Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
11.94328385 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qrv0v2l9ekrx3lnkeusrzvu2hqyha6ex94nxumlhec4mrye8njm7sn7e4v4
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-09 08:13 UTC
bc1qrv0v2l9ekrx3lnkeusrzvu2hqyha6ex94nxumlhec4mrye8njm7sn7e4v4 → bc1qx2x5cqhymfcnjtg902ky6u5t5htmt7fvqztdsm028hkrvxcl4t2sjtpd9l
Split payment
11.94328385 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q0szdgnjn30msnq3852njc8sse357uw7qxxxj4p 0.43136098 BTC Trace this branch
HOP 2 · 2026-09-09 06:15 UTC
bc1qx2x5cqhymfcnjtg902ky6u5t5htmt7fvqztdsm028hkrvxcl4t2sjtpd9l → bc1q0szdgnjn30msnq3852njc8sse357uw7qxxxj4p
Low Risk
12.04235813 BTC
HOP 3 · 2026-09-09 06:48 UTC
bc1q0szdgnjn30msnq3852njc8sse357uw7qxxxj4p → bc1qgnerwnztlz7ne4seq0rdencmavl8xnm9ruuacf
Split payment
11.64259640 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q9xn2h805hhc2mdzk5tvnnwqqn5gmaxx6uru8je 0.39974763 BTC Trace this branch
HOP 4 · 2026-09-08 12:29 UTC
bc1qgnerwnztlz7ne4seq0rdencmavl8xnm9ruuacf → bc1qngh6x2r72mp4nh88l083au728z7me0plytwfj7
Split payment
29.84458500 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qu47r2xvxhmpl3h4v07pf9arkqkye0duc8mnzyr 0.01879093 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.