Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.67662248 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1q9q4nq8llgujchgdnuqyszd98dx25lyhtpx7fjs
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-22 13:04 UTC
bc1q9q4nq8llgujchgdnuqyszd98dx25lyhtpx7fjs → bc1qhuvy6fvnpexdpjq7e4lvza26rumt6prtw29yuf
Split payment
1.67662248 BTC
This spend also paid 6 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qk0cylqdvawncrp4t408z8yxh77vajmc9jqjlm6 0.24819213 BTC Trace this branch
115KvRiE1t3UGuQuDRN7GbeK5YDKUK1x7t 0.05399482 BTC Trace this branch
bc1qct95sh3mdxyh3upwjy7ewu0rj82ufw88msaths 0.03270334 BTC Trace this branch
3Hxqre8UyWxJS3RuxmqUKNzKndkYsho9DT 0.01032321 BTC Trace this branch
bc1qxf6h4lz8czqtear7wcfnw8y9hkm87zl7m5sl6m 0.00694162 BTC Trace this branch
bc1q9yvxr59lj7uvhjxq0m64vswqmtjjqzrar9x9y3 0.00020027 BTC Trace this branch
HOP 2 · 2026-08-22 13:04 UTC
bc1qhuvy6fvnpexdpjq7e4lvza26rumt6prtw29yuf → bc1qcmmlrjdmwenf4yvfndvdyzh7n7n5z2qef4h2vp
Split payment
1.67508670 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qvdduf04jmgcaz7s0dd5trv398j2590gqak9xd5 0.00150758 BTC Trace this branch
HOP 3 · 2026-08-22 13:06 UTC
bc1qcmmlrjdmwenf4yvfndvdyzh7n7n5z2qef4h2vp → bc1qvjjr7cdd4edj6npegh9kpquyr0axcljsf68d4x
Split payment
1.80000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qqscs90ygl8e0n6fsjr70amhkzsl9cp44cu72hz 0.02146900 BTC Trace this branch
HOP 4 · 2026-08-22 15:25 UTC
bc1qvjjr7cdd4edj6npegh9kpquyr0axcljsf68d4x → bc1qsm0unj2pwzd4mclhpyg5prrwupfq4j6dr0kmwu
Split payment
2.76464621 BTC
This spend also paid 14 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qq8tkf20nkjw62dr7q3zsagusx3d9dxuj0chpql 1.79891872 BTC Trace this branch
bc1qu0k20mvxnh4qj4azzxkpa4axfcu25q3g32m7j9 1.79891872 BTC Trace this branch
bc1qmtdag0strshkcc2fh4we2t8ssc9k0xff3s52dd 1.79891872 BTC Trace this branch
bc1qqy85pufjxjama98m0a43k262tmxju0a7g8jhle 1.79891872 BTC Trace this branch
bc1qmj3ugug3rg9avspscu66jgd38lrg7zngrq2p5w 1.79891872 BTC Trace this branch
bc1q8z45l8r36ajzfj9ecys2gg4f68l8dlzlgmhl9a 1.79891872 BTC Trace this branch
bc1qq6fc8r8dw7zvd4xrcxqvm5345kzsjlt9sljtsp 1.79891872 BTC Trace this branch
bc1q2hmm70ktsv56f3v9auj8v68jvhvm0vxlk73fgd 1.79891872 BTC Trace this branch
+ 6 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.