Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.00247934 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qx47sgu3w5pdfg8wxulrwy9e8ahhcyqp4ydm7xu
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-02 17:07 UTC
bc1qx47sgu3w5pdfg8wxulrwy9e8ahhcyqp4ydm7xu → bc1qxzvdey5r9e7wx34qhjppudlj9rmlpakgcgs3gg
tx 3afa5a7cbe88f3c8…
Low Risk
0.00247934 BTC
Continue from here
HOP 2 · 2026-09-02 19:54 UTC
bc1qxzvdey5r9e7wx34qhjppudlj9rmlpakgcgs3gg → bc1qddv463mxg9532csfwngmen555j0rjf0ma3wvta
tx ceaac4eac5cda1c0…
Split payment
0.39267140 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qkdw7zkz7x20yqs58plv4u9dadavknevuhdq7ku 0.00018518 BTC Trace this branch
HOP 3 · 2026-09-03 12:51 UTC
bc1qddv463mxg9532csfwngmen555j0rjf0ma3wvta → bc1qgtr8y2fcmfpkwn4yw0lncgz6vam25rp3l4q8w0
tx 9c03dd242576ce4a…
Split payment
0.43654602 BTC
Continue from here
This spend also paid 6 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qu07v6u4lxsxgnjsv70e328hpplszs9tshc8c4p 0.29850758 BTC Trace this branch
bc1qr7rferajkppgjan8vkzy6lktw50q92uakrut4z 0.00403600 BTC Trace this branch
bc1q7h4cu74xym2253p0r6y6yeapzqh27ndgdpzyvn 0.00253990 BTC Trace this branch
bc1qj8aya5x6zq89asuqzz7se4vwfssw35ntuprqt3 0.00201160 BTC Trace this branch
bc1qlnv68y53p8g7juurwlzpjz74c95vq36haexszj 0.00069941 BTC Trace this branch
bc1q5uxsyfe0e9px3suh0alxd0ns8ua4ms3wywmy9m 0.00051415 BTC Trace this branch
HOP 4 · 2026-09-04 13:58 UTC
bc1qgtr8y2fcmfpkwn4yw0lncgz6vam25rp3l4q8w0 → bc1qm8zgl0rga3cr9t4xjc4hzq0c34aw9qpy3u8wdj
tx 31bf794a6f241fad…
Split payment
0.73308744 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q0s5rm8fzuu793rly6d9z22pc83gslu7gl2g7n2 0.09995780 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.