Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
6.55544881 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qg0wrqmydelazyuwdf8xvxa32lu7f6t4ahp8lzqe5emjs5t0tk5ls4wu3e5
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-05 07:55 UTC
bc1qg0wrqmydelazyuwdf8xvxa32lu7f6t4ahp8lzqe5emjs5t0tk5ls4wu3e5 → bc1qfve290q5glpgcuygjlwpj23ydrhqpmqyvu02tvug6n2z87levutqq9r5gl
tx e122f42fb1242e34…
Split payment
6.55544881 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qzg4kpschqwc54pkjxu58hf36xq4wmvu3jegsxj 0.00098902 BTC Trace this branch
HOP 2 · 2026-09-06 08:26 UTC
bc1qfve290q5glpgcuygjlwpj23ydrhqpmqyvu02tvug6n2z87levutqq9r5gl → bc1qnz9gq0wnrl9nu0vd5cqvwsj6uz5ch3py6y8d8w3dwj0kwk077rcqeyde9v
tx 1a05b84c9319113f…
Split payment
6.03110161 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qdd9envqmccd7qj6j5gq9zksnkl8h44rc95v9dz 0.00617452 BTC Trace this branch
HOP 3 · 2026-09-07 07:15 UTC
bc1qnz9gq0wnrl9nu0vd5cqvwsj6uz5ch3py6y8d8w3dwj0kwk077rcqeyde9v → bc1q67hqf5207za8q5a29v8g0nm3mlfrdtgrygv8mdgpp0aysgw20lzqkurhlh
tx bf6c42784b1317e3…
Split payment
6.05355554 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
3CJDX98kYNvWXwR8nPFTV3RgyuTMMfJgsu 0.10021839 BTC Trace this branch
bc1q8c3p3ej044pzjhu3vla4ra9p8kg6nnsczdsd0t 0.03132809 BTC Trace this branch
bc1qxuc2nh84x66ctutghlhfmvrv00tw50vavlsvxv 0.02507956 BTC Trace this branch
HOP 4 · 2026-09-08 07:49 UTC
bc1q67hqf5207za8q5a29v8g0nm3mlfrdtgrygv8mdgpp0aysgw20lzqkurhlh → bc1qzq7pvdwcnjn3qdevt4synlwsg0q2uj38qsfxe7462tq66ndq6lrsl34f20
tx 41dddeb26bad0372…
Split payment
6.17244946 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q3ngfl6u2p9j5yglx7qcnw3wet2h26hfv7g3avh 0.01270192 BTC Trace this branch
bc1qhkrfs9xxgxj276ja7n2wjpeutgwwzd00quff68 0.00547835 BTC Trace this branch
bc1qdu6ukccsehxa9f3eju4qfzrd09qleqxfyzaqp9 0.00291890 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.