Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
9.66414616 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
38yDPoqFoxBPQKMkh8Ndx3YSggrR4tmZxd
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-08 06:14 UTC
38yDPoqFoxBPQKMkh8Ndx3YSggrR4tmZxd → bc1qrv0v2l9ekrx3lnkeusrzvu2hqyha6ex94nxumlhec4mrye8njm7sn7e4v4
tx 89cf0dd8ad377746…
Low Risk
9.66414616 BTC
Continue from here
HOP 2 · 2026-09-09 08:13 UTC
bc1qrv0v2l9ekrx3lnkeusrzvu2hqyha6ex94nxumlhec4mrye8njm7sn7e4v4 → bc1qx2x5cqhymfcnjtg902ky6u5t5htmt7fvqztdsm028hkrvxcl4t2sjtpd9l
tx d1e68936c3c94fe3…
Split payment
11.94328385 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q0szdgnjn30msnq3852njc8sse357uw7qxxxj4p 0.43136098 BTC Trace this branch
HOP 3 · 2026-09-09 06:15 UTC
bc1qx2x5cqhymfcnjtg902ky6u5t5htmt7fvqztdsm028hkrvxcl4t2sjtpd9l → bc1q0szdgnjn30msnq3852njc8sse357uw7qxxxj4p
tx a6683c97bc0240cc…
Low Risk
12.04235813 BTC
Continue from here
HOP 4 · 2026-09-09 06:48 UTC
bc1q0szdgnjn30msnq3852njc8sse357uw7qxxxj4p → bc1qgnerwnztlz7ne4seq0rdencmavl8xnm9ruuacf
tx b1759d099f82dcc8…
Split payment
11.64259640 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q9xn2h805hhc2mdzk5tvnnwqqn5gmaxx6uru8je 0.39974763 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.