Time-of-Day Anomaly

Tracked activity is heavily concentrated within a narrow window of the day rather than spread out the way organic human activity usually is.

Why it matters

Heavy concentration in a narrow daily window can indicate automated or scripted behavior, or an operator active outside the timezone they claim.

Bucket tracked transfers by hour of day (UTC) and flag wallets where a narrow window accounts for most of the wallet's activity.

Most of a wallet's tracked transfers falling within the same few hours of the day, day after day.