Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.02271567 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qe52hcca0e9y0fz9k760wctkhk0mwd3mkcjrck5
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-09 22:39 UTC
bc1qe52hcca0e9y0fz9k760wctkhk0mwd3mkcjrck5 → bc1qjxvq87zumrce48lt3q7ua9l39f7tp0swdcwgyd
tx 7214ac3f5e085210…
Low Risk
0.02271567 BTC
Continue from here
HOP 2 · 2026-08-14 18:16 UTC
bc1qjxvq87zumrce48lt3q7ua9l39f7tp0swdcwgyd → bc1q6fvturtjfte0fk6uszga298tw5cjwvp7l8qtea
tx 110d9ee645f7b4b0…
Low Risk
0.00317228 BTC
Continue from here
HOP 3 · 2026-08-22 19:42 UTC
bc1q6fvturtjfte0fk6uszga298tw5cjwvp7l8qtea → 1PbyaZxeaz2usu2EdjP5eA5S4K7TkBBL2U
tx 848e1f770c72bfb6…
Split payment
0.28661942 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qed4sml582fgxkr23v5fwv6gfsuph26swxhs4y2 0.00000716 BTC Trace this branch
HOP 4 · 2026-09-10 13:56 UTC
1PbyaZxeaz2usu2EdjP5eA5S4K7TkBBL2U → 17Hh59K259oHaMtSfeJh9UmkV4seDAQe7x
tx 55fca01171da4ac6…
Low Risk
1.93678578 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.