bc1q04n3uh94yzggak2qheulsh9km7900af366q7tr

High-Value Threat Actor Infrastructure

• Scam type: Scam
• Chain: Bitcoin
• Reported: 2026-04-25
• Last updated: 2026-04-25

Infrastructure and accounts associated with identified threat actors and high-value targets.

Other addresses in this report: bc1qsy4a70wy0mup2rv2ytqh0uqu07ngej6y8xhrhj, bc1qmud4e98xq4ynfwwg2dqm2gg8m2wgjqdg4eg723, bc1qqshdk2a2eq2026erpzvgmfty4dua34qyummqjl, bc1qt0dggchyw0sp2fgcrvduprkpqragyj6wjd6c03, 0x48d7a6bbc428bca019a560cf3e8ea5364395aad3, 0xd6076efe1e577deec21afab6ed383b47e9d8dec6, bc1q3tsmxwkk32dmscwh5empwlea3y50fuf70png9t, 0x3f06b5d78406cd97bdf10f5c420b241d32759c80, bc1qppy96p6tcygwng7280zzusujvt4v495yrruk39, bc1q9gypsucwuy56kv83xhjxzmllwmr4lmlasjjxek, bc1q9m3mhtxhheevyvw956pmgyckcvvjmwaxkj04yt, bc1qczl3j3wmmkw3nsm03avzc042uce7v6h0lhawfs, bc1qynqn7sth8ldpfr3706wgv8ztctxczscsn77sxf, bc1qrwygtds8mpfzhq7ue9t8ltaurdkq7rmwlenhl4, bc1qnl3d4dszjzprqrpvxvarjtjdthlx33zkj2t4y7, bc1qe3s6vfn9s3urwlmdr5t9f3pufvua4dpvzj3haw, bc1qa0a3gkgsmc5ycdq5ux4z5lyp0rvh0ztc03jnws, 0x170af0a02339743687afd3dc8d48cffd1f660728, bc1q3xua8gdmqt576q3v6ua9gaj8uxz7lyehpy5yc5, bc1q7qs32endfftuv5pl969rmth04x27kgga3mqrrz and 29 more

Ransomware Wallets — ransomware addresses

• Scam type: Ransomware
• Chain: Bitcoin
• Reported: 2026-04-22
• Last updated: 2026-04-22

Ransomware payment wallet. Source: crowdsourced ransomware wallet tracking database. Entities: lockbit. Programs: lockbit.

Other addresses in this report: bc1q048mu7cl9s6zwh3fjrdnjhqggk8qgaurccvjxj, bc1q048nd2rxt0lkamgkd2440rz0rw29rqq2lx7j8r, bc1q0493emqhh956mzte4uxm49awz07rcaqur62487, bc1q04a0vfdg454awdt455nlp5qjut82aydjx7yfqr, bc1q04a0xhx4tpz7mm4emvxvhu3uvvn2xsgsdeajnk, bc1q04a900ay6wvj0w9mszusrrc7adgz0v8f6sgcdn, bc1q04a96r204pvdywcr45mk7r5rts4zqkfjjwnme0, bc1q04alnwttsfqwfe70z89uk2pjlfm259lt3khqrq, bc1q04dapt4l5knu5a600ne6r2tgsuzk39tdcvx5pk, bc1q04fn2uvygp5jp7vzvgyuevn5j977yt904sq9uk, bc1q04gu8zm6naps9sckdhr4tc9u78ktteurzgmy9p, bc1q04hf0k0uspt60mzae66qtgckkdstqnwllqdcsu, bc1q04hqasmw4d7cyugdczhgqjt58yljt92xtwskw7, bc1q04jya927nmtepgcmf7nmlhpdfkmm8f88ykrqma, bc1q04k5s4vc7f0dau3dcn59zgru5s6n64k3pmkx4r, bc1q04ldwq5p38pzd9c4st7et976nzfjhvprj5k30e, bc1q04lgeakzdd9l4l9tl2a6caqh6cuevan4qaesjq, bc1q04ljnzxwqdx8yx7lfrx8uqycnd5wfmus4av884, bc1q04lzvpyskumpxy5qmmhr9avztjjl3k47zezerd, bc1q04mmj7z70rffgpg6qjdu6v300u06ahjk5sae4j and 29 more

Danchev Intel: Dancho Danchev's Blog - Mind Streams of Information Security Knowledge: A Full L

• Scam type: Scam
• Chain: Bitcoin
• Reported: 2026-04-22
• Last updated: 2026-04-22

Addresses from Dancho Danchev's threat intelligence blog. Post: Dancho Danchev's Blog - Mind Streams of Information Security Knowledge: A Full List of BitCoin Addre. Source: https://ddanchev.blogspot.com/2025/05/a-full-list-of-bitcoin-addresses-from.html. Crime type: general_scam. Danchev is a longtime security researcher cataloging malware infrastructure.

Other addresses in this report: bc1q0450kts9gnah2mle8c79dhqgrhfjjzhzz90a7q, bc1q0459a0jn80xzcsna4s7cm6xhtyyhkel879qxn2, bc1q045ky2vwfsenh6wf9c33jue9e5vwnwkprevqcz, bc1q045t500t6dmrtdz0cmjqm2j4lxw8v855wch3ej, bc1q045u3dk6jjhs5qxj72rduj5h2lhjr32k3xaxx6, bc1q045vukdz6atnex7s4uqycaca636gn9xkmlh0yw, bc1q045xv5ysdpxmnsqsyh7j7gdy7fasnuxqz6y0fq, bc1q0463edujsr96wkgh9xquk8t7a7xqwtuwakuclx, bc1q04682n2t7h5thkdjhjaaggv887fqezkn6z0xyq, bc1q0477zhhlp76yjhmeu77n0grf92c6tma3llrw6y, bc1q0478h9sv4udsrw4887vtv28zg8vm0t3hyjw7x6, bc1q048e7nrvtn8fn27heyghjsq79m5nfpte47wmkv, bc1q048mu7cl9s6zwh3fjrdnjhqggk8qgaurccvjxj, bc1q048nd2rxt0lkamgkd2440rz0rw29rqq2lx7j8r, bc1q0493emqhh956mzte4uxm49awz07rcaqur62487, bc1q04a0vfdg454awdt455nlp5qjut82aydjx7yfqr, bc1q04a0xhx4tpz7mm4emvxvhu3uvvn2xsgsdeajnk, bc1q04a900ay6wvj0w9mszusrrc7adgz0v8f6sgcdn, bc1q04a96r204pvdywcr45mk7r5rts4zqkfjjwnme0, bc1q04alnwttsfqwfe70z89uk2pjlfm259lt3khqrq and 29 more

lockbit Ransomware Payment Address

• Scam type: Ransomware
• Chain: Bitcoin
• Reported: 2026-04-22
• Last updated: 2026-04-22

Ransomware payment address associated with lockbit. This address was used to collect ransom payments from victims. Source: Threat intelligence database aggregated from ransomware tracking services.

lockbit Ransomware Payment Address

• Scam type: Ransomware
• Chain: Bitcoin
• Reported: 2026-04-22
• Last updated: 2026-04-22

Ransomware payment address associated with lockbit. This address was used to collect ransom payments from victims. Source: Threat intelligence database aggregated from ransomware tracking services.

lockbit Ransomware Payment Address

• Scam type: Ransomware
• Chain: Bitcoin
• Reported: 2026-04-22
• Last updated: 2026-04-22

Cryptocurrency address used to collect ransom payments by lockbit. Victims directed to this address in ransom notes.