Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.37370465 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q4a42gdgv5su8j0agljt9vcwlte9nz9jql0xr9n
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-08 07:21 UTC
bc1q4a42gdgv5su8j0agljt9vcwlte9nz9jql0xr9n → bc1q5nlft9m6yhlsjq9gntw8z5d6682m3npd3y4w63
Low Risk
1.37370465 BTC
HOP 2 · 2026-09-07 09:11 UTC
bc1q5nlft9m6yhlsjq9gntw8z5d6682m3npd3y4w63 → bc1qjtrlmp7aslpfkydd8ew7h6pm4g94lt44g2jghh
Split payment
2.47663725 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qcszuz00582egxm8fs5dukxut9gf0ctl9gx8s3d 0.02326106 BTC Trace this branch
HOP 3 · 2026-09-08 10:28 UTC
bc1qjtrlmp7aslpfkydd8ew7h6pm4g94lt44g2jghh → bc1q48yztpzzgwnlu66szyqka3z37qxz63sh08u3vg
Split payment
0.61501727 BTC
This spend also paid 134 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qzpyu4nvw4kajphyhwfujvxuh0zweqrzgsv766t 0.30116957 BTC Trace this branch
bc1q7pvljglyz597kg3nehj0t2whg38f90555afcud 0.07825251 BTC Trace this branch
bc1qgt4pswffm27xr3ejjqz0yzafmh8dqvktn8wd6u 0.05187837 BTC Trace this branch
bc1qwwguxrg6kg36wnlk4m2m3v574r3vqtvd2kqd65 0.04523555 BTC Trace this branch
bc1qnujn6pq2xg254pw7vhn8646veu6r7nej92xfc6 0.03036109 BTC Trace this branch
bc1qd334sx4th4d2njkx55c8dk83yjzgt4u048ms5m 0.02417115 BTC Trace this branch
bc1qcnsmcynp00qqsdyzmjclezmlrkg553qcjckrvy 0.02022523 BTC Trace this branch
bc1qmp3w5fmk94y27rct3r9gqhex056d80cxu8tzr4 0.01287731 BTC Trace this branch
+ 126 more addresses not shown
HOP 4 · 2026-08-21 08:44 UTC
bc1q48yztpzzgwnlu66szyqka3z37qxz63sh08u3vg → bc1qlafjgntwqj5p7fatkhrgtjr347t27kdxhtsfyl
Split payment
5.20000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q58kpwzlqyy7tx7w06ac2tz2r9wvfee89uy4gs5 0.47171704 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.