
    },
    {
      "type": "domain",
      "value": "mail.coin-front.io",
      "context": "operator outbound mail",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "operator outbound mail"
    },
    {
      "type": "domain",
      "value": "mail.parsonexmarket.com",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "mail.veltrixcapitalpro.com",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "domain",
      "value": "probrokerapis2.com",
      "context": "5 fronts share this backend",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "5 fronts share this backend"
    },
    {
      "type": "domain",
      "value": "probrokerapis3.com",
      "context": "9 fronts share this backend",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "9 fronts share this backend"
    },
    {
      "type": "domain",
      "value": "probrokerapis6.com",
      "context": "configured but gated",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "configured but gated"
    },
    {
      "type": "domain",
      "value": "probrokersockets-com-god8.onrender.com",
      "context": "kit-shared signal feed",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "kit-shared signal feed"
    },
    {
      "type": "ip",
      "value": "98.97.77.181",
      "context": "Cory Bates persona, captured via Grabify canary 2026-04-30 21:37:49 UTC, AS14593 SpaceX Starlink, Lagos Nigeria, hostname customer.lgosnga1.isp.starlink.com, geo 6.4541, 3.3947",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "Cory Bates persona, captured via Grabify canary 2026-04-30 21:37:49 UTC, AS14593 SpaceX Starlink, Lagos Nigeria, hostname customer.lgosnga1.isp.starlink.com, geo 6.4541, 3.3947"
    },
    {
      "type": "email",
      "value": "noreply@coin-front.io",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "email",
      "value": "noreply@parsonexmarket.com",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "phone",
      "value": "+12133976550",
      "context": "US +1 (213) 397-6550, Cory Bates persona, RCS-capable; LA area code but operator IP geolocates to Lagos NG, so this is a US VoIP relay (TextNow/Bandwidth-class)",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "US +1 (213) 397-6550, Cory Bates persona, RCS-capable; LA area code but operator IP geolocates to Lagos NG, so this is a US VoIP relay (TextNow/Bandwidth-class)"
    },
    {
      "type": "username",
      "value": "@cory_bates1895",
      "context": "aged 2011, 405 followers / 3,221 following, jiu-jitsu + bitcoin bio, dropped coin-front.io",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "aged 2011, 405 followers / 3,221 following, jiu-jitsu + bitcoin bio, dropped coin-front.io"
    },
    {
      "type": "wallet",
      "value": "bc1q6tayfjwdt44tmsruryc2ferry62fu5l8yayrpc",
      "context": "$128K single deposit, swept to 1HV2BNfCeaeQ9c1RsUnnZLLVE6uyQSZWXb",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "swept",
      "notes": "$128K single deposit, swept to 1HV2BNfCeaeQ9c1RsUnnZLLVE6uyQSZWXb"
    },
    {
      "type": "wallet",
      "value": "bc1qzgsxlhq65l3m8lc5yzkrmevtp0qh90vqvkrfju",
      "context": "single 0.297 BTC shot 2025-07-04",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "dormant",
      "notes": "single 0.297 BTC shot 2025-07-04"
    },
    {
      "type": "wallet",
      "value": "TUNqd7gyhx6noMetAZLu4ZtrhqBke7ndoB",
      "context": "USDT-TRC20 receiver",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "active",
      "notes": "USDT-TRC20 receiver"
    },
    {
      "type": "wallet",
      "value": "bitcoincash:qzqdykddz7kyd7eql4s2t3df0f2hsllhsyuqlwm7sw",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "active",
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0xE9e02797772381527Fe35776a3871ec4FEE29d43",
      "context": "ETH-native receiver",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "active",
      "notes": "ETH-native receiver"
    },
    {
      "type": "wallet",
      "value": "TYJPhHqtnFv94gWqdWqwoFC9NxH9SqBHNV",
      "context": "USDT-TRC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "active",
      "notes": "USDT-TRC20"
    },
    {
      "type": "wallet",
      "value": "TCJAJ6wVhABtxZfJmFFaCGSzxHA8CpfAJh",
      "context": "TRX rotation wallet",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "swept",
