Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.50600000 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qspvnwz7ajfkgf2gjt5wunc2cutgjmqz3nj9ksc
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-03-05 16:00 UTC
bc1qspvnwz7ajfkgf2gjt5wunc2cutgjmqz3nj9ksc → bc1qhn6pg2uly2dt52wyzqqa3v3sa28dxz9us3ucpa
tx 4ad8756235fe8375…
Split payment
1.50600000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qjfhhtl8l5ltkp2vs32mt2xhf6dhc54ljvs3s99 1.35068000 BTC Trace this branch
HOP 2 · 2024-06-22 13:59 UTC
bc1qhn6pg2uly2dt52wyzqqa3v3sa28dxz9us3ucpa → bc1q0taw3walt48894sa9xpkkz9uan9zpa3qu8xm7a
tx 3c2d8e5997f6d7a1…
Low Risk
36.52884665 BTC
Continue from here
HOP 3 · 2024-10-26 19:21 UTC
bc1q0taw3walt48894sa9xpkkz9uan9zpa3qu8xm7a → bc1q35wcjelx96w57q980kpydd3tr5fpkz9nk7e6ww
tx 5d08f774c5404798…
Low Risk
36.13840140 BTC
Continue from here
HOP 4 · 2025-07-09 14:51 UTC
bc1q35wcjelx96w57q980kpydd3tr5fpkz9nk7e6ww → bc1qfzml0kuq8q0w84lln5qa9tvwgqe3y7tpjldncr
tx d1fc12c483c8d725…
Low Risk
10.00000000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.