Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.40000000 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qendg88madad8vyhut5tfwz9e27l7r4qe4vtw64
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2025-10-21 06:46 UTC
bc1qendg88madad8vyhut5tfwz9e27l7r4qe4vtw64 → 3Bb6yVnLHoam2QhiXgkhwb84eqSMHxN9tF
Split payment
0.40000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q20cha48sq6jneerhjsrlgxvef0hlvt28nlfl4x 0.01741096 BTC Trace this branch
HOP 2 · 2025-10-21 05:37 UTC
3Bb6yVnLHoam2QhiXgkhwb84eqSMHxN9tF → bc1q7txpa62f3zl4r0ugprfn0dwyq8w4uexz9hcjef
Split payment
0.58432484 BTC
This spend also paid 13 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qfsz4vqgue046z4s2857cd9z2g0nqlju9nlug7d 0.00320174 BTC Trace this branch
bc1qq5qpev3fdvm26dylrjr2avw3e863zknunu2vq3 0.00310198 BTC Trace this branch
bc1quqs6l6qca2xfchu25lue3sls98eunc26jqnr6q 0.00278032 BTC Trace this branch
bc1qcwajqyv5s92ux4yflgnaqugl5caf7fy4fuglff 0.00233120 BTC Trace this branch
1G46XNX3HyE5nTnaZDfxZ9AZvq7a9HtVkX 0.00120232 BTC Trace this branch
1EWQehoHdgW3ZwdAojAbtnWEDwvTwRsTyx 0.00091536 BTC Trace this branch
bc1qef3r6pv7vhuqgqmcslqsjshpt0wefcer44hnn3 0.00046339 BTC Trace this branch
bc1qsqpck073y2zc9djmndjmjewrm7euyk4l8w9swq 0.00044721 BTC Trace this branch
+ 5 more addresses not shown
HOP 3 · 2025-10-21 05:56 UTC
bc1q7txpa62f3zl4r0ugprfn0dwyq8w4uexz9hcjef → bc1qwxgx35h6rxkjqtjx7nvyfrnp33h6v675wkaags
Split payment
0.55143221 BTC
This spend also paid 25 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qfqza54vdnetwh5ha4mef7lq43r6ssdfm4z3crx 0.00620336 BTC Trace this branch
bc1qgvjx3g3cwhnrs3qsgzyh65920dr685mmqa3kd6 0.00486234 BTC Trace this branch
bc1qdqn3zc7jcl5slmsr36h4smsj5wnjkjxamy5hl3 0.00463663 BTC Trace this branch
bc1q3vm9klklclye2jwdvvrc5va5t9qdxzw5nt3qm3 0.00285605 BTC Trace this branch
bc1qq2cmj26pu9pz904twx3c7faje4e7l8dezu5ecg 0.00278296 BTC Trace this branch
3Pw4u3s49bgtAXaiurUndNLPZTQc6bsc2R 0.00246590 BTC Trace this branch
bc1qwdx6dt5wczwdd68y3ykwsgg3acrc362trl5ztn 0.00131611 BTC Trace this branch
bc1qqfve3ya4t4nel7ryavta27l5jrc87hnmr42rra 0.00123991 BTC Trace this branch
+ 17 more addresses not shown
HOP 4 · 2025-10-21 07:30 UTC
bc1qwxgx35h6rxkjqtjx7nvyfrnp33h6v675wkaags → bc1qfapu09qy8jlcxkyc4awm9fwjvpyrfd59lnl6yj
Split payment
0.52675619 BTC
This spend also paid 18 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qxp6chewl8vf0hltnfecqfh4hnc5llxscd2dywr 0.00971540 BTC Trace this branch
bc1qdnsnwy5u3tee7gnl25e0t8mlldqdj0z8a2x4l9 0.00464340 BTC Trace this branch
bc1qvt56lec0w7tah7hl7hckglz4t3dl3rreyhjdcv 0.00226889 BTC Trace this branch
bc1qcgqf4r6g4jhcm8fq3wje0sstjx35h4sryjjvu4 0.00110596 BTC Trace this branch
bc1qa4wzlz4hunakm28q0dgttfhk7wqs9u6dwhd5wm 0.00092840 BTC Trace this branch
bc1qgrnljt0nzzuldfny2lln63kcdjaylg0qmacsys 0.00088643 BTC Trace this branch
36uLpaAzwGwV9QzHGazWCRnossLaQV3pd6 0.00088225 BTC Trace this branch
1AFxmB5iV5yLrNLAXRAfsyQUz1VimKv2k 0.00087579 BTC Trace this branch
+ 10 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.