Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.36000000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qe6vapqqqwhgvfa5rvz675aymekeyjz47duh6qd
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-03-20 10:14 UTC
bc1qe6vapqqqwhgvfa5rvz675aymekeyjz47duh6qd → bc1q6cre2spy24lj8y7u54gf56z3a5x9wjm7tr8emf
tx d1b315de210fea86…
Low Risk
0.36000000 BTC
Continue from here
HOP 2 · 2026-03-20 10:27 UTC
bc1q6cre2spy24lj8y7u54gf56z3a5x9wjm7tr8emf → bc1q2xlr4tfrlq258c2fqf9fz2uyqz3uephxvne7dn
tx 5dd404f180ca6b75…
Split payment
0.36000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q3xpv692dhtefagmk4nfvsw8ad8qt3fs4yetlsq 0.01035462 BTC Trace this branch
HOP 3 · 2026-06-26 10:40 UTC
bc1q2xlr4tfrlq258c2fqf9fz2uyqz3uephxvne7dn → bc1q6h274e67rdr7xpn2mr2ttnssjzx3rhlkug6m5q
tx 6837cffa800b7166…
Split payment
564.98925399 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1GLPH9b4eyPDRfFhA7u4RyCBPzQeu2JRbG 0.01550047 BTC Trace this branch
HOP 4 · 2026-09-09 23:31 UTC
bc1q6h274e67rdr7xpn2mr2ttnssjzx3rhlkug6m5q → bc1qamgjuxaywqls56h7rg7afga3m6rgqwfkew688k
tx b745ffe0562db4cd…
Low Risk
22.00000000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.