Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
353.08710414 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1q4qgf2vqqye3ucpzp4sjee72zsmv2gcmgdxfsywasghd0djk9gavqnfrhj4
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-07 17:34 UTC
bc1q4qgf2vqqye3ucpzp4sjee72zsmv2gcmgdxfsywasghd0djk9gavqnfrhj4 → bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d
tx a99dc7adb6ac666b…
Split payment
353.08710414 BTC
Continue from here
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
1LuhW1Wv2oDARg69UCzraFca4KsMaT6Ryx 85.00000000 BTC Trace this branch
bc1pv2r5e68cu8chahadenurmqmp83zq3rj5rphn7m9duflkyunq2w6sxa9huc 0.03000000 BTC Trace this branch
bc1qnpg6zwygqyzyhvyppvk9k3ydkt9vd33z5zkty0 0.00106292 BTC Trace this branch
bc1qpwss68uvcl088vdk4kgvw4wddp9u200cx6cnva 0.00022875 BTC Trace this branch
HOP 2 · 2026-09-07 06:02 UTC
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx ed0a00cf2f53eac3…
Split payment
56.14000000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6 3.52000000 BTC Trace this branch
bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz 1.72000000 BTC Trace this branch
HOP 3 · 2026-09-06 20:58 UTC
bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2 → bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d
tx f6f3d318e5af24d4…
Split payment
459.54838961 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qk2jypmly2um8nu7zp6e76mw9m0hsmrz453xx7qe29mygtqffq6zs0j5qe0 273.92161039 BTC Trace this branch
HOP 4 · 2026-08-29 03:14 UTC
bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx 4d26678a62a75c8d…
Self-consolidation
499.27000000 BTC
Continue from here
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.