Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.12576033 BTC
Hops Traced
2
Flagged Hops
1
High Risk Hops
0
Starting Address
1GU1FoUvQC7xgiTD1dBeucUASNsRS8t6Vv
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-08 02:54 UTC
1GU1FoUvQC7xgiTD1dBeucUASNsRS8t6Vv → 1Nb9NUVWpjruzafXh2uKK5v5xxEEL1hPrH
tx 6f70c2fe9a609411…
Low Risk
0.12576033 BTC
Continue from here
HOP 2 · 2026-09-08 07:49 UTC
1Nb9NUVWpjruzafXh2uKK5v5xxEEL1hPrH → bc1qq92tll3v97l0d5j6fw237c3evgz6trxxe7ndla
tx cccbf61ddb2cdcbb…
Split payment
0.59353583 BTC
Continue from here
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q8cy3n7528pyd3qmd6zn0ysrdpp8jeqrup5g0jd 0.01007558 BTC Trace this branch
bc1qlf44sluzw5de6cuauwj938fntln9ypngqmlklw 0.00647110 BTC Trace this branch
1QDm1W9ZxEduvdDv9Pw2rodGWjJn4teSzV 0.00281394 BTC Trace this branch
bc1qj2lhsjj4ze3kgrms6dfj3p79q5k9u5muxxvkw7 0.00082991 BTC Trace this branch
17p4id5ZLh9dKvSio1fJd4v55rstiW4qgz 0.00028489 BTC Trace this branch
Trace stopped: no further outgoing transactions from the last address.