Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
31.79999000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qkqn6epy9dlntj8mvdv97tnl4c666rgtppp5af7aktdmxf7kpazmq2thk0q
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2025-09-22 02:12 UTC
bc1qkqn6epy9dlntj8mvdv97tnl4c666rgtppp5af7aktdmxf7kpazmq2thk0q → bc1p2mlwrss9tmvtfvu0tcxul2h0w67ej8vyjpj3ksctt67vd9r752ksqx6uqm
Split payment
31.79999000 BTC
This spend also paid 9 other addresses — not followed above, since the walk only continues down the largest branch:
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d 3.06798035 BTC Trace this branch
1CcbPLqKpqXHw5PzyFzgynT9FemkRfuR67 0.50000000 BTC Trace this branch
1BRoz1ezjZJxZfGeGrukA2vAxqgWLbMnAm 0.49999000 BTC Trace this branch
1q92VTRiRUpv2nCDk7q95VkVMMRQcBKP2 0.12078579 BTC Trace this branch
1HAny2tLTy1fV3AVPFUnqtrzsSfTsr6at3 0.06960864 BTC Trace this branch
bc1phk8632znc8m7chd2x7d4c07008assx2045hwngp2tvy330k43uhqxvuxpp 0.03240565 BTC Trace this branch
bc1p8u2j2arwtn6srj6swswq93d5pw589s7txep204rmpst4mn2a6xaqh8a5qr 0.01229000 BTC Trace this branch
1J7XfWiVPCjrxKChhdMwKhGMmngXsXu46v 0.00351259 BTC Trace this branch
+ 1 more address not shown
HOP 2 · 2026-09-10 02:43 UTC
bc1p2mlwrss9tmvtfvu0tcxul2h0w67ej8vyjpj3ksctt67vd9r752ksqx6uqm → 18PgxqUNFipHQ7odhpD1iVDc6DhVLSLXTq
Split payment
27.27894745 BTC
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qcadgk6uylhp4kdw5yy0jxlu9sxr6wwednuqxkw 0.00001092 BTC Trace this branch
bc1qa9nns4s52888j8drqqh4zx7c7u9vmrlqa8k4me 0.00001092 BTC Trace this branch
HOP 3 · 2026-09-02 04:58 UTC
18PgxqUNFipHQ7odhpD1iVDc6DhVLSLXTq → bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h
Low Risk
99.59640473 BTC
HOP 4 · 2026-09-06 10:03 UTC
bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h → 1KNm4K8GUK8sMoxc2Z3zU8Uv5FDVjrA72p
Split payment
27.74998000 BTC
This spend also paid 11 other addresses — not followed above, since the walk only continues down the largest branch:
39m2NJgwpKFnz3uSnAnHAqz3yLV5AYiGFn 0.13013144 BTC Trace this branch
3NhLb2acHdy8Pd8orT4e8QKxGuLecsq6D7 0.05480020 BTC Trace this branch
38puG7PohBpWAQasCXHtDQrangt7V9sqtR 0.00247427 BTC Trace this branch
1Ch2b7fEQ1DJjRvdKymzX47bFKHDpox2HM 0.00126680 BTC Trace this branch
bc1qt5t3a8zmz2t9xf7u57uu55arm4j5ea9a9pua9d 0.00115388 BTC Trace this branch
bc1q3qtamedj6ef3f037gzul0sy5x2u3hdvjgg5765 0.00097900 BTC Trace this branch
bc1qjuvc85nz0ddsxze20dmz63zthf89yd34sfncwj 0.00043236 BTC Trace this branch
bc1qz55kn323ped037su6lgs0v5jrtzxp8zxtxtcrv 0.00016053 BTC Trace this branch
+ 3 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.