Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.48275262 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qjs93fd7savq6k9kakkhemvrx5t023ssk538zsf
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-27 15:41 UTC
bc1qjs93fd7savq6k9kakkhemvrx5t023ssk538zsf → 3Ho5ydiouAYpYDUR328QqP5wFWf5AE6gKh
Low Risk
0.48275262 BTC
HOP 2 · 2026-09-03 20:09 UTC
3Ho5ydiouAYpYDUR328QqP5wFWf5AE6gKh → bc1pypv9rq5yvd37zq2sz65hjjah0nuejgpnagw2wrzfdws8rxm0878sd4hmuh
Split payment
19.41271792 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
35C2L1pCgwzBHNcDcVL1a5RuoefeWqyjAR 0.07321364 BTC Trace this branch
HOP 3 · 2026-09-09 14:44 UTC
bc1pypv9rq5yvd37zq2sz65hjjah0nuejgpnagw2wrzfdws8rxm0878sd4hmuh → 38k9oeuZFB2ypUsKw1d3m6wm9ktk48a7o8
Split payment
199.90000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1pdy7v0pxknp2pht52a5tmea85th9rvk095vq4my9u5plfmfkekqkqrkhdme 1.36717810 BTC Trace this branch
HOP 4 · 2023-10-30 13:44 UTC
38k9oeuZFB2ypUsKw1d3m6wm9ktk48a7o8 → 3C51iPvUtSr2rRVQerZxeiXVpsoynS6bzx
Split payment
26.32000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3FEPttR5ZM68txjXsaFjDfqaCnwinBsU8N 0.00593730 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.