Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
7.34078030 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1q2ese0xj9644v6a8gvnlgrrrujyggx8p8mm67tu
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-02 18:58 UTC
bc1q2ese0xj9644v6a8gvnlgrrrujyggx8p8mm67tu → bc1q5tytgejjy0q7m5rn0z3t8pay36pcrk75w3dkpk
tx 560480ac766a34c6…
Low Risk
7.34078030 BTC
Continue from here
HOP 2 · 2026-09-02 18:58 UTC
bc1q5tytgejjy0q7m5rn0z3t8pay36pcrk75w3dkpk → bc1qnecz3v44udm4kuzwjdged5pep8n7zp8z64k3dv
tx 9d6c9b01628cfe8d…
Low Risk
11.23845934 BTC
Continue from here
HOP 3 · 2026-09-03 00:13 UTC
bc1qnecz3v44udm4kuzwjdged5pep8n7zp8z64k3dv → bc1qw37x75r2tqfve5rlnzpf7r98m030026rm7nj4g
tx 6e17e772f37415ee…
Split payment
11.06754992 BTC
Continue from here
This spend also paid 16 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qkggv95p27cmezcej98yupnmr5a5ed28pxqvcfy 0.80523127 BTC Trace this branch
bc1qc24y5ryvg68paug9drkf7a5cq77rmtm7yj2alh 0.38931024 BTC Trace this branch
bc1qs0rlmkdsq3ftlxahehlnqpdac3f58ddvucwwyx 0.32838606 BTC Trace this branch
bc1qx8402j7qal57jugcfx3fgs7f507pz7l2u4rjta 0.17091096 BTC Trace this branch
bc1q7jve88055w6whh3s04swj7gwfkefx2tme3efnp 0.17091096 BTC Trace this branch
bc1qswrj4f8jxr0f9yl8xwm7n9m4m6qanya4csp3at 0.17091096 BTC Trace this branch
bc1qwy5yj609vgqp6vcfg9u5jwdtw7xgaqxq9skcts 0.17091096 BTC Trace this branch
bc1qkfuek5lvfphfdy3657z53hkks6pudg6hp30qvs 0.17091096 BTC Trace this branch
+ 8 more addresses not shown
HOP 4 · 2026-09-04 15:11 UTC
bc1qw37x75r2tqfve5rlnzpf7r98m030026rm7nj4g → bc1qe3eg0ejvnc0e3f7e5e24fnh5897chnna3le46t
tx 8da3c14dcee56dca…
Split payment
10.62716388 BTC
Continue from here
This spend also paid 15 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q9tpceyf9celm3z0w64wst9yvdsf9ttnmpwgt2a 1.51811453 BTC Trace this branch
bc1q9v23wl37mlel364fr520jwhju2yql80nq957sd 0.65512881 BTC Trace this branch
bc1q839x8wr0ngvwm4jeretj5mmsnegprhuz4lx70x 0.54858825 BTC Trace this branch
bc1qtwasher9m2q49kayegt9hzjh8a4nha044438sh 0.44039000 BTC Trace this branch
bc1qfrdggpw9vljvkkdu34hpvrfrtsjpakhx55hhd3 0.44039000 BTC Trace this branch
bc1qxuw6cu23nuv8lkgjlc89rzt5drffzwwqsu2y3s 0.44039000 BTC Trace this branch
bc1qkuxx3ayqjz48vej7qclqkakmq28fa2ls90t06j 0.44039000 BTC Trace this branch
bc1q2l6fd59vst54vvssyy6c8nun9k9wvdadhkxt9g 0.44039000 BTC Trace this branch
+ 7 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.