Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.12880700 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qf8x663sln6htgveum78077nha70qlav86s22sw
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-08 17:14 UTC
bc1qf8x663sln6htgveum78077nha70qlav86s22sw → bc1q2u68xx0mlehgtmedgwnd3g94qc237vxh89734y
tx 0e0fd5eddbc35040…
Split payment
0.12880700 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q3r93n34spxhp9jrn8w6vwktjrc55ck8n90z3tz 0.07914900 BTC Trace this branch
HOP 2 · 2026-09-08 17:29 UTC
bc1q2u68xx0mlehgtmedgwnd3g94qc237vxh89734y → bc1qn9ku9n5tjr9cu2n94qs9d2jve8hejwullef7dv
tx 0b111d57a0c5a02d…
Split payment
1.55000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qn6srxjm8f3p9894zrddzzv8k7sgwxwckk7jfx7 0.04820532 BTC Trace this branch
HOP 3 · 2026-09-08 20:56 UTC
bc1qn9ku9n5tjr9cu2n94qs9d2jve8hejwullef7dv → 36MQ5DBocEE7CJF8JH8V7V7drU9A2qBbi4
tx 1621c9641a900bf1…
Low Risk
0.80000000 BTC
Continue from here
HOP 4 · 2026-08-27 20:27 UTC
36MQ5DBocEE7CJF8JH8V7V7drU9A2qBbi4 → bc1q9wvygkq7h9xgcp59mc6ghzczrqlgrj9k3ey9tz
tx 09709af88622c1b2…
Low Risk
21.65291490 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.