Source

Ransomwhere

crime-intelactiveredistributable

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: ransomwhere
licence: CC-BY-4.0
attribution: Ransomwhere (ransomwhe.re), CC BY 4.0
cadence: every 1 d
reliability prior: 60
default confidence: trusted provider
url: https://api.ransomwhe.re/export
last fetch: 2026-10-15 18:08 UTC
fetch sha256: 182ef70144fde9bf49dd71e964b80551783d30dcffdf5aad4061694dee8a4cbf
records: 30,088
fetch size: 5.3 MB

Legal basislegal/data-sources.md

basis: CC BY 4.0 (ransomwhe.re); redistributable with attribution; the API export is public.
signed off: 2026-09-22, owner
personal data: no — addresses and family names

The registry in the codex is the source of truth; every row is signed off by the owner before the source is activated.

Claims from this sourcenewest first · the first 10

AkiraransomwarepaymentStorm-1567threat actor
subjecttransaction71e4dae29e…cb8bd4c81b
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24 · 488,528,790 sat · time 2024-02-17 17:17 UTC · url https://ransomwhe.re/#address/bc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_33932btcintel:annotations:33932@v3 sha256:66c372b675004a4e
confidencetrusted provider · 50
Akiraransomwarepayment addressStorm-1567threat actor
subjectaddressbc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Akira · url https://ransomwhe.re/#address/bc1qr0txunr259we37wer7w6et33qyq0n6hv83pw24
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_33931btcintel:annotations:33931@v2 sha256:f8e8e1d3b02dfc89
confidencetrusted provider · 50
AkiraransomwarepaymentStorm-1567threat actor
subjecttransactione5d93079a7…30aacf13de
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc · 1,600,000 sat · time 2024-04-19 15:28 UTC · url https://ransomwhe.re/#address/bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_33930btcintel:annotations:33930@v3 sha256:5f2a9bd202ad111b
confidencetrusted provider · 50
AkiraransomwarepaymentStorm-1567threat actor
subjecttransactionc1d9d0ab1b…9f3ffcf27c
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc · 57,126,201 sat · time 2024-04-19 16:07 UTC · url https://ransomwhe.re/#address/bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_33929btcintel:annotations:33929@v3 sha256:4e9163c48bdfcd3a
confidencetrusted provider · 50
AkiraransomwarepaymentStorm-1567threat actor
subjecttransaction9a24a0ad4b…f1b57809d7
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc · 207,659,106 sat · time 2024-04-20 04:44 UTC · url https://ransomwhe.re/#address/bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_33928btcintel:annotations:33928@v3 sha256:4cdd6102df3aab93
confidencetrusted provider · 50
AkiraransomwarepaymentStorm-1567threat actor
subjecttransactioned99b2fb16…1578dd1447
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc · 87,600,000 sat · time 2024-04-20 10:23 UTC · url https://ransomwhe.re/#address/bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_33927btcintel:annotations:33927@v3 sha256:1184c488249a8482
confidencetrusted provider · 50
Akiraransomwarepayment addressStorm-1567threat actor
subjectaddressbc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Akira · url https://ransomwhe.re/#address/bc1q0lwpz2yufw3x9as6f679lwk8jx43g44683x5mc
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_33926btcintel:annotations:33926@v2 sha256:96cce6a3f5793575
confidencetrusted provider · 50
AkiraransomwarepaymentStorm-1567threat actor
subjecttransaction5d0769f3b1…98fae52f92
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8 · 374,791,400 sat · time 2024-01-24 22:04 UTC · url https://ransomwhe.re/#address/bc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_33925btcintel:annotations:33925@v3 sha256:05d963432034eb80
confidencetrusted provider · 50
Akiraransomwarepayment addressStorm-1567threat actor
subjectaddressbc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Akira · url https://ransomwhe.re/#address/bc1qhzd63mz9mfucak7yzfn65p6rcsgztnsqr3dak8
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_33924btcintel:annotations:33924@v2 sha256:372d9c2d063fd168
confidencetrusted provider · 50
AkiraransomwarepaymentStorm-1567threat actor
subjecttransaction800dd4a712…fb6b5d0767
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1qfdzu6uv2nek524pe7lz4w0mxtt9898vfaegdaj · 1,851,015,380 sat · time 2023-08-18 00:18 UTC · url https://ransomwhe.re/#address/bc1qfdzu6uv2nek524pe7lz4w0mxtt9898vfaegdaj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_33923btcintel:annotations:33923@v3 sha256:3834cd2141f4729b
confidencetrusted provider · 50