Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.63223707 BTC
Hops Traced
1
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qd9ns3n0x87jfazs5r2p829n2wn556g029m7sp9
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-08 00:11 UTC
bc1qd9ns3n0x87jfazs5r2p829n2wn556g029m7sp9 → bc1qn5mqqlr6yzjv4me3gdf2c3tvfqpeh5zktpd69p
Split payment
0.63223707 BTC
This spend also paid 10 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qckx3vlgzj6rcht9euuluqelmx7s7uuxn6edhwe 0.52720963 BTC Trace this branch
bc1q7ywpdcg5edwkahltafx8q78nrl3j7y2czsp8a7 0.45962789 BTC Trace this branch
bc1q5m2uklwvau74s0kxayeul6mtquqhlt4tkudxgy 0.45962789 BTC Trace this branch
bc1qcmlwnvt5wxyyt5tcg62q0xe6jlgldm7n7rwdhv 0.45962789 BTC Trace this branch
bc1qply62t2rdms03j3h9sr6f45xjehjvj25w04rwv 0.45962789 BTC Trace this branch
bc1qmp890m74agqza57cs4yyrwvutn3rs3kjjlprnf 0.45962789 BTC Trace this branch
bc1q809kt7gwh2sf3hg6ct2w5flfp47yaydwj6e7tt 0.45962789 BTC Trace this branch
bc1qpxwau5s4makc79kfjmmf5z6xul7lurus6re9fj 0.12366325 BTC Trace this branch
+ 2 more addresses not shown
Trace stopped: no further outgoing transactions from the last address.