Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
8.99979144 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q0rv73zj3r87vnv09ej3vmfwy55x7nrcfu9yqkg
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2025-07-15 08:48 UTC
bc1q0rv73zj3r87vnv09ej3vmfwy55x7nrcfu9yqkg → bc1qamgjuxaywqls56h7rg7afga3m6rgqwfkew688k
tx 8787f1b2fb813b99…
Split payment
8.99979144 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q6h274e67rdr7xpn2mr2ttnssjzx3rhlkug6m5q 0.00007736 BTC Trace this branch
HOP 2 · 2026-09-08 16:01 UTC
bc1qamgjuxaywqls56h7rg7afga3m6rgqwfkew688k → 392TWqWTunWJRXtFxSmpwbwF899RTD8pgz
tx dbfc5456a595c58c…
Split payment
0.16953438 BTC
Continue from here
This spend also paid 17 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q9pmyrel7xpkz82rudups3wl25urqah35vp3uty 0.01459820 BTC Trace this branch
bc1q2exxz4ml9t8dkm0wv2tlj0avmv98t22dm38a59 0.00276000 BTC Trace this branch
1NqGdAXXR1m122nJVem9XtZ5LvqWVfkoKP 0.00270000 BTC Trace this branch
bc1qn0zl4j5e04ruyghlvy0zy37m34nxr4ghr7m4e0 0.00138128 BTC Trace this branch
bc1qxzpnh2vqfh7lx3y2v7dne69yzz24kxgntf7p2k 0.00120105 BTC Trace this branch
bc1qgcgme9jxgzpdsjwh80cxhmxj5le9crlwlags6tms5ckng5hdcuws6csuk4 0.00113105 BTC Trace this branch
bc1qk2gh34azyye43m9z47e89fje23kln86000gnat 0.00107931 BTC Trace this branch
bc1qlkshnynvyewsarhsj7ns4chlw0zhkn2e7nvka9 0.00093557 BTC Trace this branch
+ 9 more addresses not shown
HOP 3 · 2026-09-07 18:20 UTC
392TWqWTunWJRXtFxSmpwbwF899RTD8pgz → bc1qx9n80t5q7tfmutzaj0ramzzzsvtveara68zntc
tx 662d0b396f8429be…
Low Risk
4.12918194 BTC
Continue from here
HOP 4 · 2026-09-07 11:36 UTC
bc1qx9n80t5q7tfmutzaj0ramzzzsvtveara68zntc → bc1qh57h4kcm7avp3hvqk3sx4nd5y4jef3le2p3tkv
tx b6d71ec69e312b30…
Split payment
94.88633863 BTC
Continue from here
This spend also paid 12 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q9txdpskvtrru8zytxp0ym2yvw5ud44znaw8p5l 0.05044520 BTC Trace this branch
bc1prd73ww4g6mm6tm40fza9p5tvtnzqkvnmuap3g0dn53yyznacupcqc6nur0 0.01664500 BTC Trace this branch
bc1q908uml997c35c2c8mkt0j07fx4whenkfpv5u23 0.00881590 BTC Trace this branch
bc1q3rcsyl4ystxn8hf2xr4pdhamzzmtus8vve5rjm 0.00573379 BTC Trace this branch
bc1qveagkmmuz6d4vwuux2znz6wfh9qdvn6hq2tdv0 0.00497189 BTC Trace this branch
bc1q76qcgszlmxd9vpdse679h0lmsk4fpenn0qv3zl 0.00346953 BTC Trace this branch
bc1qxrnrzzgmushckqgau3yvnppjspg9haycmh3r78 0.00249533 BTC Trace this branch
bc1qnseat72y36u3galfe5r9gj9c8r4eyn72aytumt 0.00153448 BTC Trace this branch
+ 4 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.