Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
13.00000000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qwwg0jttv2rcd99dw2jt23egsevdgvdtd9t5er9
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-03 06:13 UTC
bc1qwwg0jttv2rcd99dw2jt23egsevdgvdtd9t5er9 → 1KDBqT1AsMiMV1oK7rW9CF8S1JwRkrtZu3
Split payment
13.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1pkfmr4yp3pxuwufj23deyh0n8raege9rmuwdt94t74vquq8864weqtlnnsp 10.00000000 BTC Trace this branch
HOP 2 · 2026-06-18 07:21 UTC
1KDBqT1AsMiMV1oK7rW9CF8S1JwRkrtZu3 → bc1q3y0e4ezze3ek7f4w09k8t6puvf33xvjsdlvl2k
Split payment
14.99995000 BTC
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
1AQLXAB6aXSVbRMjbhSBudLf1kcsbWSEjg 3.75506743 BTC Trace this branch
bc1q8vls38mvqqwg40q37vdsd8t8gjq50krsvqqggh 0.00425400 BTC Trace this branch
HOP 3 · 2026-06-18 11:07 UTC
bc1q3y0e4ezze3ek7f4w09k8t6puvf33xvjsdlvl2k → bc1qe6nlch3g5vdy5c5a328x0j05gnm5d7wl2674gh
Split payment
25.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qk4pqk44qsnx3xhthytqkemfjdsfhdk82z6f2gz 1.66973761 BTC Trace this branch
HOP 4 · 2026-06-18 12:57 UTC
bc1qe6nlch3g5vdy5c5a328x0j05gnm5d7wl2674gh → bc1q02qcmv8ezuyzkmv47kq0m5yv88lmul06z0dpg9
Low Risk
24.99999670 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.