Address Feature Taxonomy
Address features describe what was observed about an address. A feature is a fact, not a verdict: the taxonomy carries no score, risk level, list status, or action.
Every classified feature is identified by a stable canonicalKey. Keys and their hierarchy are versioned together; a screening result stamps the taxonomyVersion it was interpreted under and the mappingVersion of the vendor mapping snapshot that produced it.
Version and how to fetch
The page, the API and the download publish the same nodes for a given version.
- Taxonomy version:
2026-09-10 - Nodes:
290 - Fetch programmatically:
GET /api/v2/taxonomy
Download the catalog (JSON) · Download the catalog (CSV)
Catalog
Both leaf and parent nodes are valid direct mapping targets. Browse a dimension or search by key or name.
Identity
| Level 1 | Level 2 | Level 3 | Level 4 | Canonical key |
|---|---|---|---|---|
| Activity Type | identity.activity | |||
| Content Activity | identity.activity.content | |||
| Gore Content | identity.activity.content.gore | |||
| Online Piracy | identity.activity.content.online_piracy | |||
| Religion-related Activity | identity.activity.content.religion | |||
| Spam | identity.activity.content.spam | |||
| Troll Factory | identity.activity.content.troll_factory | |||
| Cyber Activity | identity.activity.cyber | |||
| Anonymous Live Chat | identity.activity.cyber.anonymous_live_chat | |||
| Antidetect Browser | identity.activity.cyber.antidetect_browser | |||
| Contract Exploitation | identity.activity.cyber.contract_exploitation | |||
| Cybercrime — Generic | identity.activity.cyber.cybercrime | |||
| DDoS Service | identity.activity.cyber.ddos | |||
| Hacking | identity.activity.cyber.hacking | |||
| Hash Decrypt | identity.activity.cyber.hash_decrypt | |||
| Malicious Mining | identity.activity.cyber.malicious_mining | |||
| Malware | identity.activity.cyber.malware | |||
| Phishing | identity.activity.cyber.phishing | |||
| Ransomware | identity.activity.cyber.ransomware | |||
| Threat Actor | identity.activity.cyber.threat_actor | |||
| Drug-related Activity | identity.activity.drug_related | |||
| Extortion | identity.activity.extortion | |||
| Blackmail | identity.activity.extortion.blackmail | |||
| Sextortion | identity.activity.extortion.sextortion | |||
| Extremism | identity.activity.extremism | |||
| Extremist Group | identity.activity.extremism.extremist_group | |||
| Financial Crime | identity.activity.financial_crime.generic | |||
| Money Laundering | identity.activity.financial_crime.money_laundering | |||
| Money Mule | identity.activity.financial_crime.money_mule | |||
| Fraud | identity.activity.fraud | |||
| Address Poisoning | identity.activity.fraud.address_poisoning | |||
| Advance Fee Scam | identity.activity.fraud.advance_fee_scam | |||
| Affinity Scam | identity.activity.fraud.affinity_scam | |||
| Airdrop Scam | identity.activity.fraud.airdrop_scam | |||
| Approval Scam | identity.activity.fraud.approval_scam | |||
| Asset Recovery Scam | identity.activity.fraud.asset_recovery_scam | |||
| Bait and Switch Scam | identity.activity.fraud.bait_and_switch_scam | |||
| BEC Scam | identity.activity.fraud.bec_scam | |||
| Chargeback Fraud | identity.activity.fraud.chargeback | |||
| Deepfake | identity.activity.fraud.deepfake | |||
| Donation Scam | identity.activity.fraud.donation_scam | |||
| Fake Job Listing Scam | identity.activity.fraud.fake_job_listing | |||
| Fake KYC | identity.activity.fraud.fake_kyc | |||
| Fake Project | identity.activity.fraud.fake_project | |||
| Fake Returns | identity.activity.fraud.fake_returns | |||
| Giveaway Scam | identity.activity.fraud.giveaway_scam | |||
| Honeypot | identity.activity.fraud.honeypot | |||
| ICO Scam | identity.activity.fraud.ico_scam | |||
| Impersonation | identity.activity.fraud.impersonation | |||
| Investment Scam | identity.activity.fraud.investment_scam | |||
| Livestream Scam | identity.activity.fraud.livestream_scam | |||
| Mining Scam | identity.activity.fraud.mining_scam | |||
| NFT Listing Scam | identity.activity.fraud.nft_listing_scam | |||
| OTC Scam | identity.activity.fraud.otc_scam | |||
| Pig Butchering | identity.activity.fraud.pig_butchering | |||
| Ponzi Scheme | identity.activity.fraud.ponzi | |||
| Pyramid Scheme | identity.activity.fraud.pyramid_scheme | |||
| Romance Scam | identity.activity.fraud.romance_scam | |||
