Blockchain Forensics

Crypto Indicators

18.9K

Sanctioned

0

Attributed Addresses

18
7 families

Chains

3

Address Forensics

🔄 Pivot:📁 Ransomware

Bitcoin Address BITCOIN

bc1q4my6vqq8cg689drf9jccqudjclv67sz4cudkyd

In database — threat 0.50, seen 3× · category Ransomware. + case

Explorers

↗ Blockchain.com↗ Blockchair↗ BTC.com↗ Mempool.space

Forensics & Attribution

↗ Chainabuse (scam reports)↗ MetaSleuth↗ Breadcrumbs↗ Crystal (Bitfury)↗ OXT (Bitcoin)↗ GraphSense

Sanctions & Abuse

↗ OFAC SDN Search↗ OFAC crypto list (GitHub)↗ BitcoinAbuse / Chainabuse↗ CryptoScamDB

Exchange / Intel

↗ Arkham Intelligence↗ Nansen↗ DeBank (ETH portfolio)↗ Elliptic

🦠 Attribution by Ransomware / Malware Family

🏢 Attribution by Entity (mixer / exchange / actor)

WannaCry
3
Tornado Cash (mixer)
3
Lazarus Group (DPRK)
3
Conti
1
LockBit
1
Ransom / mixer
1
Ryuk
1
Blender.io (mixer)
1
Petya / NotPetya
1
REvil / Sodinokibi
1
Black Basta
1
SamSam ransomware
1

📁 By Category

₿ By Chain

bitcoin
13
ethereum
5

🔍 Attributed Addresses (18)

AddressChainEntityFamilyCategoryFlag
3P3QsMVK89JBNqZQv5zMAKG8F… bitcoinSamSam ransomware —Sanctioned Crypto SANCTIONED
bc1qm34lsc65zpw79lxes69zk… bitcoinRansom / mixer —Sanctioned Crypto SANCTIONED
12QtD5BFwRsdNsAMY686xsdMs… bitcoinBlender.io (mixer) —Sanctioned Crypto SANCTIONED
1AjZPMsnmpdK2Rv9KQNfMurTX… bitcoinLazarus Group (DPRK) —Sanctioned Crypto SANCTIONED
0xa0e1c89Ef1a489c9C7dE963… ethereumLazarus Group (DPRK) —Sanctioned Crypto SANCTIONED
0x098B716B8Aaf21512996dC5… ethereumLazarus Group (DPRK) —Sanctioned Crypto SANCTIONED
0xDD4c48C0B24039969fC16D1… ethereumTornado Cash (mixer) —Sanctioned Crypto SANCTIONED
0x722122dF12D4e14e13Ac3b6… ethereumTornado Cash (mixer) —Sanctioned Crypto SANCTIONED
0x8589427373D6D84E98730D7… ethereumTornado Cash (mixer) —Sanctioned Crypto SANCTIONED
bc1q6ex4wjfz2p8lqvz9x2n0c… bitcoinBlack Basta Black BastaRansom Payment
3KHb1MDkgHRZmVGbHkT6QaHes… bitcoinRyuk RyukRansom Payment
1Mz7153HMuxXTuR2R1t78mGSd… bitcoinPetya / NotPetya Petya / NotPetyaRansom Payment
1DA11mPS9t2LnFdWjkK9kkyDL… bitcoinWannaCry WannaCryRansom Payment
13AM4VW2dhxYgXeQepoHkHSQu… bitcoinWannaCry WannaCryRansom Payment
12t9YDPgwueZ9NyMgw519p7AA… bitcoinWannaCry WannaCryRansom Payment
3JVGkBmznbQXpQBLnAcuBB2eS… bitcoinREvil / Sodinokibi REvil / SodinokibiRansom Payment
bc1qs8lqzrp82m4dh0d2n0v33… bitcoinLockBit LockBitRansom Payment
1L8ybXjfM68tHfLh5vAT56pKA… bitcoinConti ContiRansom Payment

Pull the full scam-address / drainer-domain lists (ScamSniffer, CryptoScamDB, MetaMask) with Auto-Collect; deep OFAC + Ransomwhere ingestion runs via php seed-crypto-intel.php.

Crypto Indicators by Chain

ChainCount
BITCOIN13,148
ETHEREUM5,732
MONERO10

Forensics Playbook

  • 1. Identify chain & pull transaction history (explorers)
  • 2. Check sanctions status (OFAC list)
  • 3. Cluster related addresses (MetaSleuth / Breadcrumbs)
  • 4. Trace flows to exchanges / mixers
  • 5. Report to Chainabuse; notify exchanges
  • 6. Open a case; preserve evidence for LE
Full Crypto Playbook

