Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.35411214 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qrlhwweqexgxrhl750f27cw53sw0fg96sf6knney4qdpu3uxhxy3q76qnjv
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-03 21:39 UTC
bc1qrlhwweqexgxrhl750f27cw53sw0fg96sf6knney4qdpu3uxhxy3q76qnjv → bc1qwe3vkntpx9y9lmrztzkker2kl3rn255eprdq9e
Split payment
0.35411214 BTC
This spend also paid 6 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qkpjll8v3s2ufm36psqv7h8hn9kcfqut38g2dkkmyte7ya7t9wgpsdfwgvz 0.19664393 BTC Trace this branch
bc1qeu52clnzpyfu09u408vu3m0vqz7gp3frftzakt 0.03883418 BTC Trace this branch
bc1qvn49k8dvc4h508s75hndc2jucdnaqcqq96sutm 0.00120902 BTC Trace this branch
bc1qngx4a7cgjxeczs7j2a7tt3hd2u4nwpwan7l6km 0.00107952 BTC Trace this branch
bc1q4t24095n9ghu3vk4gpm9f0klhscsxfxvwa7x43 0.00069009 BTC Trace this branch
bc1qdnrm97cnjtuhp86w6rnh5q3klr6jn8kycay22n 0.00004449 BTC Trace this branch
HOP 2 · 2026-09-03 21:50 UTC
bc1qwe3vkntpx9y9lmrztzkker2kl3rn255eprdq9e → bc1qgpnt2ajx3sw3y0z6n4kczfdshvp2cap5wrpvnu
Split payment
0.28051411 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qjg6rwmnj060w79udhxarf7hw0ungkzv0uygwyp 0.07359481 BTC Trace this branch
HOP 3 · 2026-09-03 21:58 UTC
bc1qgpnt2ajx3sw3y0z6n4kczfdshvp2cap5wrpvnu → bc1qme4jvm7m50wchk8dpccx0p774y7nyqt0u74u6g
Split payment
0.15767742 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qssdjzx676228g2hqpamz40ge4hr9mlsuskjk5t 0.12283347 BTC Trace this branch
HOP 4 · 2026-09-03 22:02 UTC
bc1qme4jvm7m50wchk8dpccx0p774y7nyqt0u74u6g → bc1q2n95ghyrzmejznvppqsdkwquyvklhlptrq0m88
Split payment
0.14299859 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qt80quw5h8vk7t0qn0v45x8kzf6d9drzx6mezzx 0.01467561 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.