Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
9.99640735 BTC
Hops Traced
2
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qk0cylqdvawncrp4t408z8yxh77vajmc9jqjlm6
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-24 11:13 UTC
bc1qk0cylqdvawncrp4t408z8yxh77vajmc9jqjlm6 → bc1qz56ru8hfmxm5ck7glhf528jmpfdkpsj38phvyz
Split payment
9.99640735 BTC
This spend also paid 7 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qevgk3lt76sphc9qh9nn2cxrs3ylm9pja2ah7ks 0.14440500 BTC Trace this branch
bc1qnq4qclq0zhxxjd65hdha4gkrjf3v4ht3jj0add 0.06667298 BTC Trace this branch
bc1qwdpg7lm8ash0nfln83xk295qpxvd63h04chaut 0.05935351 BTC Trace this branch
bc1qct95sh3mdxyh3upwjy7ewu0rj82ufw88msaths 0.03487034 BTC Trace this branch
bc1qumhzvml0kdw3vv4myty962qdeg4akm020evy8g 0.03402694 BTC Trace this branch
bc1qm03syyfrfnnh6gpfsgysgv3fhqqvsvdzxvhent 0.02180439 BTC Trace this branch
bc1q92v4jyvcqzwr2x0xxdxug98j99wccun2z5kx06 0.00672734 BTC Trace this branch
HOP 2 · 2026-09-04 10:36 UTC
bc1qz56ru8hfmxm5ck7glhf528jmpfdkpsj38phvyz → bc1q9w7gmf2atkmsew7ynhfuja4jm3p6lzmjm4syfe
Split payment
5.40086447 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qf4z0wjhn5r4p8megtecf3dccpm0ldk5ycu348q 4.59552878 BTC Trace this branch
Trace stopped: no further outgoing transactions from the last address.