Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.01235643 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1q6gtv4fhyl997lthdtqnmmz530ya68wu9qlmqv3
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-15 12:36 UTC
bc1q6gtv4fhyl997lthdtqnmmz530ya68wu9qlmqv3 → bc1qyr2d0kz2fzaxax5utgdl8qr5l3upaqpjt6sq88
Split payment
0.01235643 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qggh75tfevzf8zzrwzyh0r03l4xwhezrph4jw3n 0.00005822 BTC Trace this branch
HOP 2 · 2026-08-01 18:03 UTC
bc1qyr2d0kz2fzaxax5utgdl8qr5l3upaqpjt6sq88 → bc1qxv65dgyhy0ry9jkmeqxprzgr8trztq9xg8x03q
Low Risk
0.10848865 BTC
HOP 3 · 2026-08-04 13:01 UTC
bc1qxv65dgyhy0ry9jkmeqxprzgr8trztq9xg8x03q → bc1qlmp8r0l6zj9dujy9907sklnjwzc7p0uudwkxcx
Split payment
0.99605810 BTC
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q3srqpm7jtep3r0yen7wyvk7cx09et8enrxt3m6 0.00741726 BTC Trace this branch
bc1q6tmgznfkhjrcrntd4r7aemuunzgteuxa2w5zc8 0.00459643 BTC Trace this branch
bc1qqh39kdqefgx7fwzz7j0cmq2dqq49mu0eg8h0yh 0.00229547 BTC Trace this branch
bc1q844th4ukq6g3l946ztf9x7xhel7wqqc07mde5a 0.00204003 BTC Trace this branch
bc1qdpx8flpfq6fh0dxnkuc9e0vfc3h6xjsnez057c 0.00156712 BTC Trace this branch
HOP 4 · 2026-08-12 14:15 UTC
bc1qlmp8r0l6zj9dujy9907sklnjwzc7p0uudwkxcx → bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h
Low Risk
35.78479590 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.