Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
8.07279883 BTC
Hops Traced
3
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qkwuwzrsskz53tr3rehdze74sjd0yqhn30cxzvq
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-04-05 03:55 UTC
bc1qkwuwzrsskz53tr3rehdze74sjd0yqhn30cxzvq → bc1q32xya2uhcj0ask2dxdnn7eqq468tl5x7vwl6nf
tx 3b1bcc09e03de220…
Low Risk
8.07279883 BTC
Continue from here
HOP 2 · 2026-04-16 12:10 UTC
bc1q32xya2uhcj0ask2dxdnn7eqq468tl5x7vwl6nf → bc1qkujr9mrv83h6q5q5pa6j2y4e3p92wxxv3ym3n8
tx 695891ceda377cca…
Split payment
5.07102373 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
15EQYQhQVRz3A3EvGtpugGrpgNKrQomyzY 3.00000000 BTC Trace this branch
bc1qw6ceewe5parrz5ztjf4d6zd0gfqgcvwhlg7q7v 0.00175752 BTC Trace this branch
HOP 3 · 2026-04-24 06:16 UTC
bc1qkujr9mrv83h6q5q5pa6j2y4e3p92wxxv3ym3n8 → bc1qdu5vaekj9q4ss0u3ghds2x7kypec9rxz6n7kww
tx 4fdee51939e6d633…
Split payment
5.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q44vuua4kchjylk5f96zgtm9ev9c8gtvuzr85t0 0.07100819 BTC Trace this branch
Trace stopped: no further outgoing transactions from the last address.