Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
70.00000000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
1JJWhbEijNpARPdL3xXBLWP3NnVca1MY7S
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-10 15:53 UTC
1JJWhbEijNpARPdL3xXBLWP3NnVca1MY7S → bc1qea0vmknzhd96fcsgfkg557f7stjulvegnxv99uk7vuusy94qsmrs7yxn30
tx 04958985288271af…
Split payment
70.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qhh9qq78l3dd5dnnu0xqlsv9nljem43xe7cl3h4 1.45127692 BTC Trace this branch
HOP 2 · 2026-08-12 21:04 UTC
bc1qea0vmknzhd96fcsgfkg557f7stjulvegnxv99uk7vuusy94qsmrs7yxn30 → bc1qxe6nlda4y4h6ekj7jm9klr6vn6h9pmy8pn6yzycceqzj08532z4qxxrlza
tx aa136342be779830…
Split payment
530.53383444 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q2tmtz7fje4qh3prfa3hjmghnh7c9fsyndlzf96w5rycw55jyxwnshqpgtd 319.75616556 BTC Trace this branch
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d 35.96351850 BTC Trace this branch
HOP 3 · 2026-07-25 03:34 UTC
bc1qxe6nlda4y4h6ekj7jm9klr6vn6h9pmy8pn6yzycceqzj08532z4qxxrlza → bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d
tx 5657a0243dee5692…
Low Risk
4690.14000000 BTC
Continue from here
HOP 4 · 2026-09-07 06:02 UTC
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx ed0a00cf2f53eac3…
Split payment
56.14000000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6 3.52000000 BTC Trace this branch
bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz 1.72000000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.