Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.21528885 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qhtk06eyt7znx78uu65mafjg5n5v5pzppc4w8e48ut0panch90djsde5pvq
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-03 22:02 UTC
bc1qhtk06eyt7znx78uu65mafjg5n5v5pzppc4w8e48ut0panch90djsde5pvq → bc1qkh4puh09stpak2dgm45z54y33aana9pxns8wff
tx 9db06fca45bcd936…
Split payment
0.21528885 BTC
Continue from here
This spend also paid 9 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q4rr4qlfdxx63407h6qr252kvkudvuukpn3wynv 0.08632601 BTC Trace this branch
bc1q3a3a0fafsa2ytmsx9g7nd0lqm0znpfypf9y5eq 0.02663429 BTC Trace this branch
bc1qhyd2csrqn222elnvf3xretjwjvtyl3hc3vqj74w280g3qfns966sz9z09m 0.02202851 BTC Trace this branch
bc1qkcan5x0zypat75z4zup9vr88txrak5uvflsc63 0.01846401 BTC Trace this branch
bc1qk5dsvff06qlnhkf58k7wf6n4vgp80t7q66le68 0.00190215 BTC Trace this branch
bc1qxfv3vexjv54vvq5nh5wq25w2l79nmpd2ussyr6 0.00105414 BTC Trace this branch
bc1qcfz2yen9pkc5yreafc0kpdmc5nefg6kslpz63y 0.00071083 BTC Trace this branch
bc1q4uqk8k95wd4wqa27v6pndzhugramhg0pxu6rdq 0.00053448 BTC Trace this branch
+ 1 more address not shown
HOP 2 · 2026-09-03 22:51 UTC
bc1qkh4puh09stpak2dgm45z54y33aana9pxns8wff → bc1qldeyxgzhttfxp0rcgcnrl66mqh6n68xw9ps4f6
tx 24bc4c7e2105be5f…
Low Risk
0.21528555 BTC
Continue from here
HOP 3 · 2026-09-03 13:10 UTC
bc1qldeyxgzhttfxp0rcgcnrl66mqh6n68xw9ps4f6 → bc1q0fycgp9sta5a2m9weh4y4nc8u257l33p5tzykc
tx 128253d8c11ad784…
Low Risk
1.09540000 BTC
Continue from here
HOP 4 · 2026-09-07 12:43 UTC
bc1q0fycgp9sta5a2m9weh4y4nc8u257l33p5tzykc → bc1qk208x8pff5myux4pfax98ygfefj6xeghfaxgz0
tx bf35197afd22ec5c…
Split payment
1.29276100 BTC
Continue from here
This spend also paid 11 other addresses — not followed above, since the walk only continues down the largest branch:
bc1pxlmx7z83jwu8u4cxzevy8w2lvzvlqcsfsr6u09dp2leak8l563wsxmw970 2.06334000 BTC Trace this branch
bc1qd34sd834gh76qgzzwny72rxlpujr3y65sa0yue 0.03721100 BTC Trace this branch
bc1q9s2rqgd2yjt6tge9mvmdf8qzq5f8z4u5lafymh 0.02210400 BTC Trace this branch
bc1qadhm5fq43hh9r4rkey660c6uec97qvmrpglut0 0.02109200 BTC Trace this branch
bc1q2jtvwu4kjyaqn58tvtm3p96tj46e60ya4qf462 0.01607100 BTC Trace this branch
bc1qlskxz0pcye4xdq06cjs72vrkycuvgkukylw74r 0.00808100 BTC Trace this branch
bc1q9p0r86khrr3k0x427aw54y7ldwkn4j6432ez3m 0.00618800 BTC Trace this branch
bc1qqyk7zdcgcm0u6r6r4zxc9qdx6pn7m2zrxfwgyv 0.00362700 BTC Trace this branch
+ 3 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.