Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
564.98925399 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1q2xlr4tfrlq258c2fqf9fz2uyqz3uephxvne7dn
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-06-26 10:40 UTC
bc1q2xlr4tfrlq258c2fqf9fz2uyqz3uephxvne7dn → bc1q6h274e67rdr7xpn2mr2ttnssjzx3rhlkug6m5q
Split payment
564.98925399 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1GLPH9b4eyPDRfFhA7u4RyCBPzQeu2JRbG 0.01550047 BTC Trace this branch
HOP 2 · 2026-09-09 23:31 UTC
bc1q6h274e67rdr7xpn2mr2ttnssjzx3rhlkug6m5q → bc1qamgjuxaywqls56h7rg7afga3m6rgqwfkew688k
Low Risk
22.00000000 BTC
HOP 3 · 2026-09-08 16:01 UTC
bc1qamgjuxaywqls56h7rg7afga3m6rgqwfkew688k → 392TWqWTunWJRXtFxSmpwbwF899RTD8pgz
Split payment
0.16953438 BTC
This spend also paid 17 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q9pmyrel7xpkz82rudups3wl25urqah35vp3uty 0.01459820 BTC Trace this branch
bc1q2exxz4ml9t8dkm0wv2tlj0avmv98t22dm38a59 0.00276000 BTC Trace this branch
1NqGdAXXR1m122nJVem9XtZ5LvqWVfkoKP 0.00270000 BTC Trace this branch
bc1qn0zl4j5e04ruyghlvy0zy37m34nxr4ghr7m4e0 0.00138128 BTC Trace this branch
bc1qxzpnh2vqfh7lx3y2v7dne69yzz24kxgntf7p2k 0.00120105 BTC Trace this branch
bc1qgcgme9jxgzpdsjwh80cxhmxj5le9crlwlags6tms5ckng5hdcuws6csuk4 0.00113105 BTC Trace this branch
bc1qk2gh34azyye43m9z47e89fje23kln86000gnat 0.00107931 BTC Trace this branch
bc1qlkshnynvyewsarhsj7ns4chlw0zhkn2e7nvka9 0.00093557 BTC Trace this branch
+ 9 more addresses not shown
HOP 4 · 2026-09-07 18:20 UTC
392TWqWTunWJRXtFxSmpwbwF899RTD8pgz → bc1qx9n80t5q7tfmutzaj0ramzzzsvtveara68zntc
Low Risk
4.12918194 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.