What a reviewer asks a screening vendor for, published: which list versions are live, when we fetched them, what they hash to, and whether an independent check agrees with our parser. This page is generated from the same tables the API reads. The JSON version is at /api/v1/status (no key needed).
Loading live status…
| List | Status | Publisher changed | We fetched | Entries | Crypto addresses | Live batch | SHA-256 of the file |
|---|---|---|---|---|---|---|---|
EU Financial Sanctions European Commission, DG FISMAEU open data, attribution | fresh | 22 Sept 2026 18:01 On each Council regulation; typically weekly | 09 Oct 2026 05:04 2.2 h ago | 6,241 | 0 | batch_073rlr6gv5t0xcvwbx8h2 | cd59eccb0278d331… 24.6 MB |
OFAC Consolidated US Department of the Treasury, Office of Foreign Assets ControlUS Government work, public domain | fresh | 14 Sept 2026 00:00 On designation days; less frequent than the SDN | 09 Oct 2026 05:04 2.2 h ago | 481 | 0 | batch_jc2kbjgjw83oxe3q7k34t | 18cc45744f755268… 1.0 MB |
OFAC SDN US Department of the Treasury, Office of Foreign Assets ControlUS Government work, public domain | fresh | 08 Oct 2026 00:00 On designation days; typically several times a week | 09 Oct 2026 05:03 2.2 h ago | 19,416 | 1,065 | batch_msv2pn41i3xpfby8qzmmg | 259336aa866dda3f… 27.8 MB |
UK OFSI HM Treasury, Office of Financial Sanctions ImplementationOpen Government Licence v3 | fresh | 03 Jun 2026 00:00 On each designation; typically weekly | 09 Oct 2026 05:05 2.2 h ago | 5,135 | 3 | batch_b2eloaw4kf0du0it702q0 | 9585695391b51f72… 15.9 MB |
UN Security Council United Nations Security CouncilUN public data | fresh | 08 Oct 2026 23:00 On each committee decision; irregular | 09 Oct 2026 05:05 2.2 h ago | 1,010 | 0 | batch_3zqcmkpei6a3fiyh6iw3f | b1059ef87f24e821… 2.1 MB |
“Publisher changed” is the date inside the file the publisher serves; “we fetched” is when our refresh last downloaded it successfully. The two differ whenever the publisher has not changed the list. A refresh that parses fewer than half the previous batch’s entries is rejected and the old batch stays live. Every decision records the batch ids it was evaluated against, so the checksum here can be matched to the file you download from the publisher yourself.
Our parse of the OFAC SDN crypto addresses against an independent, separately maintained extract of the same list. Nothing is ingested from it.
Reference extract: 0xB10C/ofac-sanctioned-digital-currency-addresses (MIT). A difference is reported in both directions and investigated; it is never auto-corrected.
A fixed sample of listed names, each perturbed the ways customer data is messy, screened with the default policy. Recall is the share that comes back at or above the review threshold.
| A common transliteration variant | 57/58 | 98.3% |
| A middle token dropped | 96/96 | 100.0% |
| An extra token added | 120/120 | 100.0% |
| Feed | Licence | Rows | Last refresh | Status |
|---|---|---|---|---|
| GraphSense public TagPacks (ransomware, hacks, mixers, darknet, scams, exchanges)graphsense | MIT (Iknaio / AIT); every tag carries its own public source URL | 79,440 | 2h ago | ok |
| Bybit LazarusBounty hacker addresses (Bybit theft, Feb 2025)lazarus-bounty | Public API of Bybit's LazarusBounty program (Bybit terms of service; no separate data licence stated) | 26,181 | 2h ago | ok |
| Ransomwhere (ransomware payment addresses)ransomwhere | CC BY 4.0 (Zenodo 10.5281/zenodo.6512122) | 11,186 | 2h ago | ok |
Change feed, last 30 days: 0 designation changes, 32 incidents.
| Different casing and punctuation | 120/120 | 100.0% |
| Exact name as listed | 120/120 | 100.0% |
| First name reduced to an initial | 75/75 | 100.0% |
| One letter missing | 116/117 | 99.1% |
| Tokens in a different order | 120/120 | 100.0% |
| Two letters transposed | 112/113 | 99.1% |
“Ordinary names flagged” is the share of a fixed list of everyday personal and business names that would reach a review queue under the default thresholds with no corroborating identifier. It is the noise you tune away with your own policy and allowlist; we publish it rather than hide it.
Both checks are reproducible: npm run verify in the repository runs them against your own copy of the lists. The method is described on the methodology page.
| Forta labelled datasets (phishing, exploiters, malicious contracts)forta | MIT (Forta Foundation); rows derived from Etherscan public labels, 2022 snapshot | 7,891 | 2h ago | ok |
| Exchange proof-of-reserves wallets (DefiLlama-Adapters via wallet-attribution)defillama-cex | MIT (wallet-attribution code); rows restricted to exchange-disclosed wallets and US-seized Silk Road addresses from DefiLlama-Adapters | 4,151 | 2h ago | ok |
| ScamSniffer scam-database (phishing and drainer addresses)scamsniffer | GPL-3.0 (repository licence; commercial use permitted, copyleft on redistribution) | 2,530 | 2h ago | ok |
| MyEtherWallet ethereum-lists darklist (phishing and scam addresses)mew-darklist | MIT (MyEtherWallet) | 652 | 2h ago | ok |
| DeFiHackLabs exploit PoCs (attacker addresses)defihacklabs | Apache-2.0 (repository licence) | 622 | 2h ago | ok |
| OFAC recent actions (mixers, darknet markets, laundering services)ofac-actions | US Government work, public domain | 206 | 2h ago | ok |
| FBI IC3 public service announcementsic3 | US Government work, public domain | 51 | 2h ago | ok |
The contract is built and tested; mainnet and testnet deployments are listed here the day they go live. See the oracle docs.