Skip to content

API Access

The eCrime.ch API lets professional users integrate tracker and intelligence data into internal workflows.

https://ecrime.ch/api/v1/

API requests use the account API key from your profile settings.

X-API-Key: <your-api-key>

Do not place API keys in browser-side JavaScript, public repositories, screenshots, tickets, or shared examples. Rotate the key from your profile settings if it may have been exposed.

  • ingest new ransomware and leak-site events
  • export tracker data as JSON or CSV
  • search indexed leaked file names
  • retrieve file-list download links for an event
  • inspect torrent monitoring coverage
  • pivot from torrent peer IPs to related events

For integrations, prefer incremental pulls and store the last successful timestamp or event ID in your own system. Some links, especially file-list download URLs, are intentionally short-lived and should be generated only when needed.

The machine-readable API contract is available at:

https://ecrime.ch/help/api/openapi.yaml