Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.68232931 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qwwnuuwejqc3twsyc2wu0zzwe9vvpe7np5lqxx0
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2025-11-27 11:12 UTC
bc1qwwnuuwejqc3twsyc2wu0zzwe9vvpe7np5lqxx0 → bc1qp00d2r4vq3qq50lr9k4k7gn2ruwe9j2ge7zh05
tx c7afb3b770edaa2e…
Split payment
0.68232931 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qf3ztd3xu9syrgxq6scgm337mhv4pqakzcdmqc9 0.31538966 BTC Trace this branch
HOP 2 · 2026-09-02 13:44 UTC
bc1qp00d2r4vq3qq50lr9k4k7gn2ruwe9j2ge7zh05 → bc1qwhdls229fufvk9maqxt03s8xvlsh74glafwdp4
tx b0dfa9490e7798b9…
Low Risk
1.48287264 BTC
Continue from here
HOP 3 · 2026-09-07 10:52 UTC
bc1qwhdls229fufvk9maqxt03s8xvlsh74glafwdp4 → bc1qtaefkglsn7qpu9xh0xgxu7ypnklfjvnj9y3qxm
tx 79628e1c88b73dd1…
Low Risk
0.44600000 BTC
Continue from here
HOP 4 · 2026-09-07 12:43 UTC
bc1qtaefkglsn7qpu9xh0xgxu7ypnklfjvnj9y3qxm → bc1q9a67xl67smtue0ajutxttsla25a45x6fdpwccp
tx 3bb7b20020fa31fe…
Low Risk
0.45066055 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.