Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.21573272 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qcel6m02lq876lyn3369v2at3fnntk8vqlc9ncvu9q2tulptlvxtsx05e6g
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-04 04:10 UTC
bc1qcel6m02lq876lyn3369v2at3fnntk8vqlc9ncvu9q2tulptlvxtsx05e6g → bc1qz960l5jdznwup5vlhv4q2gek6njlg3qxyz6t34l32753d0uq46aqkvn6fc
Split payment
1.21573272 BTC
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qhjtw0d3uxe35pxtjr5gjm3w95ehy27e9kgujz6 0.14275383 BTC Trace this branch
bc1qdq9fnjnjeexsenqysj80avjdwqmjeumqtygpsd 0.00087005 BTC Trace this branch
bc1ql3uce7kvp0utv50j4xex2e98ay233m4frfajvp 0.00043500 BTC Trace this branch
HOP 2 · 2026-09-04 10:36 UTC
bc1qz960l5jdznwup5vlhv4q2gek6njlg3qxyz6t34l32753d0uq46aqkvn6fc → bc1qzcpnvfsd3kyk2xuc0rq6l9m29c4f9afkr2863heu2658szn2ef8qshla2x
Split payment
1.21532736 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q4hls0s9qgzyxc035d2vjkvaastney8eec5a0qk 0.00040324 BTC Trace this branch
HOP 3 · 2026-09-04 13:10 UTC
bc1qzcpnvfsd3kyk2xuc0rq6l9m29c4f9afkr2863heu2658szn2ef8qshla2x → bc1qw7pl07y4hywqe8xdznjscgt8rpwhuajstxrgawl97flh4enz9h5sk4pa65
Split payment
1.19120416 BTC
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qqjgrqdxae3ehlyv8r6fxcfyu5f95r2hjjm3udt 0.00916450 BTC Trace this branch
bc1qyk5w6a9m3aw7wcpphadq8qcp3yzfa8zyewkcq4 0.00772068 BTC Trace this branch
bc1q6d63q8u0d6a8yay5auk2nzfy4pn4xc5u3t6gt2ayv3ctqy6g6xqs96u47n 0.00723507 BTC Trace this branch
HOP 4 · 2026-09-04 16:16 UTC
bc1qw7pl07y4hywqe8xdznjscgt8rpwhuajstxrgawl97flh4enz9h5sk4pa65 → bc1qyq2afcytd2lhrjh7fe5qctr4czng6rqpxcq67x4enx8djzprpjhq93fsxz
Split payment
1.18248692 BTC
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
18Z6hmyxxfXidaKwnVLTYcRi5WjoBEjaZk 0.00479882 BTC Trace this branch
16eiGNHrezHbewPH16LHLeGB5wzth7oU5r 0.00195507 BTC Trace this branch
bc1qwjgtvvr9e0fq76qy85dkxd2zpv4vf78htmuexk 0.00104290 BTC Trace this branch
1Hd8ZTTvvHLFJd82rWyFL1bWm1TdMwNtRu 0.00091461 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.