Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.00875050 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qkk0ms6y4k9t48un3zndypwhermy4sm3u7rur0x
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-06 12:28 UTC
bc1qkk0ms6y4k9t48un3zndypwhermy4sm3u7rur0x → bc1q0x3x8k6dhhgr3q75dgk6zcfvzj8zjj6lwzjr7p
Low Risk
0.00875050 BTC
HOP 2 · 2026-09-06 13:16 UTC
bc1q0x3x8k6dhhgr3q75dgk6zcfvzj8zjj6lwzjr7p → bc1qy98g06qrldv682wxtf426hpej6wf9a9flrzdw2
Low Risk
0.19540595 BTC
HOP 3 · 2026-09-07 19:16 UTC
bc1qy98g06qrldv682wxtf426hpej6wf9a9flrzdw2 → bc1qqyswssx8z42xqnj9q4xukxnhmvsm9wmp9c9h78
Split payment
0.31236897 BTC
This spend also paid 101 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q2p7n0nu3938fxt9gztqstgd3wv4tvse2cf3wma 0.08962292 BTC Trace this branch
1KQrPUaKnDvfN2VHY2J2HTUxwGgU94k27o 0.03174861 BTC Trace this branch
bc1qd9egm2jw338wul93n7z6kkwv3cc853jzm07rq9 0.01908645 BTC Trace this branch
bc1qn0zq6grwdyp42p5euz56tugs9mk0x6uv7vv6t7 0.00981950 BTC Trace this branch
13ssTnFvievqLSdKeg8kY9to1amwsRhcJE 0.00860057 BTC Trace this branch
bc1qagzkledqp9wl900qcmdd70zz9yf44f3wfpum5t 0.00612594 BTC Trace this branch
bc1qnwwtqk324qqf9mzv9l9d4klf893gcguvqcqy7m 0.00609855 BTC Trace this branch
bc1qz9pjg64ulkxzux8nsanj47hgpcausx4rpdxmwm 0.00608835 BTC Trace this branch
+ 93 more addresses not shown
HOP 4 · 2026-09-07 19:16 UTC
bc1qqyswssx8z42xqnj9q4xukxnhmvsm9wmp9c9h78 → bc1q609uekjjjjn9r08ln6cq52zj0gxvggv3y6m9uj
Low Risk
0.31232244 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.