Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
18.58000000 BTC
Hops Traced
2
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-07 21:03 UTC
bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz → bc1qd2wqds6wr0qfddl4hly0uqs0ce4w3ey68vesz5kxwfen6uss9szq6k02zw
tx 46dc24f95158d642…
Low Risk
18.58000000 BTC
Continue from here
HOP 2 · 2026-09-04 10:37 UTC
bc1qd2wqds6wr0qfddl4hly0uqs0ce4w3ey68vesz5kxwfen6uss9szq6k02zw → bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz
tx b199ad00dbf73c98…
Self-consolidation
44.77000000 BTC
Continue from here
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.