Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
39.06717146 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qwas54hrlxyt76uyqeh8qaz9sfq2gdad9jeu37vpa4jgthxt68cqquxgpq4
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-09 11:26 UTC
bc1qwas54hrlxyt76uyqeh8qaz9sfq2gdad9jeu37vpa4jgthxt68cqquxgpq4 → bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d
tx 5fc94a2a948240c2…
Split payment
39.06717146 BTC
Continue from here
This spend also paid 10 other addresses — not followed above, since the walk only continues down the largest branch:
bc1phqz6ed57p3vm7grjh8s9skmg9fpqjdm5gnekr3shzx5qt5tfmnyq6fugte 0.14809977 BTC Trace this branch
bc1qt5vfjsxglx60senrp04ghd2al3eweeemfjx4nu 0.05959589 BTC Trace this branch
bc1p7dma95sfnkvc6acuckrrhwe0vhykqcvpqp2a6tqj2n4s805cnqasx4s2ys 0.01874500 BTC Trace this branch
bc1q5m5sksmjqmuddtgpj4h35zgnjhnha6jn0a724f 0.01031275 BTC Trace this branch
bc1p05hftkkytkwxax5re55w94glrzrv097hhul77xz46yr36n7mhy0q4l0mfu 0.00621163 BTC Trace this branch
bc1q799ayqz8x24sgw0fgjm6nkmr6cdzh32rt549y2 0.00505539 BTC Trace this branch
bc1qvjsqv4jzkrm8x4g7ftjqwtr3syrhzysnxxuu76 0.00474278 BTC Trace this branch
1PNEVdqWjeLhmCsAEzhKnr18QUgu7j18rN 0.00215691 BTC Trace this branch
+ 2 more addresses not shown
HOP 2 · 2026-09-07 06:02 UTC
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx ed0a00cf2f53eac3…
Split payment
56.14000000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6 3.52000000 BTC Trace this branch
bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz 1.72000000 BTC Trace this branch
HOP 3 · 2026-09-06 20:58 UTC
bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2 → bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d
tx f6f3d318e5af24d4…
Split payment
459.54838961 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qk2jypmly2um8nu7zp6e76mw9m0hsmrz453xx7qe29mygtqffq6zs0j5qe0 273.92161039 BTC Trace this branch
HOP 4 · 2026-08-29 03:14 UTC
bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx 4d26678a62a75c8d…
Self-consolidation
499.27000000 BTC
Continue from here
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.