Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.49877008 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q2fftn34jk6k4nlksw8v3wez36tzz0raan2cnsd
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-29 21:24 UTC
bc1q2fftn34jk6k4nlksw8v3wez36tzz0raan2cnsd → bc1qfgz2h0jsvzdlkr0k2c6kjkccd6d6galtffudhq
tx c30112a45fb7ef5d…
Split payment
3.49877008 BTC
Continue from here
This spend also paid 20 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q0aa2mx5y8gzkph52fde3u3k9ed4nmjkxceg8et 2.90465671 BTC Trace this branch
bc1q22e9jax8nwu5fnsm9gytk0hmy49g3xmymertrw 0.29050351 BTC Trace this branch
bc1q5qplds8jqy2z8yk8ezylcevx97etyfge576ymw 0.17298446 BTC Trace this branch
bc1q2rlr6q6zz2rjlpwcsj8xujs2dl0xrh3ggjg3sf 0.14695752 BTC Trace this branch
bc1qu9j8tyn4wx339qt3vw0kemgs8hgtl9kkdlnuzx 0.10002451 BTC Trace this branch
bc1qwjqsd6q9qzvuahlre4ftquq7z262nx0ek64xe7 0.09996133 BTC Trace this branch
bc1qf3t9x68ne82nnjqg3x5ephys0h9auxy8cnqjnh 0.09996133 BTC Trace this branch
bc1qq48xpphl57v8uzem4nd46f0tjj0yxsywjfq5a7 0.09996133 BTC Trace this branch
+ 12 more addresses not shown
HOP 2 · 2026-08-30 20:04 UTC
bc1qfgz2h0jsvzdlkr0k2c6kjkccd6d6galtffudhq → bc1q3dq0elrg0x3nvht9n4r0shcssre8ey380w3atz
tx 3218a7e5db15de33…
Low Risk
11.29297409 BTC
Continue from here
HOP 3 · 2026-08-31 00:39 UTC
bc1q3dq0elrg0x3nvht9n4r0shcssre8ey380w3atz → bc1q4hhykr3xll879ngvakz7am5lupn4pc0gwvzje7
tx 236720bd739e97cb…
Split payment
10.78806893 BTC
Continue from here
This spend also paid 16 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qd9ryyxdlz8yervg9nx64mdlshczg2fua3uw562 0.62863602 BTC Trace this branch
bc1q8f62vdx3sff2phsuqwjt2wed49a0wrnr28zxe2 0.51200550 BTC Trace this branch
bc1q0fg8ykthvzj9t9ttuuhvsay93g32gmrmnln23v 0.50490970 BTC Trace this branch
bc1qh80aulzx2y0ks3gxrhkush60unj203y2kxn8nq 0.50490970 BTC Trace this branch
bc1qfnr7a7mt7zuuu3d2kqfs0knaq78af5cz9pfj5j 0.50490970 BTC Trace this branch
bc1ql8p5lvlsj8fs5xkhu2ze32mqzdxa0ckku5aytl 0.50490970 BTC Trace this branch
bc1qyap29d8mqyp48zhge3tcewfhapn6jcvg39hr6r 0.50490970 BTC Trace this branch
bc1qhzcw8n6l7nd3w6ty0hdnycwgku6428yf4g25sd 0.50490970 BTC Trace this branch
+ 8 more addresses not shown
HOP 4 · 2026-08-31 16:21 UTC
bc1q4hhykr3xll879ngvakz7am5lupn4pc0gwvzje7 → bc1ql4gcrqtjgxwmwqtu4ctkmur0lz4y7nnjvlad98
tx 92e44630865bd8c1…
Split payment
10.91030787 BTC
Continue from here
This spend also paid 14 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q5t6qavepdz90lll80ap33p963khqsu9z9jquh0 9.79931546 BTC Trace this branch
bc1qww89juxg70d7qnddqpgqpf97wynzymmlj44lcs 1.02360381 BTC Trace this branch
bc1qp2pu734c04tu76m4rmhsxuf88u0nwatkw6fy80 0.98876237 BTC Trace this branch
bc1qa5plvlqdykt70cvtmck9e7ep00g4lj4xh4w4zk 0.98876237 BTC Trace this branch
bc1qzg3fatcc0r3nccugrrrzdses4u5kxc580m9fun 0.98876237 BTC Trace this branch
bc1qefw90zg2lke4uwphe966g7n0vuec3r7sa90lhe 0.98876237 BTC Trace this branch
bc1qnjpqcgu9ky95wvkaxlaea7r8r28alucm63c9lqq6t7emdgp0z7gsjzzklt 0.98876237 BTC Trace this branch
bc1q0j5atfayq34hnpd449gh9sm0m8hyddrwcmw4f2 0.98876237 BTC Trace this branch
+ 6 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.