Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
69.99987700 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
1MDsTxje3tpSnHnKzjEfjr8uu9Nc9vGm2c
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-02-25 18:35 UTC
1MDsTxje3tpSnHnKzjEfjr8uu9Nc9vGm2c → 168BveijMCEZPSbVQL6jAQNoAZd39996P4
Split payment
69.99987700 BTC
This spend also paid 13 other addresses — not followed above, since the walk only continues down the largest branch:
1JJWhbEijNpARPdL3xXBLWP3NnVca1MY7S 7.99987700 BTC Trace this branch
1GrwDkr33gT6LuumniYjKEGjTLhsL5kmqC 3.18601295 BTC Trace this branch
bc1q9fewttc9h9dh2k7zztz7353eedr4udjaframns 0.71589229 BTC Trace this branch
14uVRJTCBQB5HwZboTxJC5LZiz6CZSMfnk 0.14986200 BTC Trace this branch
bc1qrz4eg0098udxtpx770sn22u7gr5gcnz0agjncq 0.00893532 BTC Trace this branch
bc1q30gntkqk8dgm0wqeca6r37hqdkpam5mh2sw0dn 0.00814069 BTC Trace this branch
bc1qnnkvgk2f7ekjz6httuelv499sly483lnp44nr7 0.00733455 BTC Trace this branch
bc1qnaalc053cywqyg4ldvrg8ak3chz43s06lp0mxj 0.00484401 BTC Trace this branch
+ 5 more addresses not shown
HOP 2 · 2026-09-08 09:30 UTC
168BveijMCEZPSbVQL6jAQNoAZd39996P4 → bc1q4gu839kql8fzd33rh7th8vpc7yg0yqk53gwvgn
Split payment
166.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q8q62jrclpy0yl2yfvqm32fmh069nxdclyeqmkg 33.99997734 BTC Trace this branch
HOP 3 · 2026-09-04 19:33 UTC
bc1q4gu839kql8fzd33rh7th8vpc7yg0yqk53gwvgn → 3PDMVx1YRhySaPEtCV2AT1aEq9DwgPU4uq
Low Risk
99.99998400 BTC
HOP 4 · 2026-08-29 10:58 UTC
3PDMVx1YRhySaPEtCV2AT1aEq9DwgPU4uq → bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d
Split payment
174.94778870 BTC
This spend also paid 6 other addresses — not followed above, since the walk only continues down the largest branch:
bc1pmj8cajdxu8fht4k0r98qyyyj6j7dwtt5cp6ug292fev9rnzes7dqwagty8 74.99663917 BTC Trace this branch
13ejnmKGYAsgshAKJqM4e9V5fNAPqhTY5E 0.05190331 BTC Trace this branch
bc1qgx5vad2z3jkcmtj7lchqxvx5se92tavu2tuxlj 0.00479747 BTC Trace this branch
bc1qcupmn8xmxup8pser9uxqttvva4ag5wtnn8az6t 0.00282039 BTC Trace this branch
bc1qav4d6amjnp27l92nz66gvfu9dyl0lz7evmp69e 0.00120000 BTC Trace this branch
bc1qkxafsflzz9cwjdj3pjpsy2m2guve9z06luj5qh 0.00096376 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.