| Rugpull | identity.activity.fraud.rugpull | |||
| Scam | identity.activity.fraud.scam | |||
| SIM Swap | identity.activity.fraud.sim_swap | |||
| Tech Support Scam | identity.activity.fraud.tech_support_scam | |||
| Fraudulent Trading Platform | identity.activity.fraud.trading_platform_scam | |||
| Illegal Activity | identity.activity.illegal | |||
| Market Abuse | identity.activity.market_abuse | |||
| Market Manipulation | identity.activity.market_abuse.manipulation | |||
| Network Participation | identity.activity.network | |||
| Genesis | identity.activity.network.genesis | |||
| Miner | identity.activity.network.miner | |||
| Validator | identity.activity.network.validator | |||
| Political Activity | identity.activity.political | |||
| Activist Fundraising | identity.activity.political.activist_fundraising | |||
| Political Activity | identity.activity.political.general | |||
| Sexual Content | identity.activity.sexual_content | |||
| CSAM | identity.activity.sexual_content.csam | |||
| Pornography | identity.activity.sexual_content.pornography | |||
| Terrorism | identity.activity.terrorism | |||
| Terrorism Financing | identity.activity.extremism.terrorism_financing | |||
| Theft | identity.activity.theft | |||
| Trading | identity.activity.trading | |||
| MEV Bot | identity.activity.trading.mev_bot | |||
| Quantitative Trading | identity.activity.trading.quant_market_maker | |||
| Trafficking | identity.activity.trafficking | |||
| Human Trafficking | identity.activity.trafficking.human_trafficking | |||
| Weapons Trafficking | identity.activity.trafficking.weapons | |||
| Entity Type | identity.entity | |||
| Digital System | identity.entity.digital_system | |||
| Blockchain Network | identity.entity.digital_system.blockchain | |||
| On-chain Object | identity.entity.onchain_object | |||
| Smart Contract | identity.entity.contract.generic | |||
| Factory Contract | identity.entity.contract.factory | |||
| Fraud-proof Contract | identity.entity.contract.fraud_proof | |||
| Liquidity Pair | identity.entity.contract.liquidity_pair | |||
| Router | identity.entity.contract.router | |||
| Token Contract | identity.entity.contract.token | |||
| Wallet | identity.entity.wallet | |||
| Cold Wallet | identity.entity.wallet.cold | |||
| Company Treasury | identity.entity.wallet.company_treasury | |||
| Deposit Wallet | identity.entity.wallet.deposit | |||
| Wallet | identity.entity.wallet.generic | |||
| Hot Wallet | identity.entity.wallet.hot | |||
| Multisig Wallet | identity.entity.wallet.multisig | |||
| Privacy Wallet | identity.entity.wallet.privacy | |||
| Shielded Wallet | identity.entity.wallet.shielded | |||
| Organization | identity.entity.organization | |||
| Criminal Organization | identity.entity.organization.criminal | |||
| DAO | identity.entity.organization.dao | |||
| Donation Organization | identity.entity.organization.donation | |||
| Foundation | identity.entity.organization.foundation | |||
| Law Enforcement | identity.entity.organization.law_enforcement | |||
| Nonprofit | identity.entity.organization.nonprofit | |||
| Charity | identity.entity.organization.nonprofit.charity | |||
| Token Team | identity.entity.organization.token_team | |||
| Person | identity.entity.person | |||
| Individual | identity.entity.person.individual | |||
| Known Criminal | identity.entity.person.known_criminal | |||
| Service Profile | identity.service | |||
| Application | identity.service.application | |||
| Decentralized Application | identity.service.application.dapp | |||
| Entertainment | identity.service.application.entertainment | |||
| Faucet | identity.service.application.faucet | |||
| Gambling Platform | identity.service.application.gambling | |||
| Gaming | identity.service.application.gaming | |||
| Microtransactions Service | identity.service.application.microtransactions | |||
| NFT Application | identity.service.application.nft | |||
| Sport | identity.service.application.sport | |||
| Service Attribute | identity.service.attribute | |||
| Operating Channel | identity.service.attribute.channel | |||
| Telegram Exchange | identity.service.attribute.channel.telegram | |||
| Market Scope | identity.service.attribute.market_scope | |||
| Foreign Exchange | identity.service.attribute.market_scope.foreign | |||
| Global Exchange | identity.service.attribute.market_scope.global | |||
