Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.00726480 BTC
Hops Traced
2
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qf99tjt7rxan6zt3akjj7gu7h5j7uzaaxeqn5jw
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-09 20:23 UTC
bc1qf99tjt7rxan6zt3akjj7gu7h5j7uzaaxeqn5jw → bc1qwmm0qg6k98pfv98aa332aeh79lql3r9vsfy4vh
Split payment
0.00726480 BTC
This spend also paid 7 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qwvk0ghm0ajj2r82ferwjyttznk5hztwtzfue8c 0.00246760 BTC Trace this branch
bc1qkyv0cp8w8ds32h9s39fz6d0s03yp9wmchqzgrh 0.00115940 BTC Trace this branch
bc1qep5htm4384rcecfk5ll5h52p6cp2lpwfhkyhjw 0.00077280 BTC Trace this branch
bc1qlypuwvkcsl0th2wnng282p3zcvasa7cf4l9sq2 0.00059280 BTC Trace this branch
bc1q5ldapke8z5j69xseglawp9ce2f5dl5vsnzjeq9 0.00055215 BTC Trace this branch
bc1qpn8d9xfphttatnqn44nw0zu2lqwydyylekqurv 0.00049380 BTC Trace this branch
bc1qfpk3v73mafh7ptz6q4nygjq4g5e6jud0mfw80s 0.00023680 BTC Trace this branch
HOP 2 · unconfirmed
bc1qwmm0qg6k98pfv98aa332aeh79lql3r9vsfy4vh → bc1pr87swwrwa2zd60hqq7u0le64t657gr4wqcp33myksuu8c7njdskqhqkvke
Low Risk
0.12375533 BTC
Trace stopped: no further outgoing transactions from the last address.