Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.45694137 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qgqcrh2tw3uvxduznt0c54mm7dsxnqrwm3kmcpp
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-10 15:07 UTC
bc1qgqcrh2tw3uvxduznt0c54mm7dsxnqrwm3kmcpp → bc1qn8v59ulrp66gy3ek5nkgq3ym8t5yl3j9xpqzsc
Split payment
0.45694137 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qwas54hrlxyt76uyqeh8qaz9sfq2gdad9jeu37vpa4jgthxt68cqquxgpq4 0.12989492 BTC Trace this branch
HOP 2 · 2026-09-10 15:53 UTC
bc1qn8v59ulrp66gy3ek5nkgq3ym8t5yl3j9xpqzsc → bc1qm9dya5zle6kmmt9ne085xzgrysqxptdctd2kk3
Split payment
0.32397330 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qra8mclrz26vays68rwwk4e2468d7fny9r0wlxrdmu8ldjh6dt98qfm4uel 0.13295760 BTC Trace this branch
HOP 3 · 2026-09-10 16:00 UTC
bc1qm9dya5zle6kmmt9ne085xzgrysqxptdctd2kk3 → bc1q7c7hpdvtuym2pnmjzg2hcdeyyrrljxhkwvjqf2
Split payment
0.16808238 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q6y6yzv5qugqa8vcx9p63u5s9554npfgpc8u5aevugvst63fqvuaqs7zf46 0.15587776 BTC Trace this branch
HOP 4 · 2026-09-10 16:00 UTC
bc1q7c7hpdvtuym2pnmjzg2hcdeyyrrljxhkwvjqf2 → bc1q4qgf2vqqye3ucpzp4sjee72zsmv2gcmgdxfsywasghd0djk9gavqnfrhj4
Low Risk
0.16807188 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.