Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.00559660 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q3rcsyl4ystxn8hf2xr4pdhamzzmtus8vve5rjm
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-07 17:34 UTC
bc1q3rcsyl4ystxn8hf2xr4pdhamzzmtus8vve5rjm → bc1qz7hfafx8zr4yyzszfsfvcujsga5mkrmmyk8tdg
Split payment
0.00559660 BTC
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
34VLFgtFKAtwTdZ5rengTT2g2zC99sWQLC 0.00007500 BTC Trace this branch
bc1q2zqd9m66jxc4y442c2z48xmdwczuvdjkj9tl3e 0.00003889 BTC Trace this branch
HOP 2 · 2026-09-07 17:34 UTC
bc1qz7hfafx8zr4yyzszfsfvcujsga5mkrmmyk8tdg → bc1q4tg8e0raavt7t9arealjc73c2hn52nk5hu93ckvl7nw7as7e55gq2vk8e7
Low Risk
0.00632330 BTC
HOP 3 · 2026-09-07 18:10 UTC
bc1q4tg8e0raavt7t9arealjc73c2hn52nk5hu93ckvl7nw7as7e55gq2vk8e7 → bc1qd3mud0fjs9hup9djr9lwehu3k6tcjgkps5spz6
Split payment
0.00555000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qrj4u049ldvar8ssgqds9lu527qtyjmk0nyxhka 0.00075000 BTC Trace this branch
HOP 4 · 2026-09-07 21:01 UTC
bc1qd3mud0fjs9hup9djr9lwehu3k6tcjgkps5spz6 → 3EesHEAsP9aBVbCzxWf7YCBwroNUkk8Sqr
Split payment
0.57241897 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q35ccms5ypzxe8k9y8mgegy4zl6yyczgs99q78q 0.05435000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.