Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.33134604 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qtthqm99gpznm3d2thufvv7kfzcrx2pcsy4pza9
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-03-26 22:13 UTC
bc1qtthqm99gpznm3d2thufvv7kfzcrx2pcsy4pza9 → bc1qyznegtgakmkmyjx9snuk8k5ekl6e694t4dt07s
tx 2d2fa5d303a1919b…
Split payment
0.33134604 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q7r9xvzkukkl5xnx7z0hy5apl2ujf867rn82t9g 0.27693028 BTC Trace this branch
bc1qq99nqmvgq47vgvyqmlse8zflfk6lgh3pqhdhd6 0.01164756 BTC Trace this branch
HOP 2 · 2026-03-31 05:21 UTC
bc1qyznegtgakmkmyjx9snuk8k5ekl6e694t4dt07s → bc1qy9de9434he74x4q6xewtrzcf6q5qk8ntw286h7
tx c8cd8ff7d76ba790…
Split payment
0.43809749 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qy9cjvj4lsjf6700w9j4h876qqhd7xl0fp84e0d 0.00177983 BTC Trace this branch
HOP 3 · 2026-03-31 05:31 UTC
bc1qy9de9434he74x4q6xewtrzcf6q5qk8ntw286h7 → bc1q5v8yfeevlwrxr6hhf9fvtm3gs39k3rup3x48af
tx 92f9aca856a2ea4e…
Low Risk
0.43809557 BTC
Continue from here
HOP 4 · 2026-09-09 11:07 UTC
bc1q5v8yfeevlwrxr6hhf9fvtm3gs39k3rup3x48af → bc1qxl2xe3hdr93dnjght20py92t8nf2ykr567esam
tx 37696c3dbe5fd346…
Low Risk
0.28000000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.