{
  "curatedUTC": "2026-10-31T08:29:53.923707+00:00",
  "initialBound": {
    "sourceObjectsAndQueries": 8,
    "repositoryMetadataObjects": 2,
    "codeQueries": 4,
    "readmeObjects": 2
  },
  "codeQueries": [
    {
      "indicator": "collector",
      "exactValue": "0x3f99139f1c5854bb628c2e576aaf638e99dffc18",
      "repositories": [
        "scamsniffer/scam-database",
        "MetaMask/eth-phishing-detect"
      ],
      "tool": "GitHub public repository-scoped code search",
      "recordedStartUTC": "2026-10-31 08:24:52 UTC",
      "savedUTC": "2026-10-31T08:25:59.450624+00:00",
      "resultCount": 0,
      "isError": false,
      "rawToolEnvelopeSHA256": "70a9eedf31dc35739a8050a42580fa00e453e745775a178c64609b77c483b1c3",
      "indexScope": "Indexed default branch only; repository metadata does not affirm indexing completeness."
    },
    {
      "indicator": "payload-sha256",
      "exactValue": "0755e767504d8103f6c27b9e765a1026507a17c04513242adb503df7777879e5",
      "repositories": [
        "scamsniffer/scam-database",
        "MetaMask/eth-phishing-detect"
      ],
      "tool": "GitHub public repository-scoped code search",
      "recordedStartUTC": "2026-10-31 08:24:52 UTC",
      "savedUTC": "2026-10-31T08:25:59.450624+00:00",
      "resultCount": 0,
      "isError": false,
      "rawToolEnvelopeSHA256": "fe6abd2559a7446e831390b2a50aa4ca2263b1f3ab18fd5f28b7f95beb9eb06e",
      "indexScope": "Indexed default branch only; repository metadata does not affirm indexing completeness."
    },
    {
      "indicator": "script-id",
      "exactValue": "C7xcKKrjUnXK",
      "repositories": [
        "scamsniffer/scam-database",
        "MetaMask/eth-phishing-detect"
      ],
      "tool": "GitHub public repository-scoped code search",
      "recordedStartUTC": "2026-10-31 08:24:52 UTC",
      "savedUTC": "2026-10-31T08:25:59.450624+00:00",
      "resultCount": 0,
      "isError": false,
      "rawToolEnvelopeSHA256": "81f4d38fca81b6266dbba8776433bfbe307a881d9f2b086c0281e749fadbfee9",
      "indexScope": "Indexed default branch only; repository metadata does not affirm indexing completeness."
    },
    {
      "indicator": "tracker-uuid",
      "exactValue": "4c6b64a0-a7ef-4c0f-9c70-3a4e6f89065c",
      "repositories": [
        "scamsniffer/scam-database",
        "MetaMask/eth-phishing-detect"
      ],
      "tool": "GitHub public repository-scoped code search",
      "recordedStartUTC": "2026-10-31 08:24:52 UTC",
      "savedUTC": "2026-10-31T08:25:59.450624+00:00",
      "resultCount": 0,
      "isError": false,
      "rawToolEnvelopeSHA256": "15194129b726473f03c50f703777035828c1ed69804901a4a927c1f2b022f2a5",
      "indexScope": "Indexed default branch only; repository metadata does not affirm indexing completeness."
    }
  ],
  "supplementAuthorisation": "Parent explicitly requested one documented current address-risk provider and exactly two address lookups after the initial batch.",
  "supplement": {
    "provider": "GoPlus Malicious Address API",
    "officialSchemaURL": "https://docs.gopluslabs.io/reference/addresscontractusingget_1.md",
    "officialSchemaUpdatedAt": "2026-08-20T09:43:58.000Z",
    "method": "GET",
    "path": "/api/v1/address_security/{address}",
    "chainId137Documented": true,
    "authenticationHeaderRequired": false,
    "authenticationUsed": false,
    "lookups": 2,
    "underlyingExactSourceSearch": {
      "query": "\"0x3f99139f1c5854bb628c2e576aaf638e99dffc18\" site:x.com/SlowMist_Team",
      "result": "Empty search result; no original SlowMist exact-address object recovered.",
      "toolResultSHA256": "e12c56fe56d596d96b03f9a9ddeabf0bda02dcc54f4f5e5648bacf0fa57f3e1e"
    }
  },
  "retainedFailures": [
    {
      "sourceURL": "https://docs.gopluslabs.io/reference/address-security-api",
      "HTTP": 404,
      "resolution": "Official docs index identifies current Malicious Address API page."
    },
    {
      "source": "web tool on original docs URL and llms.txt",
      "result": "Internal inaccessible errors, retained locally; direct official HTTP index/schema reads succeeded."
    }
  ],
  "limits": [
    "ScamSniffer primary README says the public domain list has a seven-day delay; an Oct29 incident is newer than that delay at Oct31 capture.",
    "ScamSniffer legacy address files stopped updating in February2024; no fresh collector-negative claim can be derived from them.",
    "MetaMask primary README describes malicious domains; no general wallet-address or malware-hash coverage is established.",
    "Four default-branch code queries are not exhaustive inspection of unindexed/large files, branch history, issues/PRs or every threat-intelligence dataset.",
    "Repo metadata returns code-search indexing status null. Empty search results do not affirm complete corpus coverage.",
    "GoPlus collector data_source=\"SlowMist\" has no underlying record URL, label date, transactions, signatures or actor details. An original SlowMist address record was not recovered.",
    "Secondary GoPlus zero flags are a provider result, not absence of theft or risk.",
    "Only two GoPlus address lookups were made, both unauthenticated Polygon GETs. Separate Address Scan APIs were not called."
  ],
  "stoppingReason": "Initial bound complete; followup exact-address provider returned one new risk assertion but no dated upstream record or actor/control pointer. No further generic source loop selected."
}