Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.04645030 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qesqc0mw94yjdt2eqc2tqxs96443edyuh83lvcd
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-30 15:08 UTC
bc1qesqc0mw94yjdt2eqc2tqxs96443edyuh83lvcd → bc1q2d53wdzprx9sk3cq5ekra82kvv8t2e4gs7hw7a
tx 4e95f48c1f08248b…
Low Risk
0.04645030 BTC
Continue from here
HOP 2 · 2026-08-30 15:53 UTC
bc1q2d53wdzprx9sk3cq5ekra82kvv8t2e4gs7hw7a → 35KVdk3J62BFqh9WLmm8ZcSYdYzbGVZZcD
tx 6ecbb01b78fc2973…
Low Risk
0.46000000 BTC
Continue from here
HOP 3 · 2026-09-06 02:50 UTC
35KVdk3J62BFqh9WLmm8ZcSYdYzbGVZZcD → 1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g
tx 03c329c43b9d6c45…
Split payment
719.48003561 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
13D6psS4mNe71yV5guqykdiE3kU9vsRULm 5.00000000 BTC Trace this branch
HOP 4 · 2026-09-07 09:11 UTC
1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g → bc1qwwg0jttv2rcd99dw2jt23egsevdgvdtd9t5er9
tx 7be964967204af8f…
Split payment
72.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3PjzoFRf8grRfj3WnohpXSxASPupHfjXoL 0.01232999 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.