Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.56090148 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q90nnm05992j7k9lp2qzk35sgg4ytzjseeq2wm6
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-02 11:40 UTC
bc1q90nnm05992j7k9lp2qzk35sgg4ytzjseeq2wm6 → bc1q2ffwlhawm7kgcrc046nyjjk782hy8sqnew7ph8
tx 69b5d6faa5289b98…
Split payment
3.56090148 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qntfw09fnz2cewjsrrmuxpudqyhkz8dmtrvz9n0 1.54919530 BTC Trace this branch
HOP 2 · 2026-09-04 11:13 UTC
bc1q2ffwlhawm7kgcrc046nyjjk782hy8sqnew7ph8 → bc1q70w7uy9h9qt5dxztk5ljr7gv604k9443zvxf36
tx 38751d868e31ecdc…
Split payment
1.55934660 BTC
Continue from here
This spend also paid 27 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qekf8w7nft86n9f7v2h3l3vgg028gpz89tg8h7k 0.85899583 BTC Trace this branch
bc1q6jx8h53keu3lsph6rzgkvs3wgmqxdm4nk0m00r 0.11453277 BTC Trace this branch
bc1qqfyhzuzseamyx4jmj6leygm4lewe4jecdttn3d 0.08661541 BTC Trace this branch
bc1qt9lkejxldzcacvp3zgld56xc4ctl2jd8t2c3mu 0.08589958 BTC Trace this branch
bc1q6xfwy4qf48zu3f8gjdn4xawcxx5ky556ftv949 0.08589958 BTC Trace this branch
bc1qmf7myw4rwtvl4r7vsc5zh6hyvtvv967cphtqet 0.07716645 BTC Trace this branch
bc1qwtgqzr0xps3uyq38zha54c7fnku97azc7pn2x3 0.06428152 BTC Trace this branch
bc1qugjlagqx38jcgfj0tzy3jphq9tty9svr72m3vw 0.05368723 BTC Trace this branch
+ 19 more addresses not shown
HOP 3 · 2026-09-04 11:20 UTC
bc1q70w7uy9h9qt5dxztk5ljr7gv604k9443zvxf36 → bc1qg2mr5ufffkn54a3qh8qqukzcxw2tmzj0r4k49v
tx 980b9cdfc5df0b1e…
Split payment
0.17609414 BTC
Continue from here
This spend also paid 24 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qm4xthhq3u3sq6zd7vaz8f0k7ut5mmz7keka8km 0.17451932 BTC Trace this branch
bc1qhny27khfrl4ffqtrf6ylv8mg37jtuspgc9d9kg 0.15985174 BTC Trace this branch
bc1qppqdaj6e409h3l9drjmhzuptuepcqkecl3zs0c 0.11353061 BTC Trace this branch
bc1qhdj3hsvtujk2xcy0jyz50lhjze5xc4z6c2253n 0.08589958 BTC Trace this branch
bc1qaksdgyn3aypuqjgklehheudzhc892xusy2kz48 0.08403842 BTC Trace this branch
bc1q7ujd4vqdm6d07v65wnlezda0tnmptckx06da27 0.08160460 BTC Trace this branch
bc1q8tsqcegsu6g82kjfx0qf78qsyl8mw2q8h5dnwj 0.07988661 BTC Trace this branch
bc1qfasggrklprfa5wqc8s2h0xq894a47fv7dlvg77 0.07931394 BTC Trace this branch
+ 16 more addresses not shown
HOP 4 · 2026-07-06 15:41 UTC
bc1qg2mr5ufffkn54a3qh8qqukzcxw2tmzj0r4k49v → bc1qrctu3lh7209fgd4j06qmtl802suy0ggt6pcul0
tx bad9439b93e65d73…
Low Risk
0.27505067 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.