Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
8.50000000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qfqkllsx0z32z7xw294s45kxx5l6u3vaz0nejyj
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-03-24 11:49 UTC
bc1qfqkllsx0z32z7xw294s45kxx5l6u3vaz0nejyj → 3DNujgDTc3pb2nfJMk712tQs4GfKtN3KDo
tx da248b482c8fe416…
Split payment
8.50000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q0rj09pt4e9mg9ge25cftu4acwtrmu4x6ru5zhm 0.00012799 BTC Trace this branch
HOP 2 · 2026-03-24 13:25 UTC
3DNujgDTc3pb2nfJMk712tQs4GfKtN3KDo → bc1q0uapvuhktxq046fvwwv72r4u3u5ngxk5lrx7k0
tx 3938e8ee7ad89c40…
Low Risk
8.49999468 BTC
Continue from here
HOP 3 · 2026-06-16 18:29 UTC
bc1q0uapvuhktxq046fvwwv72r4u3u5ngxk5lrx7k0 → bc1q3q99ue3hgwfdh5g6zk9eqhzn9dtw522ghf950g
tx df98dee13b8fb3b7…
Split payment
4.87452912 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
19iHyqtPkLKhy1tLKwsrW3YjmLgrf6y49H 0.80000000 BTC Trace this branch
HOP 4 · 2026-06-16 19:00 UTC
bc1q3q99ue3hgwfdh5g6zk9eqhzn9dtw522ghf950g → bc1qxyay36w6hckhtg76mh8rnps2uxmyu9cr89kw08
tx 89a9f4756fb1ccbe…
Split payment
3.57452336 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
19iHyqtPkLKhy1tLKwsrW3YjmLgrf6y49H 1.30000000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.