Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
7.09155550 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1q9ntw8k6dajxt8vcn32fgvrvvcgylcyhwjdf6gq
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-04-20 07:57 UTC
bc1q9ntw8k6dajxt8vcn32fgvrvvcgylcyhwjdf6gq → bc1q3r5pdaw5k2zyucqr5flpx67n4pklp6cschs7rz
Split payment
7.09155550 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qfleyq7vgqqtnxk9xyjg8dlyy5kqmj3m9kqwkxm 0.00598067 BTC Trace this branch
HOP 2 · 2026-07-31 17:29 UTC
bc1q3r5pdaw5k2zyucqr5flpx67n4pklp6cschs7rz → 1M2t1zipY8gwoTDewk2n84L6rxLDubuVsL
Split payment
15.23961587 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qtuzx6x4e0ejp775fjyy0vf393dlvmdj9ncl7pa 0.60362707 BTC Trace this branch
HOP 3 · 2026-08-03 23:46 UTC
1M2t1zipY8gwoTDewk2n84L6rxLDubuVsL → 3FM9vDYsN2iuMPKWjAcqgyahdwdrUxhbJ3
Split payment
70.70529260 BTC
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1quq29mutxkgxmjfdr7ayj3zd9ad0ld5mrhh89l2 3.57676941 BTC Trace this branch
3HuTGsRZ11cesPsVnBK2Sv1BRP6DMQYzyP 0.00028475 BTC Trace this branch
HOP 4 · 2026-06-25 21:44 UTC
3FM9vDYsN2iuMPKWjAcqgyahdwdrUxhbJ3 → 39wVd42giU95ca39sEPkbPTpWygvsBDuA5
Split payment
4853.63685233 BTC
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1quq29mutxkgxmjfdr7ayj3zd9ad0ld5mrhh89l2 697.97479100 BTC Trace this branch
bc1qmtl499lclce4gvjcgn38gehmmkh2kekywkc273ghhmcfl2s93jzq3wt9w4 0.00150000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.