What gets blocked · Tier 1
The full list
Every entry below is the live blocklist data, rendered straight from domains.csv — all 69 Tier 1 entries from 25 organizations across 6 categories of surveillance. Each carries a one-sentence privacy harm, a source you can check, and the date it was last verified. Search or filter to find a specific firm or domain.
Showing 69 of 69
| Domain | Organization | Category | Privacy harm | Source | Verified |
|---|---|---|---|---|---|
*.chainalysis.com | Chainalysis Inc. | Blockchain Analytics | Logs querying IP addresses against Bitcoin address lookup requests. Sells intelligence to law enforcement and financial institutions. | source ↗ | 2026-05-04 |
chainalysis.com | Chainalysis Inc. | Blockchain Analytics | Root domain for primary blockchain surveillance firm. | source ↗ | 2026-05-04 |
transpose.io | Chainalysis Inc. | Blockchain Analytics | On-chain data API operated by Chainalysis subsidiary. | source ↗ | 2026-05-04 |
*.transpose.io | Chainalysis Inc. | Blockchain Analytics | All subdomains of Chainalysis subsidiary Transpose. | source ↗ | 2026-05-04 |
*.elliptic.co | Elliptic | Blockchain Analytics | Blockchain analytics and compliance APIs. Transaction monitoring reveals queried addresses to Elliptic servers. | source ↗ | 2026-05-04 |
elliptic.co | Elliptic | Blockchain Analytics | Root domain for Elliptic blockchain analytics platform. | source ↗ | 2026-05-04 |
*.trmlabs.com | TRM Labs | Blockchain Analytics | AI-driven blockchain intelligence. BLOCKINT API correlates address queries with IP addresses. | source ↗ | 2026-05-04 |
trmlabs.com | TRM Labs | Blockchain Analytics | Root domain for TRM Labs blockchain intelligence platform. | source ↗ | 2026-05-04 |
*.ciphertrace.com | CipherTrace (Mastercard) | Blockchain Analytics | Blockchain analytics acquired by Mastercard. Transaction monitoring with government and financial institution clients. | source ↗ | 2026-05-04 |
ciphertrace.com | CipherTrace (Mastercard) | Blockchain Analytics | Root domain for CipherTrace blockchain analytics platform. | source ↗ | 2026-05-04 |
*.crystalblockchain.com | Crystal Blockchain | Blockchain Analytics | Transaction monitoring and risk scoring. Address queries reveal holdings and transaction history. | source ↗ | 2026-05-04 |
crystalblockchain.com | Crystal Blockchain | Blockchain Analytics | Root domain for Crystal Blockchain analytics platform. | source ↗ | 2026-05-04 |
bitrank.com | Crystal Blockchain | Blockchain Analytics | Crystal Blockchain alias domain used for address risk scoring API. | source ↗ | 2026-05-04 |
*.bitrank.com | Crystal Blockchain | Blockchain Analytics | All subdomains of Crystal Blockchain BitRank alias. | source ↗ | 2026-05-04 |
*.scorechain.com | Scorechain | KYC/AML Compliance | Compliance platform used by exchanges to flag privacy-enhancing transactions including CoinJoin. | source ↗ | 2026-05-04 |
scorechain.com | Scorechain | KYC/AML Compliance | Root domain for Scorechain compliance platform. | source ↗ | 2026-05-04 |
*.merkle.science | Merkle Science | Blockchain Analytics | Predictive risk platform logs Bitcoin address queries against IP addresses. | source ↗ | 2026-05-04 |
merkle.science | Merkle Science | Blockchain Analytics | Root domain for Merkle Science blockchain intelligence platform. | source ↗ | 2026-05-04 |
*.arkm.com | Arkham Intelligence | Deanonymization | Publicly markets tools to attach real-world identities to Bitcoin addresses. Every address lookup logged against querying IP. | source ↗ | 2026-05-04 |
arkm.com | Arkham Intelligence | Deanonymization | Root domain for Arkham Intelligence deanonymization platform. | source ↗ | 2026-05-04 |
intel.arkm.com | Arkham Intelligence | Deanonymization | Arkham Intel platform endpoint. Every address lookup is logged against the querying IP address. | source ↗ | 2026-05-04 |
*.metasleuth.io | MetaSleuth | Deanonymization | Crypto tracking and investigation platform. All address and wallet queries are logged. | source ↗ | 2026-05-04 |
