JSON

ransomwhe.re ransomware addresses

Cryptocurrency addresses linked to payments for ransomware attacks

Ransomware is a form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for decryption.

Cryptocurrencies have, in recent years, become a common method to transact ransom payments in such attacks. The ransomwhe.re site collects addresses (accounts) that are known to be linked to these payments.

Data overview

Entities:
Total10,452
Searchable10,452
Targets10,452
Entity types:
Cryptocurrency wallets10,452
Publisher:ransomwhe.re / Jack Cable non-official source
Collections:in Warrants and Criminal Entities · OpenSanctions Default
Information:ransomwhe.re
Source data:api.ransomwhe.re · JSON
Last changed:
Last checked: · updated daily

Bulk download

Downloads contain the full set of entities contained in this dataset. You can fetch a simplified tabular form, or detailed, structured data in JSON format. Updated files will be provided once a day at the same location.

File nameExport typeSize
entities.ftm.jsonFollowTheMoney entities5.15 MB
names.txtTarget names text file1.24 KB
senzing.jsonSenzing entity format5.81 MB
source.jsonSource data5.02 MB
statistics.jsonDataset statistics587 B
targets.nested.jsonTargets as nested JSON5.15 MB
targets.simple.csvTargets as simplified CSV2.6 MB

Help: Using the data · format reference · identifier use · commercial licensing

Using the API

You can query the data in this dataset via the application programming interface (API) endpoints below. Please read the introduction for documentation and terms of service.

Use the Reconciliation API in OpenRefine:
For full-text search, use the /search endpoint:
For entity matching, use the /match endpoint:

Recent additions

The following targeted entities have been added to this data source most recently:

AddedNameTypeCountries
bc1qcnw5v94y40ast06eatgalnjpluu2p067qewh46Cryptocurrency wallet
bc1qghj85gz0dkr9jeucana3z4xu50ujtllj50rvj0Cryptocurrency wallet
38uTYmRfywB9F96DHFRh8g15SbfQiZudEqCryptocurrency wallet
bc1qandfxc4knaf943njca77edl9mmegzs83tv8lpxCryptocurrency wallet
bc1qpwwtck0zhzrj56fxeayz6wz5546nlp607qzpvhCryptocurrency wallet
bc1qr0pqfghr9cksfc5arr2rak3lt2y50v03pc76nhCryptocurrency wallet
13rhLTYUKo9ijrR8vinojZqoZTpTe1fm8cCryptocurrency wallet
1GnkF1JtPT6EJcgJRFjArKZHjQs873eUeECryptocurrency wallet
bc1q4frmv39nmvdsxjnen8jm7ykgz68w7p38v5pry9Cryptocurrency wallet
bc1qenh0h6vvm00krm5re7ycst98unulgp4x04dn2uCryptocurrency wallet
bc1qyuunv9pz6f4qpgd0c0wmenu9zhr6u57yjf4afdCryptocurrency wallet
3K7aw3SQEpwUsQdYmDNkakLuXnjUxhrt54Cryptocurrency wallet
3KvZVcGfiL6EmP1py5cToUeXdPXFa5XJN4Cryptocurrency wallet
3L683L8rooZsz73QLH3BcNVpKHFtVQCofWCryptocurrency wallet
3LeZ6P5MHG8XaTEfeSYqAqp7DM7UJUo8fACryptocurrency wallet