      "notes": "TRX rotation wallet"
    },
    {
      "type": "wallet",
      "value": "1P9wocCxnF1QGX71Xa5eWohuba4dr58jYD",
      "context": "271-day span, $86 median",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "active",
      "notes": "271-day span, $86 median"
    },
    {
      "type": "wallet",
      "value": "0xFF8513cDdaE9BD91ed0c11F3c49866A1b38B2C3A",
      "context": "USDT-ERC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "USDT-ERC20"
    },
    {
      "type": "wallet",
      "value": "TXvBrSpVby3gKqoMkcr8GJqjXTECm4ZE6M",
      "context": "USDT-TRC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "USDT-TRC20"
    },
    {
      "type": "wallet",
      "value": "bc1qn228waxytzugvm322unp0dyz97t9kzkkx5eg9l",
      "context": "471-day span, looks like demo flows",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "active",
      "notes": "471-day span, looks like demo flows"
    },
    {
      "type": "wallet",
      "value": "0x5dC045569a5114F59D997613756a4d551c58FBA1",
      "context": "ETH-native",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH-native"
    },
    {
      "type": "wallet",
      "value": "bc1qxg7dap9wmhh8twzgthwkd3chnx7x46mfdga2mz",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "dormant",
      "notes": null
    },
    {
      "type": "wallet",
      "value": "bc1ql8hlfymt889wnxgxvf75rexehktc4fakv34kfg",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": "active",
      "notes": null
    },
    {
      "type": "wallet",
      "value": "bc1q775qtkejh5fnxadx2mey8k3g25zsvwahl6dqgl",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "TXaPDV2T37XJbmpkc3PwbFijhZCSPPXyAr",
      "context": "USDT-TRC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "USDT-TRC20"
    },
    {
      "type": "wallet",
      "value": "bc1qcxfmz7zs8suzenkw9zng20l4kvknr9h4k7ftea",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "17jmaT1PpjeJfdGg5Q2746MeVnvWQLwWVm",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "1FcFEH3Kx85JL6wTDVDr4RDBBKYbvguyNT",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "bc1q9nyvdjr2jyxxhx0ea9tf69y6j20ea4l83fd269",
      "context": "primary BTC, swept",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "primary BTC, swept"
    },
    {
      "type": "wallet",
      "value": "TDpqPGesMxGL9oxcWhPChdawPw5rASyWSd",
      "context": "USDT-TRC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "USDT-TRC20"
    },
    {
      "type": "wallet",
      "value": "0xF172c996598fdd558BB21D5312B2da99c6844120",
      "context": "rotation, ETH-native",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "rotation, ETH-native"
    },
    {
      "type": "wallet",
      "value": "0x0a5659BAf2cF27DC19ea87ddAAbEb651ad3E117e",
      "context": "advertised hot wallet, barely funded",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "advertised hot wallet, barely funded"
    },
    {
      "type": "wallet",
      "value": "TYcGojypFj6BwtqYGV7PWmZX8KiH4xakvA",
      "context": "advertised primary, swept",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "advertised primary, swept"
    },
    {
      "type": "wallet",
      "value": "Azy4rkMjEtipK2mDFiBCdYq8cXM4dvw8bLPZ1qm6vYAS",
      "context": "snapshot zero",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "snapshot zero"
    },
    {
      "type": "wallet",
      "value": "r4uHqWeEFHKKqiqQaGNYKr37UiijUWA4ez",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "DMdqGNV4qKFsgshRdX75tPCFsWp9Y5hhXJ",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "bc1qaacjkf7qtufw0922qpkzdupc7fz7pnzj9lmqxe",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0xbbe67CD6D4A613435842Da6D3b0E27E6A0c23856",
      "context": "ETH ERC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH ERC20"
    },
    {
      "type": "wallet",
      "value": "rGbvKPcTd52XJYpbBxQ2MWXzpM6RbyY8TT",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0x1A82AFB40690ed0bb3bFC122D79811E4FA23Fc3F",
      "context": "ETH/USDT ERC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH/USDT ERC20"
    },
    {
      "type": "wallet",
      "value": "TSWmZQXM9S4ZupeMSBJH6yAX5N3bBMLR7z",
      "context": "USDT-TRC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "USDT-TRC20"
    },
    {
      "type": "wallet",
