1. Using the Tracer feature of CT PRO, identify the change address for the following Bitcoin address from a transaction of 0.16312111 BTC that occurred on 2023-08-20 17:19:33  

         (Note: Add a date filter for August 20 -21, 2023)

                  1HtV8k2Pj4y5bRR1NbjF2uEq8DZjJF2pJk

         a. What was the amount of change returned?

         b. What Exposures are affiliated with this address?

         (Note: Review Exposure Tab in Tracer)

         c. Identify the marketplace name of an exposure sanctioned by the Office of Foreign Asset Control (OFAC).

         (Note: Review the Outgoing Exposures in the Threat Analysis section)

         d. Identify the date of the OFAC sanctioned marketplace.
         

      2. On 2024-03-12 17:46:36, a victim sent approximately $1269 of Bitcoin to a scammer who initiated a “Sextortion Scam.” The        victim sent the funds to the following address:

                    1FECxHyNFvYjj7FVQtmD1GrMxoLEBFHDCV

      Using the Deconfliction feature of Pro Analytics, answer the following questions.

      (NOTE: Select Sextortion for Criminal Activity Type. Paste the Address and hit the Tab Button. DON"T SUBMIT THE               SCAM FOR DECONFLICTION)

• If available, Identify the number of times the address has been reported.
   
• If available, identify the lifetime earnings of the scam address. 
   
• Using the Tracer feature in CT PRO, track the movement of the funds and identify the name of an exchange that may have been used to liquidate the cryptocurrency.
   
• Document the last four of the transaction hash, the suspect address, and the exchange deposit address that you would use to prepare a legal process to the exchange for account information. 
   

     3. On March 26, 2024, an undercover officer arranged for the purchase of 1 ounce of powder cocaine. The target wanted to        be paid in Bitcoin. The target provided the following address, and the undercover officer sent a $6.00 test transaction.

                  bc1qyqplled5djehv86lkazlrw47vnht3q65la4927

•  Using the Tracer feature of CT PRO, identify if the target address is associated with an exchange. If so, what is the name of the exchange?
   
•  Identify the Transaction Hash for the outgoing transaction and document the last four.
   
• Click on the Transaction Hash and Identify the wallet address the suspect sent the funds to.
  NOTE: Look at the number of Bitcoin sent from the Input Address.  Find the same number of Bitcoin sent in an Output address and document the last four of that address.

     4. A victim reported the following address has been affiliated with various cryptocurrency scams.

               bc1qcygs9dl4pqw6atc4yqudrzd76p3r9cp6xp2kny

     Using the deconfliction feature of Pro Analytics, answer the following questions.

• identify the types of scams the address has been affiliated with. 
   
• If available, Identify the number of times the address has been reported.
   
• If available, identify the lifetime earnings of the scam address.
   

     5. On 2021-04-16 21:56:25, the scam address listed below engaged in a wallet hop:

              bc1qcygs9dl4pqw6atc4yqudrzd76p3r9cp6xp2kny

         Based on the above information, use the Tracer feature of CT PRO to answer the following questions:

• Identify the last four of the transaction hash for the transaction that occurred on 2021-04-16 21:56:25. 

          (Note: Use the Address Search Feature and add filter April 16-19, 2021)

• Identify the change address? What two indicators did you base your assumption on.
   
• Track the transaction to attempt to identify an exchange used to liquidate the cryptocurrency.
  
  (NOTE: Track 3-5 Hops)
   
• Document the last four of the transaction hash, the suspect address, and the exchange deposit address that you would use to prepare a legal process to the exchange for account information.