Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
2.41225113 BTC
Hops Traced
3
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1pv9yuw5wvzxw0hrl5xleajp7hnrt8c7gyarkn2ytj0xez4a8l62sqtsj8t4
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-19 04:21 UTC
bc1pv9yuw5wvzxw0hrl5xleajp7hnrt8c7gyarkn2ytj0xez4a8l62sqtsj8t4 → bc1pkdjtejgx6h4vkc6em3fkthmme8avtwmwlplt7zejtrw9pdtmmmnq07exhh
tx 6fe3e32a7be131e7…
Split payment
2.41225113 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1p8mytd4u738026xpurgfkjva5c0zjvklq2rymvm3ztjdsq5wa0jrstgnm2j 0.01185000 BTC Trace this branch
bc1qc0zn3d0vvc4gffjcp2q222c2ldtzzuuu932jel 0.00799500 BTC Trace this branch
bc1p9s062055el05v3a2w6myqus8fdz2kqn2je2z2slzehc0qqq2wzaqher307 0.00544000 BTC Trace this branch
HOP 2 · 2026-08-24 08:37 UTC
bc1pkdjtejgx6h4vkc6em3fkthmme8avtwmwlplt7zejtrw9pdtmmmnq07exhh → bc1pxt8px7dtkvzzqkyu8ktan4aq70vaqt35j9f53gzn8p3rs2d0dndqrzuasz
tx 8adb78a41ab0b4c6…
Split payment
0.04611244 BTC
Continue from here
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
bc1pzd7ye2umj7evs3gfkqn8cnxlqpx5na00xypcul00vzsn33r85xzsymzlmp 0.01516993 BTC Trace this branch
bc1pt78cv0cscsfe5qep7ch62jnnvna7ar9mmv0xff6xc93lt6hedvdsjchhfj 0.00754211 BTC Trace this branch
bc1pnqplw4m337npz6a5tae43r5qnwj8z5wd5xdcfuw8fgtucuw55q8s0sxt5h 0.00740583 BTC Trace this branch
bc1pzkjek5yk5s44akjnxe78uw7xl0ek6vn6gelx86s5eqjchu0ld9cs4e4zav 0.00555200 BTC Trace this branch
HOP 3 · 2026-08-24 08:37 UTC
bc1pxt8px7dtkvzzqkyu8ktan4aq70vaqt35j9f53gzn8p3rs2d0dndqrzuasz → bc1pkdjtejgx6h4vkc6em3fkthmme8avtwmwlplt7zejtrw9pdtmmmnq07exhh
tx 8b0fdaaedbcb6ead…
Self-consolidation
1.27125211 BTC
Continue from here
This spend also paid 6 other addresses — not followed above, since the walk only continues down the largest branch:
bc1pvsqkwdrkedkcvq55snthjp994hz7x8cceave92ewyxalch3crs2qzqa93l 0.02525432 BTC Trace this branch
bc1pnqplw4m337npz6a5tae43r5qnwj8z5wd5xdcfuw8fgtucuw55q8s0sxt5h 0.01465691 BTC Trace this branch
bc1pla5lt92qrjlyjjs7vrkak30tqxhehgxznrtv4kfqallkujrh0wrq8alf0z 0.01264400 BTC Trace this branch
bc1p5fr6vwsgcp8psaza608rtq0ekvrf9cledu55knvvuephhm20k25s5pzwl3 0.00814800 BTC Trace this branch
bc1pjmnn9hqftykkcdmuxeaq0tqe4h09t8jyululh3avp24q6huep98qqx40wv 0.00684500 BTC Trace this branch
bc1p2zz3sp8wfk607enzgjz77e64ds2ad5tmt33z6nalpty694x05atqqp549k 0.00321028 BTC Trace this branch
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.