      "value": "rntmJoNjyuxTurLMtuLsevofV6vZFTtXv3",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "AK2JqnCTfebKiUsDBeDrLEUFA6TnFYsxh5T5HVQsb6wP",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "r3YhwVdoYMS8aheu7MXmaSkkq2nfYLXdtY",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "8XJFAons9pKaTBiiZZv7HHcGutMDibDYjpDQzK788DxQ",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0x7218Bf3498511f26085eddBd16609eA524dbCfE6",
      "context": "ETH-native",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH-native"
    },
    {
      "type": "wallet",
      "value": "0xff41c057b016b6760c4c95ed5ddb997e4bb885b3",
      "context": "USDC ERC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "USDC ERC20"
    },
    {
      "type": "wallet",
      "value": "16awnCpQgnyWYswXPyNftAVi85aQkq2hfg",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0x37Fa6BaB7e02b9ea42E9719bDe5954A65E3d0305",
      "context": "ETH ERC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH ERC20"
    },
    {
      "type": "wallet",
      "value": "0xC25B38EAF27455663D484b6B9E38CA6168795673",
      "context": "ETH/USDT ERC20",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH/USDT ERC20"
    },
    {
      "type": "wallet",
      "value": "FHiUph6qKwrdubsMHGMVZym2Qt6SCYfLAi2JTfJGDQ9K",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "bc1qs33nn3kfze2zcm242xqyh7a64h3mr5hxahd7x8",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0x75140DE3e7097ffB4239419371e4AfF01D319EC2",
      "context": "ETH/BNB",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH/BNB"
    },
    {
      "type": "wallet",
      "value": "r5L5FDiXxdmUoUimsvDaSTmrnUH9CbKki",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "2Zf9ZmCriZX9ou1MG8JEEKoQcsP1uvpKrr1CCzqwtWaT",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0xFf3c512b6D17746040dff4f6146B74E67E7089C0",
      "context": "ETH/USDT cross-chain",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH/USDT cross-chain"
    },
    {
      "type": "wallet",
      "value": "rnqeuL1CSmCagZX2jSsXazbazQjyQ1z8uC",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "qrv5mcnhr09ga3h69p349mqvr9h8s80gwqu302jwes",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "addr1q8dvghts7kcmc5jqzra50z5urwhge7486n6rjdtyelhjj4jsxhz05ds5sfe0fkzw4r7g2jaw9gp6rw9n70e2tqzsapms4amsgj",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "DEv8mnLYcRFnpAcPLaG8Dn4TJKK7dC2SYx",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0x6Bc0Cd974e0CE5dcE198AD016d54a99e19549ab1",
      "context": "ETH/BNB",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "ETH/BNB"
    },
    {
      "type": "wallet",
      "value": "0xaAC43EB4E17ee938f0Af3374f0285811485925b2",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "LfHCzkJx6sEg83dNnUBtbaWfBPfHu6wzgH",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "1KWpKpBqcL7GXXDYfBtpwyXxjQwYJk2KJe",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "0x21c865300ddc573fed1f922670429d9b2df95d2d",
      "context": "USDC/USDT BSC",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "USDC/USDT BSC"
    },
    {
      "type": "wallet",
      "value": "rJn2zAPdFA193sixJwuFixRkYDUtx3apQh",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "G3b3SW9DStUwCB1Pd4XnFzGYLwHkbYcWkkN2fxaqha3v",
      "context": "USDT-Solana",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "USDT-Solana"
    },
    {
      "type": "wallet",
      "value": "LgEJ6bQFaMB7wZAbE8TL4RLMiwEVtsJYyv",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "wallet",
      "value": "1HV2BNfCeaeQ9c1RsUnnZLLVE6uyQSZWXb",
      "context": "next-hop sweep target from crestmarkets BTC wallet",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "next-hop sweep target from crestmarkets BTC wallet"
    },
    {
      "type": "hash",
      "value": "6beb02b513f811da0ad2a837f203feffbc6900a552ad23f024e019da3c2526b3",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "hash",
      "value": "8abbbfe54ff466d05dff7d5ec2ae215c",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "hash",
      "value": "-1032583768",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "hash",
      "value": "3f76ad861342405b5f0a5059de35bfb2fc880e9748975929083f5cfe2d5a385a",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "hash",
      "value": "427b0c476fa99fa037d026c4549fb124",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "hash",