| Regional Exchange | identity.service.attribute.market_scope.regional | |||
| Settlement Capability | identity.service.attribute.settlement | |||
| Fiat Support | identity.service.attribute.settlement.fiat | |||
| Commerce | identity.service.commerce | |||
| Advertising | identity.service.commerce.advertising | |||
| Carding | identity.service.commerce.carding | |||
| Credit Card Checker | identity.service.commerce.credit_card_checker | |||
| Credit Card Data Vendor | identity.service.commerce.credit_card_data_vendor | |||
| Dark Forum | identity.service.commerce.dark_forum | |||
| Dark Market | identity.service.commerce.dark_market | |||
| Centralized Dark Market | identity.service.commerce.dark_market.centralized | |||
| Decentralized Dark Market | identity.service.commerce.dark_market.decentralized | |||
| Dark Vendor Shop | identity.service.commerce.dark_market.vendor_shop | |||
| Dark Service | identity.service.commerce.dark_service | |||
| Dual-use Goods | identity.service.commerce.dual_use | |||
| Energy Service | identity.service.commerce.energy | |||
| Fraud Shop | identity.service.commerce.fraud_shop | |||
| Full-Info Shop | identity.service.commerce.full_info_shop | |||
| Business Service | identity.service.commerce.general_business | |||
| Hitman Service | identity.service.commerce.hitman | |||
| Leak Shop | identity.service.commerce.leak_shop | |||
| Marketplace | identity.service.commerce.marketplace | |||
| Auction | identity.service.commerce.marketplace.auction | |||
| Merchant | identity.service.commerce.merchant | |||
| E-Commerce | identity.service.commerce.merchant.ecommerce | |||
| Shop | identity.service.commerce.merchant.shop | |||
| News | identity.service.commerce.news | |||
| RDP Shop | identity.service.commerce.rdp_shop | |||
| SSN Checker | identity.service.commerce.ssn_checker | |||
| SSN Shop | identity.service.commerce.ssn_shop | |||
| Streaming | identity.service.commerce.streaming | |||
| VPN Service | identity.service.commerce.vpn | |||
| Finance | identity.service.finance | |||
| Asset Management | identity.service.finance.asset_management | |||
| Crypto ATM | identity.service.finance.atm | |||
| CeFi Service | identity.service.finance.cefi | |||
| Derivatives | identity.service.finance.derivatives | |||
| Escrow Service | identity.service.finance.escrow | |||
| ETF | identity.service.finance.etf | |||
| Exchange | identity.service.finance.exchange | |||
| Broker | identity.service.finance.exchange.broker_platform | |||
| Centralized Exchange | identity.service.finance.exchange.centralized | |||
| Coin Swap Service | identity.service.finance.exchange.coin_swap | |||
| Decentralized Exchange | identity.service.finance.exchange.decentralized | |||
| High-Risk Exchange | identity.service.finance.exchange.high_risk | |||
| Instant Exchange | identity.service.finance.exchange.instant | |||
| Fiat Ramp | identity.service.finance.exchange.on_off_ramp | |||
| OTC Desk | identity.service.finance.exchange.otc | |||
| P2P Exchange | identity.service.finance.exchange.p2p | |||
| General Financial Service | identity.service.finance.general | |||
| Insurance | identity.service.finance.insurance | |||
| Investment Organization | identity.service.finance.investment_organization | |||
| Investment Fund | identity.service.finance.investment_organization.fund | |||
| Investment Syndicate | identity.service.finance.investment_organization.syndicate | |||
| Venture Capital | identity.service.finance.investment_organization.venture_capital | |||
| Mixer | identity.service.finance.mixer | |||
| Payment Processor | identity.service.finance.payment_processor | |||
| Stablecoin Project | identity.service.finance.stablecoin_project | |||
| Token Sale | identity.service.finance.token_sale | |||
| ICO | identity.service.finance.token_sale.ico | |||
| Underground Bank | identity.service.finance.underground_bank | |||
| General Service | identity.service.general | |||
| General Service | identity.service.general.unnamed | |||
| Infrastructure | identity.service.infrastructure | |||
| Authentication Service | identity.service.infrastructure.authentication | |||
| Data Service | identity.service.infrastructure.data | |||
| General Infrastructure Service | identity.service.infrastructure.general | |||
| Hosting Provider | identity.service.infrastructure.hosting | |||
| Bulletproof Hosting Provider | identity.service.infrastructure.hosting.bulletproof | |||
