Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
9.99568369 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qaru3k5992m46772kutwlzp426p5k07320ggkdv
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-14 21:18 UTC
bc1qaru3k5992m46772kutwlzp426p5k07320ggkdv → bc1qgdd8zjp9d8sqr02a56f33evr3k0sqghnecut20
tx 47c9b437878ca0f1…
Split payment
9.99568369 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q33l7909lrxxadfhyvvqka20hdpq057d2qwz949 0.33827757 BTC Trace this branch
bc1qcaw678f2uafgtrx5rsfxs5ptu5rtwp2sh8vkfd 0.31097624 BTC Trace this branch
bc1qlz2lv3xyqg8c8fj7wx6rf5uwj9xa77ydm4f90q 0.01077162 BTC Trace this branch
HOP 2 · 2026-08-18 14:28 UTC
bc1qgdd8zjp9d8sqr02a56f33evr3k0sqghnecut20 → bc1qp3m3lzjjqfqw5k7drgnsca4mnaw0uqmlm8u489
tx cbf4df124b9db785…
Split payment
5.51528004 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q2slhl4gq7deamxu6ruj2czz3pm6ejwx4t5hkxt 4.48040139 BTC Trace this branch
HOP 3 · 2026-08-24 14:26 UTC
bc1qp3m3lzjjqfqw5k7drgnsca4mnaw0uqmlm8u489 → bc1qjzh963p65e33r7vrwrvlz83w3nw8ds80xh9kfr
tx 2616bd96c9c867f2…
Low Risk
5.51527652 BTC
Continue from here
HOP 4 · 2026-09-01 13:36 UTC
bc1qjzh963p65e33r7vrwrvlz83w3nw8ds80xh9kfr → bc1q6yvh2r8upw2wc7cyds3skt2tu6qe52ayqtvm5p
tx 990808b09f07e195…
Low Risk
3.51080145 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.