      "value": "d952ca796a5c973e632bc7cdf841343a3d845c54061b14639097f0eb836e475d",
      "context": "",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": null
    },
    {
      "type": "key",
      "value": "4aeb1fdb9a261fa98524e37134fd905a4ef8e7ce",
      "context": "live-chat widget account ID",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "live-chat widget account ID"
    },
    {
      "type": "key",
      "value": "BKt9tSMCKnDEjraPoYp-MpP_th8ivocl9AwuM8-xB550Zl9DPi9au9uFwLQvOSGU8yBkRADsCSboGwBEj-iZkfU",
      "context": "browser-push subscriber key, kit-shared",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "coin-front-io",
      "case_title": "coin-front.io",
      "confidence": "observed",
      "status": null,
      "notes": "browser-push subscriber key, kit-shared"
    },
    {
      "type": "domain",
      "value": "snapbargainhub.com",
      "context": "primary checkout",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "xmmyb2.us",
      "context": "disposable email sender",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "dead",
      "notes": null
    },
    {
      "type": "domain",
      "value": "usualtimateur.in.net",
      "context": "redirector farm",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "qsdq.usualtimateur.in.net",
      "context": "GCS redirect hop",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "commerstreamed.com",
      "context": "JS cloaker",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "workinsomniac.com",
      "context": "JS cloaker, Kobalt path",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "vaultsphere.su",
      "context": "affiliate tracker aff_id=1575",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "url",
      "value": "storage.googleapis.com/sd6514s6589dsd/22.html",
      "context": "email first-hop GCS lure",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "email",
      "value": "support@snapbargainhub.com",
      "context": "merchant support on terms",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "email",
      "value": "qorjwdaibmxzii.84229514974732@7tlf5p.li0oa0.xmmyb2.us",
      "context": "observed lure From",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "dead",
      "notes": null
    },
    {
      "type": "phone",
      "value": "+18777693140",
      "context": "877-769-3140 cancellation line",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "ip",
      "value": "57.128.147.19",
      "context": "usualtimateur.in.net OVH",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "ip",
      "value": "83.143.119.26",
      "context": "commerstreamed.com",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "ip",
      "value": "103.126.162.25",
      "context": "workinsomniac.com",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "string",
      "value": "Discount Consumer Saving",
      "context": "hidden membership brand in terms",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "string",
      "value": "YOU ARE OUR WINNER Kobalt Tool Set from Lowe's",
      "context": "email lure headline",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "string",
      "value": "aff_id=1575",
      "context": "vaultsphere affiliate publisher",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "hash",
      "value": "6d1b58b44056b5dd733797f6f730cd7283273825784bc381ca6816569ab3d492",
      "context": "form_handler.js",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "hash",
      "value": "e8cf1117d737b83f697062332e4a5b383e69f77d6a1d3d2c44fef347ee58d78f",
      "context": "app.js",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "verified",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "offer.getallurahairremover.com",
      "context": "checktrafficnew platform sibling",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "observed",
      "status": "live",
      "notes": null
    },
    {
      "type": "domain",
      "value": "www.naturalblissgummies.com",
      "context": "checktrafficnew platform sibling",
      "tlp": "clear",
      "source_type": "hooked_scams",
      "case_slug": "snap-bargain-hub",
      "case_title": "snapbargainhub.com",
      "confidence": "observed",
      "status": "live",
      "notes": null
    }
  ]
}