metasleuth.io | MetaSleuth | Deanonymization | Root domain for MetaSleuth blockchain investigation platform. | source ↗ | 2026-05-04 |
*.breadcrumbs.app | Breadcrumbs | Blockchain Analytics | Free blockchain analytics tool. IP logged against every address query. | source ↗ | 2026-05-04 |
breadcrumbs.app | Breadcrumbs | Blockchain Analytics | Root domain for Breadcrumbs blockchain analytics. | source ↗ | 2026-05-04 |
*.glassnode.com | Glassnode | Blockchain Analytics | On-chain analytics platform. IP logged against address and metric queries. | source ↗ | 2026-05-19 |
glassnode.com | Glassnode | Blockchain Analytics | Root domain for Glassnode on-chain analytics. | source ↗ | 2026-05-19 |
*.nansen.ai | Nansen | Surveillance Analytics | Wallet labeling and identity profiling. Builds identity profiles from address query patterns. | source ↗ | 2026-05-19 |
nansen.ai | Nansen | Surveillance Analytics | Root domain for Nansen wallet labeling and identity analytics. | source ↗ | 2026-05-19 |
*.anchain.ai | AnChain.AI Inc. | Address Screening | Corporate and marketing namespace for AnChain.AI. IRS-CI federal contractor (Award 2032H524C00033) operating blockchain analytics and address-screening services that log querying IPs against queried Bitcoin addresses. | source ↗ | 2026-05-26 |
anchain.ai | AnChain.AI Inc. | Address Screening | Root domain of the AnChain.AI corporate and marketing namespace. | source ↗ | 2026-05-26 |
*.anchainai.com | AnChain.AI Inc. | Address Screening | Product API namespace for AnChain.AI BEI surveillance suite. Screening and labeling endpoints log every querying IP against the Bitcoin address being screened for OFAC status / risk scoring / attribution. | source ↗ | 2026-05-26 |
anchainai.com | AnChain.AI Inc. | Address Screening | Root domain of the AnChain.AI product API namespace. | source ↗ | 2026-05-26 |
*.blockchaingroup.io | Blockchain Intelligence Group (BIG; subsidiary of BIGG Digital Assets Inc.) | Blockchain Analytics | Surveillance subsidiary of publicly-traded BIGG Digital Assets Inc. (TSXV: BIGG / OTCQB: BBKCF). Operates QLUE (Qualitative Law Enforcement Unified Edge) for law enforcement / agencies / regulators. Published a September 2024 blog post explicitly framing Bitcoin CoinJoin as adversarial. CAD$2.26M FY 2025 revenue; named as one of three FY 2026 strategic priorities for the parent. | source ↗ | 2026-05-26 |
blockchaingroup.io | Blockchain Intelligence Group (BIG; subsidiary of BIGG Digital Assets Inc.) | Blockchain Analytics | Root domain of the BIG surveillance subsidiary. | source ↗ | 2026-05-26 |
*.bitrankverified.com | Blockchain Intelligence Group (BIG; subsidiary of BIGG Digital Assets Inc.) | Address Screening | BitRank Verified address-screening / risk-scoring product. Used by RegTech / banks / ATMs / exchanges / retailers to score Bitcoin addresses and transactions. Supports BTC / ETH / ERC20 / LTC / BCH / BSV. Same parent as blockchaingroup.io. | source ↗ | 2026-05-26 |
bitrankverified.com | Blockchain Intelligence Group (BIG; subsidiary of BIGG Digital Assets Inc.) | Address Screening | Root domain of the BitRank product. | source ↗ | 2026-05-26 |
*.biggdigitalassets.com | BIGG Digital Assets Inc. | Blockchain Analytics | Parent holding company of Blockchain Intelligence Group and Netcoins. Publicly traded (TSXV: BIGG / OTCQB: BBKCF). FY 2025 audited revenue CAD$12.86M with surveillance subsidiary contributing CAD$2.26M. Domain serves corporate marketing and investor relations. | source ↗ | 2026-05-26 |
biggdigitalassets.com | BIGG Digital Assets Inc. | Blockchain Analytics | Root domain of the BIGG parent holding company. | source ↗ | 2026-05-26 |
*.bitrace.io | Bitrace Tech | Blockchain Analytics | Hong Kong-based blockchain surveillance and AML/CFT technology vendor self-described as the leading Web3 RegTech company in Asia. CEO and co-founder Isabel SHI; co-founder Hugo HU. Primary technical product is the KYA (Know Your Address) API at api.bitrace.io which provides risk scores and entity attribution for blockchain addresses across multiple networks. Additional products: Bitrace AML (over a billion entity/risk labels) / Detrust (ML address labeling) / Bitrace AI (LLM-powered investigation tool) / Stablecoin Risk Monitoring Solution aligned to HKMA guidelines. Publicly documented relationships with Hong Kong Police Force / Hong Kong Customs / SFC / ICAC / HKMA. | source ↗ | 2026-05-26 |
