Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
4.11805310 BTC
Hops Traced
3
Flagged Hops
2
High Risk Hops
0
Starting Address
1FJ9HeJkpgFK3K749r7ts59YiDAFWiB8Zv
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-04 16:30 UTC
1FJ9HeJkpgFK3K749r7ts59YiDAFWiB8Zv → 12XZMdaAGmcHf4ocFSqpd8jFd1WH7RHUPs
Low Risk
4.11805310 BTC
HOP 2 · 2026-09-08 01:19 UTC
12XZMdaAGmcHf4ocFSqpd8jFd1WH7RHUPs → 1DLeNApsHNNzUMNZJVoXeyEY5sdp8vzx3w
Split payment
209.09755024 BTC
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qx47sgu3w5pdfg8wxulrwy9e8ahhcyqp4ydm7xu 0.00242109 BTC Trace this branch
bc1qe295mmgmhn9cnulqwtc4r7pj06zt6ek0cw9kl2 0.00169449 BTC Trace this branch
bc1qm62sa3l0mfc0yw0z99830frf63675hnps5h45w 0.00165668 BTC Trace this branch
bc1qd3tsffef0c3p2ldawk0mt92qwc6tfwfl0ccmwz 0.00050000 BTC Trace this branch
bc1q8xjq00xsgsepsqeugczyyezkzcx9quhxvplcss 0.00035467 BTC Trace this branch
HOP 3 · 2026-09-08 01:34 UTC
1DLeNApsHNNzUMNZJVoXeyEY5sdp8vzx3w → 12XZMdaAGmcHf4ocFSqpd8jFd1WH7RHUPs
Self-consolidation
208.65329236 BTC
This spend also paid 10 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qhkz5r06wt2z3ztn4z9hu2qyj0fxhzu5q4nr0kw 0.13199680 BTC Trace this branch
bc1qhsjmu0jf4j6wg0g8savq7fmq7fr3m5m3jgguff 0.09945662 BTC Trace this branch
bc1q5xry57yhvt5cvsj8ygkspq4gwuzzqfyqkgvdum 0.06646221 BTC Trace this branch
1GU1FoUvQC7xgiTD1dBeucUASNsRS8t6Vv 0.06293300 BTC Trace this branch
1GAX6it9Q5KThhZAkqMPSBFUG19yNV6gvD 0.04315441 BTC Trace this branch
bc1q72gr4phu6hv2mux5g2gwsqyelakrxyuua8y6x4 0.02527047 BTC Trace this branch
bc1qsd5s3ljj3l9w9qqzzr9ky6wucyk85zrq7350hu 0.00918000 BTC Trace this branch
bc1qdwj674s6xl8nrulj7r8euu0hd5hqcywj2ar7z8 0.00415301 BTC Trace this branch
+ 2 more addresses not shown
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.