| On-chain Identity Service | identity.service.infrastructure.identity_provider | |||
| Leak Checker | identity.service.infrastructure.leak_checker | |||
| Mining Pool | identity.service.infrastructure.mining_pool | |||
| Oracle | identity.service.infrastructure.oracle | |||
| Outsourcing Provider | identity.service.infrastructure.outsourcing | |||
| Scaling Network | identity.service.infrastructure.scaling | |||
| Layer 2 | identity.service.infrastructure.scaling.layer2 | |||
| Sidechain | identity.service.infrastructure.scaling.sidechain | |||
| Software Development | identity.service.infrastructure.software_development | |||
| Privacy | identity.service.privacy | |||
| Privacy Service | identity.service.privacy.general | |||
| Protocol | identity.service.protocol | |||
| Bridge | identity.service.protocol.bridge | |||
| DeFi Protocol | identity.service.protocol.defi | |||
| Lending Protocol | identity.service.protocol.defi.lending | |||
| Liquid Staking Protocol | identity.service.protocol.defi.liquid_staking | |||
| Vault Protocol | identity.service.protocol.defi.vault | |||
| Yield Protocol | identity.service.protocol.defi.yield | |||
| Privacy Protocol | identity.service.protocol.privacy | |||
| Wallet Service | identity.service.wallet | |||
| Custodial Service | identity.service.wallet.custodial | |||
| Wallet Product | identity.service.wallet.product | |||
| Hardware Wallet | identity.service.wallet.product.hardware | |||
| Software Wallet | identity.service.wallet.product.software | |||
| Wallet Provider | identity.service.wallet.provider | |||
- Activity Type
identity.activity - Content Activity
identity.activity.content - Gore Content
identity.activity.content.gore - Online Piracy
identity.activity.content.online_piracy - Religion-related Activity
identity.activity.content.religion - Spam
identity.activity.content.spam - Troll Factory
identity.activity.content.troll_factory - Cyber Activity
identity.activity.cyber - Anonymous Live Chat
identity.activity.cyber.anonymous_live_chat - Antidetect Browser
identity.activity.cyber.antidetect_browser - Contract Exploitation
identity.activity.cyber.contract_exploitation - Cybercrime — Generic
identity.activity.cyber.cybercrime - DDoS Service
identity.activity.cyber.ddos - Hacking
identity.activity.cyber.hacking - Hash Decrypt
identity.activity.cyber.hash_decrypt - Malicious Mining
identity.activity.cyber.malicious_mining - Malware
identity.activity.cyber.malware - Phishing
identity.activity.cyber.phishing - Ransomware
identity.activity.cyber.ransomware - Threat Actor
identity.activity.cyber.threat_actor - Drug-related Activity
identity.activity.drug_related - Extortion
identity.activity.extortion - Blackmail
identity.activity.extortion.blackmail - Sextortion
identity.activity.extortion.sextortion - Extremism
identity.activity.extremism - Extremist Group
identity.activity.extremism.extremist_group - Financial Crime
identity.activity.financial_crime.generic - Money Laundering
identity.activity.financial_crime.money_laundering - Money Mule
identity.activity.financial_crime.money_mule - Fraud
identity.activity.fraud - Address Poisoning
identity.activity.fraud.address_poisoning - Advance Fee Scam
identity.activity.fraud.advance_fee_scam - Affinity Scam
identity.activity.fraud.affinity_scam - Airdrop Scam
identity.activity.fraud.airdrop_scam - Approval Scam
identity.activity.fraud.approval_scam - Asset Recovery Scam
identity.activity.fraud.asset_recovery_scam - Bait and Switch Scam
identity.activity.fraud.bait_and_switch_scam - BEC Scam
identity.activity.fraud.bec_scam - Chargeback Fraud
identity.activity.fraud.chargeback - Deepfake
identity.activity.fraud.deepfake - Donation Scam
identity.activity.fraud.donation_scam - Fake Job Listing Scam
identity.activity.fraud.fake_job_listing - Fake KYC
identity.activity.fraud.fake_kyc - Fake Project
identity.activity.fraud.fake_project - Fake Returns
identity.activity.fraud.fake_returns - Giveaway Scam
identity.activity.fraud.giveaway_scam - Honeypot
identity.activity.fraud.honeypot - ICO Scam
identity.activity.fraud.ico_scam - Impersonation
identity.activity.fraud.impersonation - Investment Scam
identity.activity.fraud.investment_scam - Livestream Scam
identity.activity.fraud.livestream_scam - Mining Scam
identity.activity.fraud.mining_scam - NFT Listing Scam
identity.activity.fraud.nft_listing_scam - OTC Scam
identity.activity.fraud.otc_scam - Pig Butchering
