Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
174.94778870 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
3PDMVx1YRhySaPEtCV2AT1aEq9DwgPU4uq
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-29 10:58 UTC
3PDMVx1YRhySaPEtCV2AT1aEq9DwgPU4uq → bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d
tx 459b8811e21d9fac…
Split payment
174.94778870 BTC
Continue from here
This spend also paid 6 other addresses — not followed above, since the walk only continues down the largest branch:
bc1pmj8cajdxu8fht4k0r98qyyyj6j7dwtt5cp6ug292fev9rnzes7dqwagty8 74.99663917 BTC Trace this branch
13ejnmKGYAsgshAKJqM4e9V5fNAPqhTY5E 0.05190331 BTC Trace this branch
bc1qgx5vad2z3jkcmtj7lchqxvx5se92tavu2tuxlj 0.00479747 BTC Trace this branch
bc1qcupmn8xmxup8pser9uxqttvva4ag5wtnn8az6t 0.00282039 BTC Trace this branch
bc1qav4d6amjnp27l92nz66gvfu9dyl0lz7evmp69e 0.00120000 BTC Trace this branch
bc1qkxafsflzz9cwjdj3pjpsy2m2guve9z06luj5qh 0.00096376 BTC Trace this branch
HOP 2 · 2026-09-07 06:02 UTC
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx ed0a00cf2f53eac3…
Split payment
56.14000000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6 3.52000000 BTC Trace this branch
bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz 1.72000000 BTC Trace this branch
HOP 3 · 2026-09-06 20:58 UTC
bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2 → bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d
tx f6f3d318e5af24d4…
Split payment
459.54838961 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qk2jypmly2um8nu7zp6e76mw9m0hsmrz453xx7qe29mygtqffq6zs0j5qe0 273.92161039 BTC Trace this branch
HOP 4 · 2026-08-29 03:14 UTC
bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx 4d26678a62a75c8d…
Self-consolidation
499.27000000 BTC
Continue from here
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.