Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.21626078 BTC
Hops Traced
1
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1q20stdhr0nz8k7n6qr6rcvc5xmn7jczfy8pephp
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-09 14:35 UTC
bc1q20stdhr0nz8k7n6qr6rcvc5xmn7jczfy8pephp → bc1qx24sqxc0xk4uwfh9a77tazuqtwsqxdqx5u86ww
Split payment
1.21626078 BTC
This spend also paid 18 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qmjph8enqvctvc2t7u76ss95cyxetdryxmuuvf0 0.90494731 BTC Trace this branch
bc1q6wmhkregejnrfj95ydrj2famkgwlq5x00x2zal 0.20692509 BTC Trace this branch
bc1q62u7vlvmmx7vceg8j4xxphna0nqnj2lldlgs6w 0.11446679 BTC Trace this branch
bc1qu8qhn8y8kgk8w2ldslc43qypxz7qjmcxzqfmr7 0.06605798 BTC Trace this branch
bc1q0jhcsrcgd4mqjexkvfzafh9c2s8jw060cl6pvm 0.03435486 BTC Trace this branch
bc1q8vy6gfd8rl9jcp6amtn0yrxrasnam0aj58ufct 0.03435486 BTC Trace this branch
bc1qmv9nml7and8lc026hvevmm3ue8um0gtvzkp8d5 0.03435486 BTC Trace this branch
bc1qy0ycst5wde62s4hq2ndkmrc45gvdgvle4m30ps 0.03435486 BTC Trace this branch
+ 10 more addresses not shown
Trace stopped: no further outgoing transactions from the last address.