Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.13321693 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qnfe370suzxwqdm0pxrjv6dwmwm0ra7xgmvglrq
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-10 17:21 UTC
bc1qnfe370suzxwqdm0pxrjv6dwmwm0ra7xgmvglrq → bc1qra8mclrz26vays68rwwk4e2468d7fny9r0wlxrdmu8ldjh6dt98qfm4uel
tx ceafa74fc1954f98…
Low Risk
0.13321693 BTC
Continue from here
HOP 2 · 2026-09-08 19:15 UTC
bc1qra8mclrz26vays68rwwk4e2468d7fny9r0wlxrdmu8ldjh6dt98qfm4uel → 1LuhW1Wv2oDARg69UCzraFca4KsMaT6Ryx
tx 1304580fffb93b57…
Split payment
30.00000000 BTC
Continue from here
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d 0.25917550 BTC Trace this branch
bc1pyt3sq4hfsc4pkggmzenyvgz0dqqht83eg5czsg3gxlnepxys20ls563a66 0.03356432 BTC Trace this branch
15HFCBD7mdJHxFCDymH2vK7xSWtMTVUDh7 0.01526720 BTC Trace this branch
bc1qhr5e4kkcgyulk9acrrznx394tl6h9wt4taeetl 0.00021020 BTC Trace this branch
bc1q27d5dp42dg7dyn0wfud64ttkjkl9w7cn9ws3la 0.00009517 BTC Trace this branch
HOP 3 · 2026-09-09 14:43 UTC
1LuhW1Wv2oDARg69UCzraFca4KsMaT6Ryx → 1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g
tx 0f9de5dd14b4ccbb…
Split payment
1144.44540670 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qx2nc5n4jlkn52rqw73sy455lgevxjzvkv8juk2 0.01366928 BTC Trace this branch
HOP 4 · 2026-09-07 09:11 UTC
1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g → bc1qwwg0jttv2rcd99dw2jt23egsevdgvdtd9t5er9
tx 7be964967204af8f…
Split payment
72.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3PjzoFRf8grRfj3WnohpXSxASPupHfjXoL 0.01232999 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.