Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.12388788 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qyrhwc339xxee3jgrjqph40w4hp9l23du836zxdspk98q76ktttus9zq6np
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-03 22:51 UTC
bc1qyrhwc339xxee3jgrjqph40w4hp9l23du836zxdspk98q76ktttus9zq6np → bc1q2tchpvp543mpjpftcmda0eelmuwwqkjyh2ggenljd6fv6v02wv7spmch4e
tx 6372530f1330453f…
Split payment
1.12388788 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q8rfsxv5004a93vepnyjxkj0767dddwxdcndls0 0.00121545 BTC Trace this branch
bc1qtjqq6zexfg3yl9ysxgpk9p76wegw3q86a9tujq 0.00026835 BTC Trace this branch
HOP 2 · 2026-09-04 00:19 UTC
bc1q2tchpvp543mpjpftcmda0eelmuwwqkjyh2ggenljd6fv6v02wv7spmch4e → bc1qcw9xmhdxex0fd2us5g474y4gxyslqv3fehlg9zkmlddxrhg29qasq8rd7d
tx e95c42e7af76fa14…
Split payment
1.03439502 BTC
Continue from here
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qx99pw8xkdzgpyry9psqnzfvlmr674dspfyhykh 0.06498449 BTC Trace this branch
bc1qr3utnmnjnjxf5zfchzzhqgr5qpy0l9jfdyzjj7 0.02165762 BTC Trace this branch
bc1qk4zze8rnjzr4jj3uetek3qj6pu5n5nj7d0vyk6 0.00127577 BTC Trace this branch
bc1qwrzjaql4khg0qzv57htz8p6zpvl2ehp7t0z8zt 0.00083520 BTC Trace this branch
1GF7CcaHXBPjE3z8vbx2aA6hbH5e3Cffts 0.00073308 BTC Trace this branch
HOP 3 · 2026-09-04 03:07 UTC
bc1qcw9xmhdxex0fd2us5g474y4gxyslqv3fehlg9zkmlddxrhg29qasq8rd7d → bc1q8dg668xhhfltladyprxfqdec3e7jdq6zpees4d6aqh3ccvshskfszls9ep
tx 509e159084687d59…
Split payment
1.03327052 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q4c9sqtq8e2luqplagzdlct9qka7atrzptw4xft 0.00087258 BTC Trace this branch
bc1qyd6um4l396t2urm50met4twrdh7xczq40q80ca 0.00015711 BTC Trace this branch
bc1pcrkdlhmhja74lj97m9wntecnzj0fl2uhj7npufcu0pl4h5j3rdfscue3y5 0.00008726 BTC Trace this branch
HOP 4 · 2026-09-04 10:08 UTC
bc1q8dg668xhhfltladyprxfqdec3e7jdq6zpees4d6aqh3ccvshskfszls9ep → bc1qvgp4caw7egq5py9t4yvhl0akz85xvnxl9sy6arr73qv4v5mx99gsm6ydxu
tx 3dafa67604b653e9…
Split payment
1.02883203 BTC
Continue from here
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q8xxjuusg84au5d06aeng8g5rjjd3pzg84nqg9s 0.00262273 BTC Trace this branch
bc1q7ceny3p76udxmsgl3q36y3gjsmuypy6qqd5pun 0.00115903 BTC Trace this branch
17AXWMg2SQM6u2tQob5VSeCqgAsDgJ6L2D 0.00039914 BTC Trace this branch
bc1qmdms25mg6xlka39x4s08zqnw9ndmcwtm3f4aw6 0.00024901 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.