Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.00000000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
18RHNzVLQLiCsJiUaWyQdodeeGPquvYRZd
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-07-06 10:52 UTC
18RHNzVLQLiCsJiUaWyQdodeeGPquvYRZd → 36SBn3GCZmBLyg4ELJej8rJeRLfJcrbnCQ
Split payment
3.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1PhvgKg6FVMf2D7jxdSyJQJS8yVqKYuF8T 0.00759291 BTC Trace this branch
HOP 2 · 2026-08-21 15:11 UTC
36SBn3GCZmBLyg4ELJej8rJeRLfJcrbnCQ → 34oi84nhmQxCFSfVqBVkLrBG3dHNa6iSxS
Split payment
80.44721026 BTC
This spend also paid 14 other addresses — not followed above, since the walk only continues down the largest branch:
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d 5.85688492 BTC Trace this branch
18yPgS8HTy2jSN79TDDsityNHa7orZKY3D 0.38998425 BTC Trace this branch
bc1qqtlk8jsgtkt4g3hzs8muhhtkpcltng47n6lz0z 0.03998500 BTC Trace this branch
bc1pxr04vfspp0yyjdrjduat50hlfafx9jjvuf9v6ln4pjt5yhsgl5es2gay2u 0.02489841 BTC Trace this branch
1LUzRaUfitZwVA25ivfo3389kD7GrMdnBz 0.01952136 BTC Trace this branch
bc1pe8vga994pp3r8g62afewkl2yt46e6qfu5jzumk59nz5s0s07hyvqg6qnt4 0.01835666 BTC Trace this branch
bc1p6wzc67cd07dj5qmmj333kwd7pt9k2zlujmcsj3mlgh6uh3k366fqw8dhuh 0.00427027 BTC Trace this branch
bc1py2elvu46wcsyrneafezrvn6pvpqw2hds64a5060ds3vz5dpweekq4mt24l 0.00198321 BTC Trace this branch
+ 6 more addresses not shown
HOP 3 · 2026-08-21 16:03 UTC
34oi84nhmQxCFSfVqBVkLrBG3dHNa6iSxS → bc1qx9n80t5q7tfmutzaj0ramzzzsvtveara68zntc
Low Risk
170.65138885 BTC
HOP 4 · 2026-09-07 11:36 UTC
bc1qx9n80t5q7tfmutzaj0ramzzzsvtveara68zntc → bc1qh57h4kcm7avp3hvqk3sx4nd5y4jef3le2p3tkv
Split payment
94.88633863 BTC
This spend also paid 12 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q9txdpskvtrru8zytxp0ym2yvw5ud44znaw8p5l 0.05044520 BTC Trace this branch
bc1prd73ww4g6mm6tm40fza9p5tvtnzqkvnmuap3g0dn53yyznacupcqc6nur0 0.01664500 BTC Trace this branch
bc1q908uml997c35c2c8mkt0j07fx4whenkfpv5u23 0.00881590 BTC Trace this branch
bc1q3rcsyl4ystxn8hf2xr4pdhamzzmtus8vve5rjm 0.00573379 BTC Trace this branch
bc1qveagkmmuz6d4vwuux2znz6wfh9qdvn6hq2tdv0 0.00497189 BTC Trace this branch
bc1q76qcgszlmxd9vpdse679h0lmsk4fpenn0qv3zl 0.00346953 BTC Trace this branch
bc1qxrnrzzgmushckqgau3yvnppjspg9haycmh3r78 0.00249533 BTC Trace this branch
bc1qnseat72y36u3galfe5r9gj9c8r4eyn72aytumt 0.00153448 BTC Trace this branch
+ 4 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.