Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.98899231 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qp2a4wgvcr8jzc80hd5r9hshwecxwkhtt367jyl
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-07-23 08:16 UTC
bc1qp2a4wgvcr8jzc80hd5r9hshwecxwkhtt367jyl → 3LddaNKHGbtB8JXfHX1YTz9owuSHpdT1aX
tx ea7d3479053a9b49…
Low Risk
0.98899231 BTC
Continue from here
HOP 2 · unconfirmed
3LddaNKHGbtB8JXfHX1YTz9owuSHpdT1aX → 1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g
tx 836cfd31148751b3…
Split payment
1098.35640926 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1KbDEg1tDz2ErYgaDbaDhhawnLrSQFaFx5 44.30000000 BTC Trace this branch
HOP 3 · 2026-09-07 09:11 UTC
1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g → bc1qwwg0jttv2rcd99dw2jt23egsevdgvdtd9t5er9
tx 7be964967204af8f…
Split payment
72.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3PjzoFRf8grRfj3WnohpXSxASPupHfjXoL 0.01232999 BTC Trace this branch
HOP 4 · 2026-08-03 06:13 UTC
bc1qwwg0jttv2rcd99dw2jt23egsevdgvdtd9t5er9 → 1KDBqT1AsMiMV1oK7rW9CF8S1JwRkrtZu3
tx 4ed7df700cc571a9…
Split payment
13.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1pkfmr4yp3pxuwufj23deyh0n8raege9rmuwdt94t74vquq8864weqtlnnsp 10.00000000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.