Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.18422426 BTC
Hops Traced
4
Flagged Hops
0
High Risk Hops
0
Starting Address
bc1qffq3t3ycyxjha76s2u5jzqcqdvp05f786qjl3m
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-31 19:59 UTC
bc1qffq3t3ycyxjha76s2u5jzqcqdvp05f786qjl3m → bc1qrcca4zn6kv597t9g9h3nspj06j0ypuzrxl2pgw
Low Risk
0.18422426 BTC
HOP 2 · 2026-09-04 19:20 UTC
bc1qrcca4zn6kv597t9g9h3nspj06j0ypuzrxl2pgw → bc1q03yg42z2sncjm6tkf0p69645mlyp2tdurhlp77
Low Risk
0.42243722 BTC
HOP 3 · 2026-09-09 08:53 UTC
bc1q03yg42z2sncjm6tkf0p69645mlyp2tdurhlp77 → bc1q9ge5aagumfyesxyx2kplym5hu2acnuekarz9lr
Low Risk
0.21777536 BTC
HOP 4 · 2026-09-09 08:53 UTC
bc1q9ge5aagumfyesxyx2kplym5hu2acnuekarz9lr → bc1qakez6744rm7acg8gehwym5nkru0ypsm28m6zmz
Low Risk
0.08032229 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.