Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.01000000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1pxr04vfspp0yyjdrjduat50hlfafx9jjvuf9v6ln4pjt5yhsgl5es2gay2u
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2025-10-03 04:35 UTC
bc1pxr04vfspp0yyjdrjduat50hlfafx9jjvuf9v6ln4pjt5yhsgl5es2gay2u → bc1qhqsxar93m73xvknflyqeys3w5gamlwy6wzmq85zqcx6rqrcfq85sp3qkjc
tx e281a7505d3fc68e…
Low Risk
1.01000000 BTC
Continue from here
HOP 2 · 2025-11-06 13:26 UTC
bc1qhqsxar93m73xvknflyqeys3w5gamlwy6wzmq85zqcx6rqrcfq85sp3qkjc → bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d
tx 2e200a9137ef7ee8…
Split payment
37.11057608 BTC
Continue from here
This spend also paid 11 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qr7w4rnn7km8elh9ynggz2l459nr3ukakane7dw 0.03881099 BTC Trace this branch
bc1qat05ttvp0fezzldpddug6maz026c3yu9rk637k 0.01164000 BTC Trace this branch
bc1q37zv9z9lsx4n22xqlh6g4kh6cdsspc9kdxre4p 0.01111343 BTC Trace this branch
bc1q8674m6rx90a94q8kg8d6yqd0p46fcnalkn56g3 0.00503645 BTC Trace this branch
1Pf8rXc5WaMKqNjsFxur2pjNJK8xj5bL5z 0.00195737 BTC Trace this branch
bc1pn9xlnk984jq62xumn4h0e47nplfl0ahmyyw0wcuktldg5pch7assp0pphj 0.00193860 BTC Trace this branch
1MztUsnT1EdXTqUc6qNvf6nNsZdU1kNmde 0.00181496 BTC Trace this branch
bc1py4lzawjjk5ezzev8s4v44am6e28kkul8dgglym58pnprt267p47q4leauj 0.00069000 BTC Trace this branch
+ 3 more addresses not shown
HOP 3 · 2026-09-07 06:02 UTC
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx ed0a00cf2f53eac3…
Split payment
56.14000000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6 3.52000000 BTC Trace this branch
bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz 1.72000000 BTC Trace this branch
HOP 4 · 2026-09-06 20:58 UTC
bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2 → bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d
tx f6f3d318e5af24d4…
Split payment
459.54838961 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qk2jypmly2um8nu7zp6e76mw9m0hsmrz453xx7qe29mygtqffq6zs0j5qe0 273.92161039 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.