Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.16796222 BTC
Hops Traced
4
Flagged Hops
0
High Risk Hops
0
Starting Address
bc1qnujn6pq2xg254pw7vhn8646veu6r7nej92xfc6
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-30 13:33 UTC
bc1qnujn6pq2xg254pw7vhn8646veu6r7nej92xfc6 → 3QfuQEVAAZuqrJZLKor4QUWFMtJ2cepv1B
tx c3a0d1a725e406c3…
Low Risk
0.16796222 BTC
Continue from here
HOP 2 · 2026-09-09 04:06 UTC
3QfuQEVAAZuqrJZLKor4QUWFMtJ2cepv1B → 35C2L1pCgwzBHNcDcVL1a5RuoefeWqyjAR
tx d8a428af1522c4f3…
Low Risk
5.91450495 BTC
Continue from here
HOP 3 · 2026-09-07 10:20 UTC
35C2L1pCgwzBHNcDcVL1a5RuoefeWqyjAR → bc1ptxr5zs6xq63742qa7ltn7q4y8330lpz0953tmucpk0a6m66fx0dqhavlmu
tx 69838adef8300846…
Low Risk
2.51882600 BTC
Continue from here
HOP 4 · 2025-12-31 07:56 UTC
bc1ptxr5zs6xq63742qa7ltn7q4y8330lpz0953tmucpk0a6m66fx0dqhavlmu → 12HfsVnBSGMmYZ4TA2g1quecvwwZTtToBq
tx 17ab5466a87d324a…
Low Risk
11.50000000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.