Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.11154000 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1p6dhh5zwn87wk4l0ukpeyn9l43nev2frqgnkhpmk54h8l37gweqaqy48zz4
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-07 23:50 UTC
bc1p6dhh5zwn87wk4l0ukpeyn9l43nev2frqgnkhpmk54h8l37gweqaqy48zz4 → bc1puudjt7z7maslru9k60t5zv0a6sq946mu8u5qqg0zkch35xvj0xeq02elv8
tx 1064c8ab81766097…
Split payment
0.11154000 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1pfgja4acmw0naz9cwmu92q0kkuujw2043gclavamv00fvjfmqgvmq89p68a 0.06760000 BTC Trace this branch
bc1p3puh724ye07la38us6mgrz68u037l58akqttjgfwhpzltgskvszqs8ld3y 0.02957500 BTC Trace this branch
bc1pv9yuw5wvzxw0hrl5xleajp7hnrt8c7gyarkn2ytj0xez4a8l62sqtsj8t4 0.00256359 BTC Trace this branch
HOP 2 · 2026-09-07 23:37 UTC
bc1puudjt7z7maslru9k60t5zv0a6sq946mu8u5qqg0zkch35xvj0xeq02elv8 → bc1p3puh724ye07la38us6mgrz68u037l58akqttjgfwhpzltgskvszqs8ld3y
tx bffd7cd98f37b83c…
Split payment
0.14703000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1p6qarg4whemeuq88rpu6eh2cvghf6q8pyaevc8fykkhxfru9s95rq7fl6l4 0.15176200 BTC Trace this branch
bc1pnzc7jynelazn8lqnzlqkj8uvfacc86vxscuqpzqxq03vq9hxjz4qd5w5hp 0.11016281 BTC Trace this branch
HOP 3 · 2026-09-07 23:37 UTC
bc1p3puh724ye07la38us6mgrz68u037l58akqttjgfwhpzltgskvszqs8ld3y → bc1p6qarg4whemeuq88rpu6eh2cvghf6q8pyaevc8fykkhxfru9s95rq7fl6l4
tx bffd7cd98f37b83c…
Split payment
0.12168000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1puudjt7z7maslru9k60t5zv0a6sq946mu8u5qqg0zkch35xvj0xeq02elv8 0.11154000 BTC Trace this branch
bc1pnzc7jynelazn8lqnzlqkj8uvfacc86vxscuqpzqxq03vq9hxjz4qd5w5hp 0.11016281 BTC Trace this branch
HOP 4 · 2026-09-07 23:37 UTC
bc1p6qarg4whemeuq88rpu6eh2cvghf6q8pyaevc8fykkhxfru9s95rq7fl6l4 → bc1p3puh724ye07la38us6mgrz68u037l58akqttjgfwhpzltgskvszqs8ld3y
tx bffd7cd98f37b83c…
Self-consolidation
0.14703000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1puudjt7z7maslru9k60t5zv0a6sq946mu8u5qqg0zkch35xvj0xeq02elv8 0.11154000 BTC Trace this branch
bc1pnzc7jynelazn8lqnzlqkj8uvfacc86vxscuqpzqxq03vq9hxjz4qd5w5hp 0.11016281 BTC Trace this branch
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.