Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.03716543 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1pd64v7czv0s4u7c8rwj7yfur5a7ca5f3rrehsr3ksppvykgslrjysrapqwp
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-09 01:00 UTC
bc1pd64v7czv0s4u7c8rwj7yfur5a7ca5f3rrehsr3ksppvykgslrjysrapqwp → bc1qlzgkwwj6ppzsrm7ux2yznrre3nxt5k2ua9gmmu
tx dbec86eb17330050…
Split payment
0.03716543 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qwse6j3jwz5s09kmqqmyq5x85p7jw5sl06j9dn5 0.01202519 BTC Trace this branch
HOP 2 · 2026-09-09 15:14 UTC
bc1qlzgkwwj6ppzsrm7ux2yznrre3nxt5k2ua9gmmu → 31kMRH61qgj8KACy3NQcCJ6iAYJgHTAgvV
tx d80a21d8c84fc6be…
Split payment
0.02591353 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qr6syngrznk6u6gf4je5tkjcrlmxvvq2mc5xlw6 0.01124868 BTC Trace this branch
HOP 3 · 2026-09-09 15:36 UTC
31kMRH61qgj8KACy3NQcCJ6iAYJgHTAgvV → 3KMmeqPeQcngyTehdfSwsGqvxfU7J7qtc8
tx 3ee0679c5dae5b69…
Low Risk
0.14190649 BTC
Continue from here
HOP 4 · unconfirmed
3KMmeqPeQcngyTehdfSwsGqvxfU7J7qtc8 → bc1qdft2curchxv4ttm6gch2dyha665whf0snvmtu8
tx 6477999c26f63a0d…
Low Risk
1.24821203 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.