bitrace.io | Bitrace Tech | Blockchain Analytics | Root domain of Bitrace surveillance and AML platform. | source ↗ | 2026-05-26 |
*.iknaio.com | Iknaio Cryptoasset Analytics GmbH | Blockchain Analytics | Austrian blockchain surveillance vendor headquartered in Vienna; founded 2021 as a spin-off from Complexity Science Hub. Commercializes hosted services and proprietary extensions on top of GraphSense — the open-source MIT-licensed cryptoasset analytics platform developed since 2015 at the Austrian Institute of Technology. GraphSense was developed with significant public funding including EU Horizon 2020 TITANIUM (INTERPOL-affiliated law enforcement crypto-investigation project 2017-2020) / Austrian FFG IKT der Zukunft and KIRAS programs / Austria Wirtschaftsservice seed funding. Commercial products: Pathfinder (transaction tracing) / CaseConnect (investigator collaboration) / QuickLock (automated forensics reports) / TaxReport / REST API / Model Context Protocol interface for AI agent integration. Customer base per Iknaio's own marketing: investigators from national authorities / law enforcement agencies / security companies / payment industry. | source ↗ | 2026-05-26 |
iknaio.com | Iknaio Cryptoasset Analytics GmbH | Blockchain Analytics | Root domain of the Iknaio commercial surveillance entity. | source ↗ | 2026-05-26 |
*.inca.digital | Inca Digital Inc. | Blockchain Analytics | Federal contractor with active DARPA Phase II SBIR (Award W912CG22C0004 / $4.7M) and CFTC contract (Award 9523ZY20C0022 / $573K) for Bitcoin and cryptocurrency surveillance. Self-discloses ability to identify the location of users of financial products without IP address attribution. Operates Nakamoto Terminal used by CFTC for market surveillance / investigations / litigation. Founded by former INTERPOL analysts in 2009. Customers include DOD / DOJ / DHS / CFTC / Federal Reserve / DARPA / US Air Force / SOCOM / UNODC. | source ↗ | 2026-05-26 |
inca.digital | Inca Digital Inc. | Blockchain Analytics | Root domain of the Inca Digital corporate namespace. | source ↗ | 2026-05-26 |
*.nterminal.com | Inca Digital Inc. | Blockchain Analytics | Product alias domain for Inca Digital's Nakamoto Terminal surveillance platform. Currently redirects to inca.digital but represents a distinct DNS resolution path. Nakamoto Terminal is explicitly documented in CFTC press release 8311-20 as the agency's tool for market surveillance / investigations / litigation. Self-described capability: natural language processing module leverages neural networks to track individuals and companies / parse global regulatory actions / monitor traditional and social media / monitor the darknet. | source ↗ | 2026-05-26 |
nterminal.com | Inca Digital Inc. | Blockchain Analytics | Root domain of the Nakamoto Terminal product alias. | source ↗ | 2026-05-26 |
*.lukka.tech | Lukka Inc. | Blockchain Analytics | New York-based institutional crypto data and software firm operating a blockchain surveillance product line alongside crypto accounting/tax products. Surveillance products: Lukka Blockchain Analytics (transaction/wallet/cluster monitoring / AML / ownership detection) and Lukka Blockchain Investigator (SaaS investigations tool with explicit Source-of-Funds / Destination-of-Funds analysis and a vendor-marketed claim to deanonymize asset movement through advanced mixers). Self-positions as competitor to Chainalysis / Elliptic / Solidus Labs. Acquired Coinfirm in 2023 (announced May 2024). $1.3B valuation; $209M raised across 9 rounds. | source ↗ | 2026-05-26 |
lukka.tech | Lukka Inc. | Blockchain Analytics | Root domain of Lukka. | source ↗ | 2026-05-26 |
