Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
4.60535238 BTC
Hops Traced
1
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qttv9v7xgy68dnc757vklwa3j96w5x0xxq3eedw
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-10 19:45 UTC
bc1qttv9v7xgy68dnc757vklwa3j96w5x0xxq3eedw → bc1qg423dkjzjxf8j6m8nyca3vmxljsqwng27p5u9f
Split payment
4.60535238 BTC
This spend also paid 13 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qevqxtvq68zfztugzxhrq5ud3f8plnn0sslraxk 1.20265968 BTC Trace this branch
bc1qghcfqrlpelxy7g2w5xvcq6jttc7mt6hukrz79s 1.15047460 BTC Trace this branch
bc1q4wqqxsdh7mjaln62wv89rghetx3qfjs720vmrd 1.15047460 BTC Trace this branch
bc1qg9pn2eqnvszz3sfnrpngqlywmh2c6wveg90kxu 1.15047460 BTC Trace this branch
bc1qra09lzeas28l4k84q3nzkukkrnrltxsuv6kzkk 1.15047460 BTC Trace this branch
bc1qrn6c7xumzqc0sx4qw9ene6sxv7qnnhcnessy2u 1.15047460 BTC Trace this branch
bc1qacdt3wuver0qjks268a5dysr5y6aw76rxd9rdn 1.15047460 BTC Trace this branch
bc1qu9sg7tq67vn6awdq69yx9gx4n9keza0wquv4dw 1.15047460 BTC Trace this branch
+ 5 more addresses not shown
Trace stopped: no further outgoing transactions from the last address.