Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.34943996 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qlp8qdmg5fr9kwpmx2xf0cqec9ke6pqd3xfsasq
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-04-15 19:09 UTC
bc1qlp8qdmg5fr9kwpmx2xf0cqec9ke6pqd3xfsasq → bc1q0pu8xm40yvme3qzp3pzuvrsfyd04tzgr23u070
tx e92da84025bdf3ed…
Low Risk
0.34943996 BTC
Continue from here
HOP 2 · 2026-08-21 11:15 UTC
bc1q0pu8xm40yvme3qzp3pzuvrsfyd04tzgr23u070 → bc1qldjea8m0yyffd8ejl5pnr58qcu955dmjfaczdw
tx 3e3c39f3f1649ddd…
Low Risk
0.37329740 BTC
Continue from here
HOP 3 · 2026-09-09 12:30 UTC
bc1qldjea8m0yyffd8ejl5pnr58qcu955dmjfaczdw → bc1qfqtypyr7rpm5g8ujh3aafqytupe47pwg6fhhk6
tx 1a2ef8ed81dd7af0…
Low Risk
0.66772876 BTC
Continue from here
HOP 4 · 2026-09-05 00:47 UTC
bc1qfqtypyr7rpm5g8ujh3aafqytupe47pwg6fhhk6 → bc1qx8dw6w9na32vqhfncrnptw6u0rtxk8ken6mtc2
tx aec705a99bf03367…
Split payment
0.93513266 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1ql3zgslwtrdz89c8r5ckldgs4vv5dy9q4ss0uq9 0.31359760 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.