identity.activity.fraud.pig_butchering - Ponzi Scheme
identity.activity.fraud.ponzi - Pyramid Scheme
identity.activity.fraud.pyramid_scheme - Romance Scam
identity.activity.fraud.romance_scam - Rugpull
identity.activity.fraud.rugpull - Scam
identity.activity.fraud.scam - SIM Swap
identity.activity.fraud.sim_swap - Tech Support Scam
identity.activity.fraud.tech_support_scam - Fraudulent Trading Platform
identity.activity.fraud.trading_platform_scam - Illegal Activity
identity.activity.illegal - Market Abuse
identity.activity.market_abuse - Market Manipulation
identity.activity.market_abuse.manipulation - Network Participation
identity.activity.network - Genesis
identity.activity.network.genesis - Miner
identity.activity.network.miner - Validator
identity.activity.network.validator - Political Activity
identity.activity.political - Activist Fundraising
identity.activity.political.activist_fundraising - Political Activity
identity.activity.political.general - Sexual Content
identity.activity.sexual_content - CSAM
identity.activity.sexual_content.csam - Pornography
identity.activity.sexual_content.pornography - Terrorism
identity.activity.terrorism - Terrorism Financing
identity.activity.extremism.terrorism_financing - Theft
identity.activity.theft - Trading
identity.activity.trading - MEV Bot
identity.activity.trading.mev_bot - Quantitative Trading
identity.activity.trading.quant_market_maker - Trafficking
identity.activity.trafficking - Human Trafficking
identity.activity.trafficking.human_trafficking - Weapons Trafficking
identity.activity.trafficking.weapons - Entity Type
identity.entity - Digital System
identity.entity.digital_system - Blockchain Network
identity.entity.digital_system.blockchain - On-chain Object
identity.entity.onchain_object - Smart Contract
identity.entity.contract.generic - Factory Contract
identity.entity.contract.factory - Fraud-proof Contract
identity.entity.contract.fraud_proof - Liquidity Pair
identity.entity.contract.liquidity_pair - Router
identity.entity.contract.router - Token Contract
identity.entity.contract.token - Wallet
identity.entity.wallet - Cold Wallet
identity.entity.wallet.cold - Company Treasury
identity.entity.wallet.company_treasury - Deposit Wallet
identity.entity.wallet.deposit - Wallet
identity.entity.wallet.generic - Hot Wallet
identity.entity.wallet.hot - Multisig Wallet
identity.entity.wallet.multisig - Privacy Wallet
identity.entity.wallet.privacy - Shielded Wallet
identity.entity.wallet.shielded - Organization
identity.entity.organization - Criminal Organization
identity.entity.organization.criminal - DAO
identity.entity.organization.dao - Donation Organization
identity.entity.organization.donation - Foundation
identity.entity.organization.foundation - Law Enforcement
identity.entity.organization.law_enforcement - Nonprofit
identity.entity.organization.nonprofit - Charity
identity.entity.organization.nonprofit.charity - Token Team
identity.entity.organization.token_team - Person
identity.entity.person - Individual
identity.entity.person.individual - Known Criminal
identity.entity.person.known_criminal - Service Profile
identity.service - Application
identity.service.application - Decentralized Application
identity.service.application.dapp - Entertainment
identity.service.application.entertainment - Faucet
identity.service.application.faucet - Gambling Platform
identity.service.application.gambling - Gaming
identity.service.application.gaming - Microtransactions Service
identity.service.application.microtransactions - NFT Application
identity.service.application.nft - Sport
identity.service.application.sport - Service Attribute
identity.service.attribute - Operating Channel
identity.service.attribute.channel - Telegram Exchange
identity.service.attribute.channel.telegram - Market Scope
identity.service.attribute.market_scope - Foreign Exchange
identity.service.attribute.market_scope.foreign - Global Exchange
identity.service.attribute.market_scope.global - Regional Exchange
identity.service.attribute.market_scope.regional - Settlement Capability
identity.service.attribute.settlement - Fiat Support
identity.service.attribute.settlement.fiat - Commerce
identity.service.commerce - Advertising
identity.service.commerce.advertising - Carding
identity.service.commerce.carding - Credit Card Checker
identity.service.commerce.credit_card_checker - Credit Card Data Vendor
