Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.63869570 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qgy6hxm9alzg5s20x5ml8wzwpegmqry9uu8daep
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-05-17 14:46 UTC
bc1qgy6hxm9alzg5s20x5ml8wzwpegmqry9uu8daep → bc1q0hjkd6csknqkuwh52wwx8lptaeke4m7psynj75
tx bc885e30fbb1e8e5…
Low Risk
0.63869570 BTC
Continue from here
HOP 2 · 2026-05-18 05:06 UTC
bc1q0hjkd6csknqkuwh52wwx8lptaeke4m7psynj75 → bc1qlmjwyngqy6mcqdts2ccwperwegv9ycq9s0rpjn
tx bf5f4479d3af6df8…
Split payment
1.09833816 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q6kak9yc0nhf803qjcv63c73h3l9rqzh97w0tf3 0.25648581 BTC Trace this branch
HOP 3 · 2026-05-18 05:24 UTC
bc1qlmjwyngqy6mcqdts2ccwperwegv9ycq9s0rpjn → 1PEuioMZD9hxwpqisTzehypHbGiQaxA1kE
tx 87d2e49fc822e77d…
Low Risk
2.06719632 BTC
Continue from here
HOP 4 · 2026-06-29 12:41 UTC
1PEuioMZD9hxwpqisTzehypHbGiQaxA1kE → bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h
tx b2e9fbb2b7aae661…
Low Risk
99.93485177 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.