Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.20105247 BTC
Hops Traced
1
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qelntv9kyz76km6zwd80zyhuvyu30twgxdztkqn
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-23 20:52 UTC
bc1qelntv9kyz76km6zwd80zyhuvyu30twgxdztkqn → bc1qnns6ges22m7v3q0ms47yyk2xjygf2f4ty2srgk
Split payment
1.20105247 BTC
This spend also paid 12 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qa2lmvdggn0m0clpcdar64sg64amxew7e7t5vq3 1.01249895 BTC Trace this branch
bc1qppdeltxfyhyl37ctvxxuaw88f7lhc4q84gzadg 1.01249895 BTC Trace this branch
bc1q0wt95rzpsag24x385wurzccwdnng68nmp0yusd 1.01249895 BTC Trace this branch
bc1qg9cxajuhc5txw2rffc6unlg5hc233zz0p6g83t 1.01249895 BTC Trace this branch
bc1qm78e03cv00gptx8x5r4fflufyfy4hzd28aa4kn 1.01249895 BTC Trace this branch
bc1qz9wccnvf7q3wa3k36l3qj7l9a4v4ekxzty5499 1.01249895 BTC Trace this branch
bc1q5myn0f6vz5gwt3mxw22cd3gpqyqkjwz3wu6l3d 1.01249895 BTC Trace this branch
bc1qdr7rq9narqu7cm5dqz9z7uv3yttdjmq02qpw7k 0.92044098 BTC Trace this branch
+ 4 more addresses not shown
Trace stopped: no further outgoing transactions from the last address.