Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.00124375 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1ql5c7detfw08gywh0stnlg0whlskcw26c8pcm5t
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-08 12:02 UTC
bc1ql5c7detfw08gywh0stnlg0whlskcw26c8pcm5t → bc1qr0qpq728myjn07v7p0vgfvftalv28ass0u2ra4
Split payment
0.00124375 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qhkplq07d83ue070tmjtgmgskh9mquqpfkxe995 0.00079900 BTC Trace this branch
HOP 2 · 2026-09-09 08:13 UTC
bc1qr0qpq728myjn07v7p0vgfvftalv28ass0u2ra4 → 1PY5D459MfTTHi8Mo2cTGtDVNTqBcdLiSU
Split payment
0.04588794 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q9ucpek457cf8myscyvg56kp4ktvn5c8uf8f7x0 0.00083072 BTC Trace this branch
HOP 3 · 2026-09-09 08:13 UTC
1PY5D459MfTTHi8Mo2cTGtDVNTqBcdLiSU → 1G47mSr3oANXMafVrR8UC4pzV7FEAzo3r9
Low Risk
3.91272403 BTC
HOP 4 · 2026-09-07 22:18 UTC
1G47mSr3oANXMafVrR8UC4pzV7FEAzo3r9 → bc1qlha50c2y64ty5ceeg9hzqnmkpphtg2duralgxwlphnndpkrwntmq7y0ncz
Split payment
18.70000000 BTC
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q7uzp2xuden699wspm4y88j087ksh23zt2m5856 0.05493608 BTC Trace this branch
bc1q74ezq2kghsz4suajg3dq3m83yacc0dd6kn5g5r 0.00892597 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.