*.coinfirm.com | Lukka Inc. | Blockchain Analytics | Coinfirm was an independent European blockchain analytics firm founded 2016 focused on AML / compliance / sanction screening / entity due diligence / on-chain investigations. Acquired by Lukka in 2023 (announced May 21 2024). Coinfirm product team remained in place post-acquisition; products integrated into Lukka's portfolio. Per Lukka's own Terms of Use coinfirm.com is a Lukka-operated domain. | source ↗ | 2026-05-26 |
coinfirm.com | Lukka Inc. | Blockchain Analytics | Root domain of the Coinfirm legacy product surface — now Lukka-operated. | source ↗ | 2026-05-26 |
*.matchsystems.com | Match Systems Solutions Pte Ltd | Address Screening | Russian/CIS-origin blockchain surveillance vendor with Singapore-registered entity and Dubai operational base. Address screening API at $0.08-$0.12 per check with 100M+ indexed addresses and 33M+ tagged for illegal activity. OSINT investigations service explicitly marketed as bypassing law enforcement information-gathering constraints. Publicly named government customers include CERT Kyrgyzstan and RAK DAO (UAE). CEO Andrei Kutin. Cross-vendor data sharing with SlowMist and Uppsala Security. | source ↗ | 2026-05-27 |
matchsystems.com | Match Systems Solutions Pte Ltd | Address Screening | Root domain of Match Systems corporate and product site. | source ↗ | 2026-05-27 |
*.cryptoofficer.ai | Match Systems Solutions Pte Ltd | Address Screening | AI Crypto Officer — AI/LLM-powered AML compliance product operated by Match Systems Solutions Pte Ltd. Directly linked from matchsystems.com main navigation as a Match Systems product. Provides AI-driven address screening / KYT / KYC services to crypto exchanges and projects. | source ↗ | 2026-05-27 |
cryptoofficer.ai | Match Systems Solutions Pte Ltd | Address Screening | Root domain of the Match Systems AI Crypto Officer product. | source ↗ | 2026-05-27 |
*.slowmist.com | SlowMist Technology Co. Ltd. | Blockchain Analytics | Xiamen China-headquartered blockchain security and AML firm operating internationally. Hosts MistTrack AML platform via aml.slowmist.com and SlowMist KYT real-time AML engine via kyt.slowmist.com. 400M+ labeled addresses and 500K+ threat intelligence records. Integrates OFAC / NBCTF / UK HMT sanction lists. Founding member of HKVAIA/DAAMC. Contributor to China National Vulnerability Database. Cited by UN Security Council and UNODC. Founder Yu Xian (Cos). Cross-vendor data sharing partnerships with Match Systems and Uppsala Security. | source ↗ | 2026-05-27 |
slowmist.com | SlowMist Technology Co. Ltd. | Blockchain Analytics | Root domain of SlowMist corporate and surveillance product surfaces. | source ↗ | 2026-05-27 |
*.misttrack.io | SlowMist Technology Co. Ltd. | Blockchain Analytics | MistTrack AML tracing platform with subdomains for light.misttrack.io (free) / dashboard.misttrack.io (premium) / docs.misttrack.io (API documentation). 400M+ labeled wallet addresses across 19+ chains including Bitcoin. 14 stablecoins supported. Used by 300+ institutional customers including OKX / Binance / HashKey / imToken / BitKeep. MistTrack MCP server (github.com/slowmist/MistTrackMCP) exposes API to Claude AI. Won Hong Kong ICT Awards 2025 Gold in FinTech (RegTech). | source ↗ | 2026-05-27 |
misttrack.io | SlowMist Technology Co. Ltd. | Blockchain Analytics | Root domain of the standalone MistTrack AML platform. | source ↗ | 2026-05-27 |
*.uppsalasecurity.com | Uppsala Pte. Ltd. (Uppsala Security) | Blockchain Analytics | Korean-origin blockchain surveillance vendor incorporated in Singapore with branch offices in Seoul and Tokyo. Operates Sentinel Protocol crowdsourced threat intelligence platform. ICF API queries TRDB whitelists/blacklists/risk scores in real-time. Products include TRDB / CARA (patent-pending ML risk scoring) / CTDS (STR/CTR reporting) / ICF API. MAS (Monetary Authority of Singapore) grant recipient. Samsung Blockchain Wallet AML integration touches users in 19 countries. INTERPOL GLACY+ project trainer for 47 law enforcement officers from 21 countries. Founder Patrick Kim (ex-Darktrace). | source ↗ | 2026-05-27 |
