Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.16520451 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qnq4qclq0zhxxjd65hdha4gkrjf3v4ht3jj0add
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-24 12:22 UTC
bc1qnq4qclq0zhxxjd65hdha4gkrjf3v4ht3jj0add → bc1qwdkz7cftrfqwl00vcm2uz689cpypy7857x3vge
tx b29c32ebcadf3535…
Split payment
0.16520451 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qqsddxcdu7gfxgt6kyl5jsvx2upqpu9p3fglmsr 0.00679192 BTC Trace this branch
HOP 2 · 2026-08-05 08:49 UTC
bc1qwdkz7cftrfqwl00vcm2uz689cpypy7857x3vge → bc1qhr9tl5fdtq950ktr9ppap8nfng6zuam9juvhmp
tx e09059746748dded…
Low Risk
0.18293424 BTC
Continue from here
HOP 3 · 2026-09-07 18:10 UTC
bc1qhr9tl5fdtq950ktr9ppap8nfng6zuam9juvhmp → bc1pnduszg2w0q9xpvn304srjhs7dxgwna8zvssrpwwtmxp5m5g25z5sx67yay
tx 22bfd9e00dfc9bbd…
Low Risk
1.80300000 BTC
Continue from here
HOP 4 · 2026-09-07 18:14 UTC
bc1pnduszg2w0q9xpvn304srjhs7dxgwna8zvssrpwwtmxp5m5g25z5sx67yay → bc1q67hqf5207za8q5a29v8g0nm3mlfrdtgrygv8mdgpp0aysgw20lzqkurhlh
tx 99e9ca19398c21f2…
Low Risk
1.80299262 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.