Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.44793076 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q2mgg9vydrnhrwvpt9uzm00la5ntfnkc85pt6nu
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-12 09:28 UTC
bc1q2mgg9vydrnhrwvpt9uzm00la5ntfnkc85pt6nu → bc1q3hh5ea8sczanhtlyajla35r79rxqaup5yaux9y
tx ca4162160e6bde63…
Split payment
3.44793076 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q43e4cqscupz2k7kvyuu42pvrjcxa2gsv4wgfw6 0.00060788 BTC Trace this branch
bc1p5akucnl7tasjp7cw0qej6q389hsed54uwham9ucepr4x3lygyz9q0kuvla 0.00002640 BTC Trace this branch
HOP 2 · 2026-08-31 02:25 UTC
bc1q3hh5ea8sczanhtlyajla35r79rxqaup5yaux9y → bc1pwmgtu2wfmltaup6fdj6r7ur5f88qp3xg26dyt8h9yaxu9g7hu3psu90y0e
tx 634233e69682a329…
Split payment
0.99091772 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q6y0706g9ufzxk27mp5j7agmf9x552kullsjy2v 0.05027114 BTC Trace this branch
bc1p5akucnl7tasjp7cw0qej6q389hsed54uwham9ucepr4x3lygyz9q0kuvla 0.00005940 BTC Trace this branch
HOP 3 · 2026-09-07 21:53 UTC
bc1pwmgtu2wfmltaup6fdj6r7ur5f88qp3xg26dyt8h9yaxu9g7hu3psu90y0e → bc1pdwu79dady576y3fupmm82m3g7p2p9f6hgyeqy0tdg7ztxg7xrayqlkl8j9
tx 2a7656e3843aad8f…
Low Risk
12.93805503 BTC
Continue from here
HOP 4 · 2026-09-08 02:50 UTC
bc1pdwu79dady576y3fupmm82m3g7p2p9f6hgyeqy0tdg7ztxg7xrayqlkl8j9 → 15DomY3arDPw5jD658Mbf3AY3wT3YCDmW2
tx ae0bd2cc1cc5f0e6…
Split payment
35.39998893 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q20uf5etnrjztgpsl4l2p8z28pv2hr2e3d4mp0f 0.01257187 BTC Trace this branch
bc1qteafc02z6ajqdvx5a60k052u9rssgwk70kuy6d 0.00315671 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.