Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.00996104 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qvgp4caw7egq5py9t4yvhl0akz85xvnxl9sy6arr73qv4v5mx99gsm6ydxu
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-04 12:41 UTC
bc1qvgp4caw7egq5py9t4yvhl0akz85xvnxl9sy6arr73qv4v5mx99gsm6ydxu → bc1q0ysgkw7p8k8kaggepm4n3kvu7vltnhzjraw9rphz7l2a2pqj3zas8dqamg
Split payment
1.00996104 BTC
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
1Hd8ZTTvvHLFJd82rWyFL1bWm1TdMwNtRu 0.01097409 BTC Trace this branch
3KXvk7W7vxd5Yyf1riyy9oxVVRUJxmefmi 0.00442054 BTC Trace this branch
bc1qthlcn5gllvqgfkyxpjldhnuhk8j5fp7rj87qwf 0.00347124 BTC Trace this branch
HOP 2 · 2026-09-04 14:11 UTC
bc1q0ysgkw7p8k8kaggepm4n3kvu7vltnhzjraw9rphz7l2a2pqj3zas8dqamg → bc1qkp269zfl2xc3mq79h676w8x7u2fu8zjh88xqgw5u9c8eryt6935s9y8t8d
Split payment
0.96605986 BTC
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qhsl48chq2lsrwthyxlmrcdcf7zaa2f7uwzjqen 0.02436815 BTC Trace this branch
bc1qdnx3ela96v3a3pq5n5sapxfq8pgfzafegepejv 0.01828670 BTC Trace this branch
bc1q9ef3nlngulz3u9p4w0j58hpt6mzv9lju2lfq5j 0.00088683 BTC Trace this branch
bc1qhe677wpyvqzxcu7uhgmpcep4vxkararyqw8z54sts3nh9wmntddsvn5ytj 0.00035360 BTC Trace this branch
HOP 3 · 2026-09-04 15:55 UTC
bc1qkp269zfl2xc3mq79h676w8x7u2fu8zjh88xqgw5u9c8eryt6935s9y8t8d → bc1qwnf30k8feuhh6rmlqtpg757p8ehmggnl6jc9mwnnd32uj5xwuhrqvx0hl0
Split payment
0.85806767 BTC
This spend also paid 6 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qzyk66vxj0kk9m65rw898ahwajyervh57thdyc5 0.09210007 BTC Trace this branch
1spRhkEPHwBN57zC4hzfqvzhyaeLyXQs9 0.00669507 BTC Trace this branch
1KsmDTdb4R7BjfbdqDfeKnwR1DoMmWGcs5 0.00444321 BTC Trace this branch
bc1q60dx7uy79dk5cn9e3f360q8ngj36f3uwcjdnsl 0.00402739 BTC Trace this branch
bc1qthlcn5gllvqgfkyxpjldhnuhk8j5fp7rj87qwf 0.00066143 BTC Trace this branch
bc1qdnrm97cnjtuhp86w6rnh5q3klr6jn8kycay22n 0.00005349 BTC Trace this branch
HOP 4 · 2026-09-04 16:04 UTC
bc1qwnf30k8feuhh6rmlqtpg757p8ehmggnl6jc9mwnnd32uj5xwuhrqvx0hl0 → bc1q3rtt7ltuuzqcc775zuy3tddxpvdrqcclfp898kfsq2pgrvhqymnqfvjsnl
Split payment
0.63223328 BTC
This spend also paid 9 other addresses — not followed above, since the walk only continues down the largest branch:
1KsmDTdb4R7BjfbdqDfeKnwR1DoMmWGcs5 0.10956660 BTC Trace this branch
bc1qlyzfphpn3v902fts64nmj4wdtgez3fhdkc4fcapezr8lt2nwaqzq6v4yrx 0.08771886 BTC Trace this branch
bc1qp2jze9n82kv08je8luw6hdjf8ngs4974wm20gh 0.02031134 BTC Trace this branch
14jtT9nQ1BgxRdye2pYeUXr6b3pvjwsz3V 0.00377095 BTC Trace this branch
bc1qwscsdu4apx8hh42rgx8yd4zndptmrtyxvzxqmf 0.00182730 BTC Trace this branch
1HNNN43W8yFPZEf7y1cHhE43hEa4MpQWhS 0.00159442 BTC Trace this branch
bc1qvkal3z6dvu6wzvdx88fadaz2grawnl9vudwczy 0.00054750 BTC Trace this branch
3NCdKUtmRVcCt82Dg2MpP3fxeLJyd8Kjyb 0.00042636 BTC Trace this branch
+ 1 more address not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.