Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.81666051 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
3Lx1a1VYrDozjr76BNWf967UV3N9dCk7Qi
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-02-07 20:17 UTC
3Lx1a1VYrDozjr76BNWf967UV3N9dCk7Qi → bc1qk2adj7g9mqsl4njl9djrt8y3zs53dhs0vkea6e
tx 9755dc257bb4843e…
Low Risk
1.81666051 BTC
Continue from here
HOP 2 · 2026-02-07 20:54 UTC
bc1qk2adj7g9mqsl4njl9djrt8y3zs53dhs0vkea6e → bc1qg8uj96xwzwetwqtzhphylzj222fhl4fz4ej0ju
tx 20b8174409eeb6e9…
Split payment
1.70861544 BTC
Continue from here
This spend also paid 28 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qts2swhkuyqdt6uefgpc480l76rqchnc2g2u5xp 0.04315011 BTC Trace this branch
bc1qpfr2gl4g7twcptamalylycvvksk62lajm5vahw 0.01555945 BTC Trace this branch
bc1q6yhzet4r3xwnlxuqe5egxyqw47zymyprwkj9ea 0.01151079 BTC Trace this branch
bc1q9qwn62yk2mkqmuqrw3rvt6wsfjehhm7cmyu53r 0.00721761 BTC Trace this branch
bc1q0qn2lknk9d55env0v2ty5z2hf593srhnqhjdhr 0.00575345 BTC Trace this branch
bc1q855alk63v87dt8ntmxwtmtmrqkn3t94dx2gudt 0.00287673 BTC Trace this branch
bc1qarxq7zrl766ss9z3rtjnprflm26ec2w33k93ym 0.00285306 BTC Trace this branch
bc1qj4fzyun6thn047qcpz86gzhasex9n9wawsuc36 0.00266092 BTC Trace this branch
+ 20 more addresses not shown
HOP 3 · 2026-02-07 21:33 UTC
bc1qg8uj96xwzwetwqtzhphylzj222fhl4fz4ej0ju → 15MMxWhPVnrUzWiyYVnqPwfH14WR1s5aqk
tx 96d6f25da4b514a5…
Split payment
1.45159758 BTC
Continue from here
This spend also paid 34 other addresses — not followed above, since the walk only continues down the largest branch:
3FajKzsrndE9Jj5UJqtWR9K29FRjkKyuZh 0.05754741 BTC Trace this branch
bc1qt2qqgda5as24qvck27n5xwevktghsq0f4qkxfp 0.04172680 BTC Trace this branch
15KPXw9Mx8g8gVG67Woqn6sUHTPGJf9fFL 0.03472502 BTC Trace this branch
13nXXwRWUJwdbZHYEknqurSiedsyBs7bpE 0.03399559 BTC Trace this branch
bc1qdctjekqr7d6jehr4nxv4rhwjxe2k50ul38ear5 0.02509485 BTC Trace this branch
bc1ql4lzrc9r7mat9snzhcm5mqahwaafdf86lxczlz 0.00963134 BTC Trace this branch
bc1qrkg95ctdnpms2qm07jc0s0p6acn2c3dr0q478v 0.00952824 BTC Trace this branch
bc1qfhfryhutskvp7lttlf6u74326dhh9aqdnqj5dj 0.00623959 BTC Trace this branch
+ 26 more addresses not shown
HOP 4 · 2026-04-28 06:48 UTC
15MMxWhPVnrUzWiyYVnqPwfH14WR1s5aqk → 3EpyhpDRu2wz5LtS4sPAmXaGozuxYWdRkN
tx 727d08222ff2ed1d…
Split payment
27.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1AQLXAB6aXSVbRMjbhSBudLf1kcsbWSEjg 1.46604336 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.