Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.02466500 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1q37g83s7l6wwre69d05hpz4zhe24uq2uchmjj5f
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-07-17 07:01 UTC
bc1q37g83s7l6wwre69d05hpz4zhe24uq2uchmjj5f → bc1qs2s65paj6mmw8e84ywxv2devp8wdyxcw8n9kjf
tx fc28664020424df9…
Low Risk
0.02466500 BTC
Continue from here
HOP 2 · 2026-07-17 09:35 UTC
bc1qs2s65paj6mmw8e84ywxv2devp8wdyxcw8n9kjf → bc1qgs44lqhg7scrmwq0rvdgnkxu56wpcyvwykd30a
tx 9fdcd79c3f9939c6…
Split payment
0.02267593 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qsf5vuxxy2a8eh06zq5kcd2ykv8wz0uw75klprw 0.00099400 BTC Trace this branch
bc1q66jaf4wll5nxqfjl23d8wluntjrv5zgl9qr8qk 0.00099300 BTC Trace this branch
HOP 3 · 2026-07-17 10:27 UTC
bc1qgs44lqhg7scrmwq0rvdgnkxu56wpcyvwykd30a → bc1qwrshyjs868t9r4flvg7zq8ntms368c7gwgwr06
tx 070d056420334b2f…
Split payment
0.01104800 BTC
Continue from here
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
bc1quqqz8tjks3ygmek3zqxer9auvug9wef5wjjmuj 0.00933500 BTC Trace this branch
bc1qjzv2r9m83c3wragk9nk9p80sw9h2plvve7th9f 0.00564700 BTC Trace this branch
bc1qry9cepjxuxvxpkmx34a9kzazxfwjl2f2ydmdgz 0.00393600 BTC Trace this branch
bc1q5txlkxjlshu4zk0ttsw73gn8cea8lsms63ks8y 0.00264266 BTC Trace this branch
13irG5EW2NBzcNJQcMbBJ6jhtHw6huz5NW 0.00147600 BTC Trace this branch
HOP 4 · 2026-07-09 17:01 UTC
bc1qwrshyjs868t9r4flvg7zq8ntms368c7gwgwr06 → 1QEQbNQwsFLpC5QvZLzChGQwFnSVrAdUUR
tx 56fae0858682206b…
Low Risk
0.02410274 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.