v1.6.0 — Cloudburst Technologies and Elementus

1.6.0 - 2026-05-31

Added

Cloudburst Technologies (burst.cloud, *.burst.cloud) — NY-based off-chain crypto intelligence platform with strategic Chainalysis partnership. AI-driven autonomous-agent attribution targeting OFAC designation packet generation for law enforcement. First entry in the new "Off-Chain Intelligence" category.

Elementus Inc. (elementus.io, *.elementus.io) — NY-based blockchain forensics platform self-marketed as patented wallet-deanonymization technology. Government and institutional customer base. Three-tier AWS-direct production (Global Accelerator + CloudFront + ALB).

New Categories

Off-Chain Intelligence — Vendors whose product is OSINT-driven attribution of crypto actors via non-blockchain data sources, typically partnering with on-chain analytics vendors rather than competing with them. First entry: Cloudburst Technologies.

Fixed

Regenerated all blocklist artifacts (blocklist.txt, hosts.txt, satoshishield.abp, blocklist-tier2.txt, hosts-tier2.txt, satoshishield-tier2.abp, blocklist-all.txt), which had been stale since v1.3. The artifacts now reflect all v1.4, v1.5.0, and v1.6.0 entries.

Added build_blocklists.py to automate artifact regeneration from domains.csv and domains-tier2.csv going forward.

Release URL: https://github.com/cypherpilgrim/satoshishield/releases/tag/v1.6.0

See CHANGELOG.md for the full entry.

v1.5.0 — Ten new Tier 1 vendors, geographic spread complete

What's new

Ten new Tier 1 surveillance vendors added to the blocklist following structured Step 1–7 verification.

Vendors added

• AnChain.AI (US; IRS-CI federal contractor, Award 2032H524C00033)
• Bitrace Tech (Hong Kong; first Asian Tier 1, pure-surveillance KYA API)
• BIGG Digital Assets / Blockchain Intelligence Group (Canada; publicly traded TSXV: BIGG, three-domain block with explicit Netcoins preservation)
• Coinbase Tracer (US; ICE/USSS/DEA/IRS federal contractor — first surgical-subdomain block in the project)
• Iknaio Cryptoasset Analytics (Austria; first European Tier 1 and first academic spin-off; preserves graphsense.org open-source domain)
• Inca Digital (US; DARPA + CFTC federal contractor)
• Lukka (US; consolidated with acquired Coinfirm)
• Match Systems (Singapore/Dubai; Russian/CIS-origin)
• SlowMist (China; preserves github.com/slowmist open-source repos)
• Uppsala Security (Korea/Singapore; completes the Match Systems / SlowMist / Uppsala data-federation triangle)

Whitestream was evaluated and excluded — research determined the firm's activities did not meet surveillance inclusion criteria.

Patterns established

• Surgical-subdomain blocking for dual-use consumer-facing companies (Coinbase Tracer)
• Explicit consumer-exchange preservation under a surveillance parent (BIGG / Netcoins)
• Commercial-vs-open-source domain separation (Iknaio / GraphSense, SlowMist / github.com)

Numbers

• Tier 1 vendor count: 12 → 22
• domains.csv data rows: 29 → 65
• regex.txt patterns: 14 → 32

How to update

Pi-hole and AdGuard Home installations pulling from the raw blocklist URLs will receive the new domains automatically on their next gravity update. No action needed for existing users.

See CHANGELOG.md for the full entry.