Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.11803579 BTC
Hops Traced
4
Flagged Hops
0
High Risk Hops
0
Starting Address
bc1q4fswwt5jsenpv0lfpd4522er2damawnywt9h7a
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-26 11:58 UTC
bc1q4fswwt5jsenpv0lfpd4522er2damawnywt9h7a → bc1q04jtn3aq2rlhp82zvsjfnkn7wht27njqcnm90y
Low Risk
0.11803579 BTC
HOP 2 · 2026-09-08 12:02 UTC
bc1q04jtn3aq2rlhp82zvsjfnkn7wht27njqcnm90y → bc1qafudwa5yamys50fzge2f4ljup2ej5637x7awj2
Low Risk
0.00369237 BTC
HOP 3 · 2026-08-31 06:30 UTC
bc1qafudwa5yamys50fzge2f4ljup2ej5637x7awj2 → bc1qc25sw8gwudw944snsggqtqjynr9mfpfwjaxdcc
Low Risk
0.02996443 BTC
HOP 4 · 2026-08-31 09:05 UTC
bc1qc25sw8gwudw944snsggqtqjynr9mfpfwjaxdcc → bc1qdfl3dfnwwvlqa5jpckh0ccwpjczh5y566c4g76
Low Risk
6.50781341 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.