uppsalasecurity.com | Uppsala Pte. Ltd. (Uppsala Security) | Blockchain Analytics | Root domain of Uppsala Security corporate site and ICF API. | source ↗ | 2026-05-27 |
*.sentinelprotocol.io | Uppsala Pte. Ltd. (Uppsala Security) | Blockchain Analytics | Sentinel Protocol blockchain platform with UPP ERC-20 token. Hosts the UPPward browser extension at uppward.sentinelprotocol.io which logs every URL / domain / wallet address users look up. Crowdsourced threat intelligence platform with community Sentinel contributors incentivized via UPP token rewards. | source ↗ | 2026-05-27 |
sentinelprotocol.io | Uppsala Pte. Ltd. (Uppsala Security) | Blockchain Analytics | Root domain of Sentinel Protocol blockchain product platform. | source ↗ | 2026-05-27 |
*.analytics.coinbase.com | Coinbase Global Inc. | Blockchain Analytics | Coinbase Tracer (formerly Coinbase Analytics) — the surveillance arm of Coinbase sold as a B2B compliance and law-enforcement product. Confirmed federal contracts with DHS/ICE ($1.365M ceiling) / US Secret Service ($183750) / DEA / IRS. FOIA-released ICE contract documents capabilities including transaction demixing / shielded-transaction analysis / multi-hop link analysis / historical geo tracking data. Original technology was acquired from Neutrino — founded by three former Hacking Team employees. | source ↗ | 2026-05-26 |
analytics.coinbase.com | Coinbase Global Inc. | Blockchain Analytics | Root of the Coinbase Tracer surveillance subdomain tree. Surveillance product login at app.analytics.coinbase.com. | source ↗ | 2026-05-26 |
*.burst.cloud | Cloudburst Technologies | Off-Chain Intelligence | Off-chain crypto intelligence platform marketed as "the market leader in off-chain intelligence data for the digital asset market." Self-described "Zero-analyst threat & financial intelligence powered by an autonomous intelligence platform." Landing-page demo shows autonomous tracing of BTC through mixers / attribution to threat actors / generation of OFAC designation packets linking wallets to Lazarus Group identifiers. Strategic partnership with Chainalysis (June 2024) merges off-chain attribution with on-chain analytics for law enforcement and regulatory investigations. Customer base per public disclosures: financial institutions / regulators / exchanges / crypto-native firms / government agencies / law enforcement. CEO Evan Kohlmann (former counterterrorism analyst). $11M total funding ($7M Series A September 2025 led by Borderless Capital with CoinFund / Coinbase Ventures / Strategic Cyber Ventures / Bloccelerate VC participation). New York (Tribeca) HQ; founded 2022. | source ↗ | 2026-05-31 |
burst.cloud | Cloudburst Technologies | Off-Chain Intelligence | Root domain of the Cloudburst Technologies off-chain intelligence platform. | source ↗ | 2026-05-31 |
*.elementus.io | Elementus Inc. | Blockchain Analytics | Blockchain forensics platform self-marketed at elementus.io/products: "Our patented technology de-anonymizes wallets and reveals the interconnected network of entities behind every transaction." Generates risk reports flagging links to Ransomware & APT groups / darknet markets / sanctioned entities. Products include forensic toolkit for blockchain investigators / risk reports / sanctions intelligence / compliance analytics. Customer base per public sources: government agencies / institutional asset managers / financial service companies. $27M total funding ($10M Feb 2023 led by ParaFi Capital with Lightspeed Venture Partners / Velvet Sea Ventures / Pomp Investments / Morgan Creek Digital / Avon Ventures Fidelity-affiliated participation). Founder/CEO Max Galka; founded 2017. Three-tier AWS-direct production infrastructure: AWS Global Accelerator (marketing apex) / AWS CloudFront (api.elementus.io) / AWS ALB (app.elementus.io). 43 W 23rd Street Manhattan HQ. | source ↗ | 2026-05-31 |
elementus.io | Elementus Inc. | Blockchain Analytics | Root domain of the Elementus blockchain forensics platform. | source ↗ | 2026-05-31 |
Generated from the source data on every build. Prefer the raw file? View domains.csv on GitHub.