Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.04037150 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qd34sd834gh76qgzzwny72rxlpujr3y65sa0yue
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-06 19:27 UTC
bc1qd34sd834gh76qgzzwny72rxlpujr3y65sa0yue → bc1qm2h3y27jvj0xz5ty4ptkaxxqgxwzza7gsjxxn0
tx b4a185c6e89d2a37…
Low Risk
0.04037150 BTC
Continue from here
HOP 2 · 2026-09-09 22:01 UTC
bc1qm2h3y27jvj0xz5ty4ptkaxxqgxwzza7gsjxxn0 → bc1q4g2f8t2u6hem9y4h8qzhh7qgmys4829dsa9jef
tx ad53ecf675b0b419…
Low Risk
0.00927220 BTC
Continue from here
HOP 3 · 2026-08-22 19:15 UTC
bc1q4g2f8t2u6hem9y4h8qzhh7qgmys4829dsa9jef → bc1qeg9x5atq39dtyecyqne306vg4rpfs8eza39dpu
tx 4c19f7bb771e5e36…
Split payment
0.47777470 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qx7pqly553zt57putlr3azktlmq56csldvj99ha 0.00001202 BTC Trace this branch
HOP 4 · 2026-08-24 00:15 UTC
bc1qeg9x5atq39dtyecyqne306vg4rpfs8eza39dpu → bc1qvlyn4j3j8p3hvzrv5cv4a096pygfsa6wc9nzfe
tx 0a0d64e5fd6e2751…
Split payment
0.31591897 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qsnseuts35wfpu8auy5pm0exp23yqxvjdfta6zl 0.28520127 BTC Trace this branch
bc1q42h42mp0htr2alrsevh6a3ys2j40p8yvx533me 0.00054138 BTC Trace this branch
bc1qy92cwwp3uzvc7dxutg6huvfzmy9ufn6rkzu5yd 0.00023516 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.