Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.04332987 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qdkjppxyrpm5zs6s3nh50km3pfalv2x0azwcxa8
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-06 14:28 UTC
bc1qdkjppxyrpm5zs6s3nh50km3pfalv2x0azwcxa8 → bc1qvsuwygzpqlummrejlm0vdn8f04t6xrsx2ya83r
tx 0d4e92688b50d784…
Low Risk
0.04332987 BTC
Continue from here
HOP 2 · 2026-08-29 02:12 UTC
bc1qvsuwygzpqlummrejlm0vdn8f04t6xrsx2ya83r → bc1q4zfdakga92nl8mtssf54p88wpnh0jurumygmrx
tx ad05d893a89294b6…
Low Risk
0.01285638 BTC
Continue from here
HOP 3 · 2026-07-03 03:15 UTC
bc1q4zfdakga92nl8mtssf54p88wpnh0jurumygmrx → bc1q8wll8nt7mull33x2w4aleqfsrqpv04m8ty4549
tx 07ba0abe694f782e…
Low Risk
0.01304835 BTC
Continue from here
HOP 4 · 2026-07-03 06:07 UTC
bc1q8wll8nt7mull33x2w4aleqfsrqpv04m8ty4549 → bc1q5e0ws76ynzjphxmjm92kkjv8aplwdu0w8sujxh
tx ae71069224959ad9…
Split payment
0.00979487 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3FZnUH5DXKUMXUKanUE5a1C66EJXsu7Tug 0.00324500 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.