Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.19120416 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qzcpnvfsd3kyk2xuc0rq6l9m29c4f9afkr2863heu2658szn2ef8qshla2x
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-04 13:10 UTC
bc1qzcpnvfsd3kyk2xuc0rq6l9m29c4f9afkr2863heu2658szn2ef8qshla2x → bc1qw7pl07y4hywqe8xdznjscgt8rpwhuajstxrgawl97flh4enz9h5sk4pa65
tx d0c0434ccd62a95f…
Split payment
1.19120416 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qqjgrqdxae3ehlyv8r6fxcfyu5f95r2hjjm3udt 0.00916450 BTC Trace this branch
bc1qyk5w6a9m3aw7wcpphadq8qcp3yzfa8zyewkcq4 0.00772068 BTC Trace this branch
bc1q6d63q8u0d6a8yay5auk2nzfy4pn4xc5u3t6gt2ayv3ctqy6g6xqs96u47n 0.00723507 BTC Trace this branch
HOP 2 · 2026-09-04 16:16 UTC
bc1qw7pl07y4hywqe8xdznjscgt8rpwhuajstxrgawl97flh4enz9h5sk4pa65 → bc1qyq2afcytd2lhrjh7fe5qctr4czng6rqpxcq67x4enx8djzprpjhq93fsxz
tx 8eae19d373dd5863…
Split payment
1.18248692 BTC
Continue from here
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
18Z6hmyxxfXidaKwnVLTYcRi5WjoBEjaZk 0.00479882 BTC Trace this branch
16eiGNHrezHbewPH16LHLeGB5wzth7oU5r 0.00195507 BTC Trace this branch
bc1qwjgtvvr9e0fq76qy85dkxd2zpv4vf78htmuexk 0.00104290 BTC Trace this branch
1Hd8ZTTvvHLFJd82rWyFL1bWm1TdMwNtRu 0.00091461 BTC Trace this branch
HOP 3 · 2026-09-04 17:31 UTC
bc1qyq2afcytd2lhrjh7fe5qctr4czng6rqpxcq67x4enx8djzprpjhq93fsxz → bc1q9x0wt265pq7fz3zqju2wz7a29kqqm84japfctla5m09e3ykzqxvs7xw485
tx bf7e5bf967a4c4a0…
Split payment
0.84315136 BTC
Continue from here
This spend also paid 14 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qhjtw0d3uxe35pxtjr5gjm3w95ehy27e9kgujz6 0.18288830 BTC Trace this branch
bc1q7avc2egdhvs0tf8we8wynlhg7dmh78mwra6l0r 0.05915964 BTC Trace this branch
bc1q8z3kq6acsjjwp8jsgp9ummm2hjj0lg2lg2sukl 0.03615618 BTC Trace this branch
bc1qwde6r4jpvwxvazeh0tkjc58heedxrz7afnkvth 0.03089460 BTC Trace this branch
bc1qqmclylrrsrphzqnql57vfvuxdnffdzr4pxv28ap9ashurl9funtqtf4zng 0.00908693 BTC Trace this branch
bc1qt4aucr052xdmx2hqf0gujwgz8rjy60zc0hr4tt 0.00794786 BTC Trace this branch
bc1q7nv2r3yzdwlf7w62k34c8flpu9fyqszet375dk 0.00353180 BTC Trace this branch
bc1q3uc7zz2x86ukgw25x9ktsh6qy2p80p2dry4t25 0.00353053 BTC Trace this branch
+ 6 more addresses not shown
HOP 4 · 2026-09-04 18:17 UTC
bc1q9x0wt265pq7fz3zqju2wz7a29kqqm84japfctla5m09e3ykzqxvs7xw485 → bc1q32jf0ymwzc2lxaarttjk8pxn7mz9r4nyf02rudga9s0w99chhscqatr5g5
tx 570339660fc52ce3…
Split payment
0.35204448 BTC
Continue from here
This spend also paid 10 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qw490wyc9ye26lrf9cy828flycf2gpfx9agf0zq 0.22108240 BTC Trace this branch
bc1qznw7djyqq4p6m5xt9elwe808m2wvj9c9sxlfg6 0.11921305 BTC Trace this branch
bc1qgm3k6d9rjjavsvm8qglnr3nehe0mpz6elgkhyj 0.08406813 BTC Trace this branch
3ECETCtPQtBcdnffREunijaPTsYiVvc6Ur 0.03419125 BTC Trace this branch
bc1q55jsc7xyf8falnfx8v4aprc4qn0guclwzm8hcg 0.02652719 BTC Trace this branch
13jkLwkiNfLat9xYxsiTKi64QktNsGD2Pd 0.00291808 BTC Trace this branch
bc1qqv7umd7jsrlqq7gwyg7sr3fpdzutagua96txpe 0.00170271 BTC Trace this branch
bc1qkys3fpvtr2rach6up946ty0n05e894emt8cfu3 0.00114951 BTC Trace this branch
+ 2 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.