identity.service.commerce.credit_card_data_vendor - Dark Forum
identity.service.commerce.dark_forum - Dark Market
identity.service.commerce.dark_market - Centralized Dark Market
identity.service.commerce.dark_market.centralized - Decentralized Dark Market
identity.service.commerce.dark_market.decentralized - Dark Vendor Shop
identity.service.commerce.dark_market.vendor_shop - Dark Service
identity.service.commerce.dark_service - Dual-use Goods
identity.service.commerce.dual_use - Energy Service
identity.service.commerce.energy - Fraud Shop
identity.service.commerce.fraud_shop - Full-Info Shop
identity.service.commerce.full_info_shop - Business Service
identity.service.commerce.general_business - Hitman Service
identity.service.commerce.hitman - Leak Shop
identity.service.commerce.leak_shop - Marketplace
identity.service.commerce.marketplace - Auction
identity.service.commerce.marketplace.auction - Merchant
identity.service.commerce.merchant - E-Commerce
identity.service.commerce.merchant.ecommerce - Shop
identity.service.commerce.merchant.shop - News
identity.service.commerce.news - RDP Shop
identity.service.commerce.rdp_shop - SSN Checker
identity.service.commerce.ssn_checker - SSN Shop
identity.service.commerce.ssn_shop - Streaming
identity.service.commerce.streaming - VPN Service
identity.service.commerce.vpn - Finance
identity.service.finance - Asset Management
identity.service.finance.asset_management - Crypto ATM
identity.service.finance.atm - CeFi Service
identity.service.finance.cefi - Derivatives
identity.service.finance.derivatives - Escrow Service
identity.service.finance.escrow - ETF
identity.service.finance.etf - Exchange
identity.service.finance.exchange - Broker
identity.service.finance.exchange.broker_platform - Centralized Exchange
identity.service.finance.exchange.centralized - Coin Swap Service
identity.service.finance.exchange.coin_swap - Decentralized Exchange
identity.service.finance.exchange.decentralized - High-Risk Exchange
identity.service.finance.exchange.high_risk - Instant Exchange
identity.service.finance.exchange.instant - Fiat Ramp
identity.service.finance.exchange.on_off_ramp - OTC Desk
identity.service.finance.exchange.otc - P2P Exchange
identity.service.finance.exchange.p2p - General Financial Service
identity.service.finance.general - Insurance
identity.service.finance.insurance - Investment Organization
identity.service.finance.investment_organization - Investment Fund
identity.service.finance.investment_organization.fund - Investment Syndicate
identity.service.finance.investment_organization.syndicate - Venture Capital
identity.service.finance.investment_organization.venture_capital - Mixer
identity.service.finance.mixer - Payment Processor
identity.service.finance.payment_processor - Stablecoin Project
identity.service.finance.stablecoin_project - Token Sale
identity.service.finance.token_sale - ICO
identity.service.finance.token_sale.ico - Underground Bank
identity.service.finance.underground_bank - General Service
identity.service.general - General Service
identity.service.general.unnamed - Infrastructure
identity.service.infrastructure - Authentication Service
identity.service.infrastructure.authentication - Data Service
identity.service.infrastructure.data - General Infrastructure Service
identity.service.infrastructure.general - Hosting Provider
identity.service.infrastructure.hosting - Bulletproof Hosting Provider
identity.service.infrastructure.hosting.bulletproof - On-chain Identity Service
identity.service.infrastructure.identity_provider - Leak Checker
identity.service.infrastructure.leak_checker - Mining Pool
identity.service.infrastructure.mining_pool - Oracle
identity.service.infrastructure.oracle - Outsourcing Provider
identity.service.infrastructure.outsourcing - Scaling Network
identity.service.infrastructure.scaling - Layer 2
identity.service.infrastructure.scaling.layer2 - Sidechain
identity.service.infrastructure.scaling.sidechain - Software Development
identity.service.infrastructure.software_development - Privacy
identity.service.privacy - Privacy Service
identity.service.privacy.general - Protocol
identity.service.protocol - Bridge
identity.service.protocol.bridge - DeFi Protocol
identity.service.protocol.defi - Lending Protocol
identity.service.protocol.defi.lending - Liquid Staking Protocol
identity.service.protocol.defi.liquid_staking - Vault Protocol
