Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
7.20133774 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qazk2zv6vunfqgk7fdga07m0gv86t68h67htt4y
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-09 05:22 UTC
bc1qazk2zv6vunfqgk7fdga07m0gv86t68h67htt4y → bc1qqsh6a2jlwzjgx6akhkkrc75w8rxja58hj0t9y0
tx afd3093f50c28513…
Split payment
7.20133774 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qa9ehvvxh78cfeauq4sz8rx8vrt38280g8kszm6 0.38189347 BTC Trace this branch
bc1qz540uqkhsae3q4u3z36wmhjgnpzdmhh5ugeyhm35mh6ju5jzv4vquge78y 0.01923096 BTC Trace this branch
HOP 2 · 2026-08-12 02:43 UTC
bc1qqsh6a2jlwzjgx6akhkkrc75w8rxja58hj0t9y0 → bc1qwy4nlg27hyk0ge24p259ardsxsx73rl29jfmp8
tx 14a4fc03ccc68551…
Low Risk
0.84000000 BTC
Continue from here
HOP 3 · 2026-08-12 12:51 UTC
bc1qwy4nlg27hyk0ge24p259ardsxsx73rl29jfmp8 → bc1q85v8cmed6wjqtysz0h9k6uacr9zews0tz66srp
tx 90b8ab7047d35418…
Low Risk
0.06000000 BTC
Continue from here
HOP 4 · 2026-08-12 13:07 UTC
bc1q85v8cmed6wjqtysz0h9k6uacr9zews0tz66srp → 1ENh5ExH5qwu76ruQkKyePoYiwXzN1CwaB
tx 47fb1267988273e7…
Low Risk
0.07996561 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.