TeamName/
├── chat/              # Internal Telegram group conversations
├── channel/           # Public channel announcements
├── successful_thefts/ # Confirmed theft records (wallets, tx hashes, amounts)
├── designs/           # Phishing page templates and clone assets
├── payments/          # Payment logs, affiliate payouts
├── scammers_login.txt # Known participant Telegram IDs and usernames
├── domains.txt        # Associated phishing domains
├── iocs.json          # Machine-readable indicators of compromise
└── index.html         # Visual evidence browser for this team