identity.service.protocol.defi.vault - Yield Protocol
identity.service.protocol.defi.yield - Privacy Protocol
identity.service.protocol.privacy - Wallet Service
identity.service.wallet - Custodial Service
identity.service.wallet.custodial - Wallet Product
identity.service.wallet.product - Hardware Wallet
identity.service.wallet.product.hardware - Software Wallet
identity.service.wallet.product.software - Wallet Provider
identity.service.wallet.provider
On-chain Behavior
| Level 1 | Level 2 | Level 3 | Canonical key |
|---|---|---|---|
| Asset Activity | behavior.asset | ||
| Airdrop Participation | behavior.asset.airdrop | ||
| Consensus Activity | behavior.consensus | ||
| Staking | behavior.consensus.staking | ||
| Ethereum 2 Staking | behavior.consensus.staking.ethereum2 | ||
| Contract Operations | behavior.contract | ||
| Contract Deployment | behavior.contract.deployment | ||
| Transaction Pattern | behavior.fee | ||
| High Transaction Fee | behavior.fee.high_fee | ||
| Protocol Interaction | behavior.protocol | ||
| Bridge Interaction | behavior.protocol.bridge_interaction | ||
| CeFi Interaction | behavior.protocol.cefi_interaction | ||
| DeFi Interaction | behavior.protocol.defi_interaction | ||
| DEX Interaction | behavior.protocol.defi_interaction.dex | ||
| Lending Interaction | behavior.protocol.defi_interaction.lending | ||
| Vault Interaction | behavior.protocol.defi_interaction.vault | ||
| Yield Aggregator Interaction | behavior.protocol.defi_interaction.yield_aggregator | ||
| Yield Farming | behavior.protocol.defi_interaction.yield_farming | ||
- Asset Activity
behavior.asset - Airdrop Participation
behavior.asset.airdrop - Consensus Activity
behavior.consensus - Staking
behavior.consensus.staking - Ethereum 2 Staking
behavior.consensus.staking.ethereum2 - Contract Operations
behavior.contract - Contract Deployment
behavior.contract.deployment - Transaction Pattern
behavior.fee - High Transaction Fee
behavior.fee.high_fee - Protocol Interaction
behavior.protocol - Bridge Interaction
behavior.protocol.bridge_interaction - CeFi Interaction
behavior.protocol.cefi_interaction - DeFi Interaction
behavior.protocol.defi_interaction - DEX Interaction
behavior.protocol.defi_interaction.dex - Lending Interaction
behavior.protocol.defi_interaction.lending - Vault Interaction
behavior.protocol.defi_interaction.vault - Yield Aggregator Interaction
behavior.protocol.defi_interaction.yield_aggregator - Yield Farming
behavior.protocol.defi_interaction.yield_farming
Address Graph
| Level 1 | Level 2 | Canonical key |
|---|---|---|
| Affiliation | graph.affiliation | |
| Entity-related Address | graph.affiliation.entity_related | |
| Risk Exposure | graph.exposure | |
| Malicious Address Exposure | graph.exposure.malicious_address |
- Affiliation
graph.affiliation - Entity-related Address
graph.affiliation.entity_related - Risk Exposure
graph.exposure - Malicious Address Exposure
graph.exposure.malicious_address
On-chain State & Context
| Level 1 | Level 2 | Canonical key |
|---|---|---|
| Address Security State | state.address | |
| Compromised Address | state.address.compromised_key | |
| Contract State | state.contract | |
| Deprecated Contract | state.contract.deprecated | |
| Proxy Contract | state.contract.proxy | |
| Contract Version | state.contract.version | |
| Vulnerable Contract | state.contract.vulnerable | |
| Protocol Context | state.protocol | |
| Named Protocol | state.protocol.named_protocol | |
| Reserve Context | state.reserve | |
| Proof of Reserve | state.reserve.proof_of_reserve |
- Address Security State
state.address - Compromised Address
state.address.compromised_key - Contract State
state.contract - Deprecated Contract
state.contract.deprecated - Proxy Contract
state.contract.proxy - Contract Version
state.contract.version - Vulnerable Contract
state.contract.vulnerable - Protocol Context
state.protocol - Named Protocol
state.protocol.named_protocol - Reserve Context
state.reserve - Proof of Reserve
state.reserve.proof_of_reserve
External Facts
| Level 1 | Level 2 | Level 3 | Canonical key |
|---|---|---|---|
| Incident Evidence | facts.incident | ||
| Reported Loss | facts.event.reported_loss | ||
| Victim | facts.event.victim | ||
| Contract Exploited | facts.incident.contract_exploited | ||
| Involved in Reported Illicit Event | facts.incident.illicit_involvement | ||
| Malicious Involvement | facts.incident.malicious_involvement | ||
