Scan wallets for threat flags — mixer interactions, sanctions, darknet exposure and phishing associations.