| Involved in Phishing Event | facts.incident.phishing_involvement | ||
| Involved in Ransom Event | facts.incident.ransom_involvement | ||
| Involved in Theft Event | facts.incident.theft_involvement | ||
| Legal Measures | facts.legal | ||
| Published Judgment | facts.legal.published_judgment | ||
| Regulatory Measures | facts.regulatory | ||
| FATF Jurisdiction under Increased Monitoring | facts.regulatory.fatf_increased_monitoring | ||
| FinCEN Primary Money Laundering Concern | facts.regulatory.fincen_primary_concern | ||
| FinCEN Special Measure | facts.regulatory.fincen_special_measure | ||
| High-Risk Jurisdiction | facts.regulatory.high_risk_jurisdiction | ||
| Asset Restrictions | facts.restriction | ||
| Official Freeze | facts.restriction.official_freeze | ||
| Service Restriction | facts.restriction.service_restriction | ||
| Token Blacklisting | facts.restriction.service_restriction.token_blacklist | ||
| Sanctions | facts.sanctions | ||
| EU Sanctions | facts.sanctions.eu | ||
| French Asset-freeze List | facts.sanctions.france | ||
| Sanctioned Entity — Generic | facts.sanctions.generic | ||
| Israel NBCTF List | facts.sanctions.israel_nbctf | ||
| Japan Sanctions | facts.sanctions.japan | ||
| Japan MoF Sanctions | facts.sanctions.japan_mof | ||
| Sanctioned Jurisdiction | facts.sanctions.jurisdiction | ||
| OFAC Sanctions | facts.sanctions.ofac | ||
| UK Sanctions | facts.sanctions.uk | ||
| UK OFSI Sanctions | facts.sanctions.uk_ofsi | ||
- Incident Evidence
facts.incident - Reported Loss
facts.event.reported_loss - Victim
facts.event.victim - Contract Exploited
facts.incident.contract_exploited - Involved in Reported Illicit Event
facts.incident.illicit_involvement - Malicious Involvement
facts.incident.malicious_involvement - Involved in Phishing Event
facts.incident.phishing_involvement - Involved in Ransom Event
facts.incident.ransom_involvement - Involved in Theft Event
facts.incident.theft_involvement - Legal Measures
facts.legal - Published Judgment
facts.legal.published_judgment - Regulatory Measures
facts.regulatory - FATF Jurisdiction under Increased Monitoring
facts.regulatory.fatf_increased_monitoring - FinCEN Primary Money Laundering Concern
facts.regulatory.fincen_primary_concern - FinCEN Special Measure
facts.regulatory.fincen_special_measure - High-Risk Jurisdiction
facts.regulatory.high_risk_jurisdiction - Asset Restrictions
facts.restriction - Official Freeze
facts.restriction.official_freeze - Service Restriction
facts.restriction.service_restriction - Token Blacklisting
facts.restriction.service_restriction.token_blacklist - Sanctions
facts.sanctions - EU Sanctions
facts.sanctions.eu - French Asset-freeze List
facts.sanctions.france - Sanctioned Entity — Generic
facts.sanctions.generic - Israel NBCTF List
facts.sanctions.israel_nbctf - Japan Sanctions
facts.sanctions.japan - Japan MoF Sanctions
facts.sanctions.japan_mof - Sanctioned Jurisdiction
facts.sanctions.jurisdiction - OFAC Sanctions
facts.sanctions.ofac - UK Sanctions
facts.sanctions.uk - UK OFSI Sanctions
facts.sanctions.uk_ofsi
Direct matches and ancestors
A mapped feature returns the key that matched directly in canonicalKey, and its ordered path in ancestorKeys. Ancestors are for navigation and grouping only: they are not additional evidence and must not be counted as extra matches.
Unclassified features may retain the provider’s original term without a canonicalKey.
Whose feature is it
Evidence stays with the role that supplied it. A counterparty's feature is never folded into the screened address's own profile.
An empty or omitted container can also mean the selected provider does not supply that field. Absence is not zero and not a clean finding.
| Field | Describes |
|---|---|
self.features | The screened address itself. |
self.entities[].features | An identified entity behind the address. |
exposure.items[].feature | Something reached through inflow or outflow exposure, with its own direction, ratio, amount and hop count. |
counterparties[].self.features | The other side of a transaction, kept apart from the screened address. |
Example
Selected fields from a recorded sandbox result: the address feature’s direct classification and its ancestor. See the API reference for the complete response fields.
{
"self": {
"features": [
{
"canonicalKey": "facts.sanctions.ofac",
"ancestorKeys": ["facts.sanctions"]
}
]
}
}