Top Crypto Indicators

AddressChainCategorySightingsThreat
35dfgjffdfdsgjdffdgjdfgjfd BITCOIN Phishing 5 Analyze
1BhHZxek7iUTm1mdrgax6yVrPzViqLhr9u BITCOIN Ransomware 4 Analyze
1BoatSLRHtKNngkdXEeobR76b53LETtpyT BITCOIN Ransomware 4 Analyze
19S7k3zHphKiYr85T25FnqdxizHcgmjoj1 BITCOIN Ransomware 4 Analyze
16jX5RbF2pEcLYHPukazWhDCkxXTs7ZCxB BITCOIN Ransomware 4 Analyze
1F1tAaz5x1HUXrCNLbtMDqcw6o5GNn4xqX BITCOIN Ransomware 4 Analyze
1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm BITCOIN Ransomware 4 Analyze
0x2C7DcD774b33e10367F7d6385479e04F97d179dc ETHEREUM Sanctions 4 Analyze
0x1d19b52b54e7ef5ea1a4b40b616165e798eac9f8 ETHEREUM Sanctions 4 Analyze
0x2711d73d559f62f4f855ee21f38378f528e07985 ETHEREUM Sanctions 4 Analyze
0xaC4cC4B68ea24BbFAAC8fD127B67Ed445ACcCE22 ETHEREUM Sanctions 4 Analyze
0x4F428c11Dc82388fa5136D636e613ad923Eb700B ETHEREUM Sanctions 4 Analyze
0xf2235d55b2950a0b1317469d72d07ae65b2e27cb ETHEREUM Sanctions 4 Analyze
0x32dA24Ca413F3E7B53145D4737e172C3bdF81e3e ETHEREUM Sanctions 4 Analyze
0x14779CEC0B117d5194c750C55Ea1f42086631964 ETHEREUM Sanctions 4 Analyze
0x038989cbb1710c72b9920dc4fa529158f463e72c ETHEREUM Sanctions 4 Analyze
0x9Be599d7867f5E1a2D7Ec6dB9710dF2b98A15573 ETHEREUM Sanctions 4 Analyze
0x0330070FD38Ec3bB94F58FA55D40368271E9e54A ETHEREUM Sanctions 4 Analyze
0xcB74874f1e06Fcf80A306e06e5379A44B488bA2D ETHEREUM Sanctions 4 Analyze
0x95584C303FCd48AF5c6B9873015f2AD0ca84EaE3 ETHEREUM Sanctions 4 Analyze
0xb637f84b66876ebf609c2a4208905f9ddac9d075 ETHEREUM Sanctions 4 Analyze
0xe1e4c5e5ed8f03ae61b581e2def126025f2b9401 ETHEREUM Sanctions 4 Analyze
0xc103b7dc095c904b92081eef0c1640081ec01c10 ETHEREUM Sanctions 4 Analyze
0x5d5b5dafecbf31bdb08bfd3edad4f2694372d0ef ETHEREUM Sanctions 4 Analyze
0x532b77b33a040587e9fd1800088225f99b8b0e8a ETHEREUM Sanctions 4 Analyze
0xe3d35f68383732649669aa990832e017340dbca5 ETHEREUM Sanctions 4 Analyze
0xdb2720ebad55399117ddb4c4a4afd9a4ccada8fe ETHEREUM Sanctions 4 Analyze
0x12de548F79a50D2bd05481C8515C1eF5183666a9 ETHEREUM Sanctions 4 Analyze
0xd5ED34b52AC4ab84d8FA8A231a3218bbF01Ed510 ETHEREUM Sanctions 4 Analyze
0x1999ef52700c34de7ec2b68a28aafb37db0c5ade ETHEREUM Sanctions 4 Analyze
0x0931cA4D13BB4ba75D9B7132AB690265D749a5E7 ETHEREUM Sanctions 4 Analyze
0x19F8f2B0915Daa12a3f5C9CF01dF9E24D53794F7 ETHEREUM Sanctions 4 Analyze
0xf3701f445b6bdafedbca97d1e477357839e4120d ETHEREUM Sanctions 4 Analyze
0x21B8d56BDA776bbE68655A16895afd96F5534feD ETHEREUM Sanctions 4 Analyze
0xE950DC316b836e4EeFb8308bf32Bf7C72a1358FF ETHEREUM Sanctions 4 Analyze
0x961c5be54a2ffc17cf4cb021d863c42dacd47fc1 ETHEREUM Sanctions 4 Analyze
0x983a81ca6FB1e441266D2FbcB7D8E530AC2E05A2 ETHEREUM Sanctions 4 Analyze
0x530a64c0ce595026a4a556b703644228179e2d57 ETHEREUM Sanctions 4 Analyze
0x6be0ae71e6c41f2f9d0d1a3b8d0f75e6f6a0b46e ETHEREUM Sanctions 4 Analyze
0x43fa21d92141BA9db43052492E0DeEE5aa5f0A93 ETHEREUM Sanctions 4 Analyze

⚖ Sanctioned Wallets (0)

No sanctioned wallets loaded yet — run Crypto Intel to ingest the OFAC address dataset.

🏹 Attribution (designated entities)

Tornado Cash (mixer)
3
Lazarus Group (DPRK)
3
Ransom / mixer
1
SamSam ransomware
1
Blender.io (mixer)
1
₿ Run Crypto Intel Refresh sources

🔍 Crypto Investigation Resources

Explorers, tracing, attribution & abuse-reporting — free tiers where available.

↗ mempool.space↗ Blockstream↗ Blockchair↗ Etherscan↗ BscScan↗ OKLink↗ Arkham↗ Breadcrumbs↗ MetaSleuth↗ MistTrack↗ OXT↗ WalletExplorer↗ GraphSense↗ Chainabuse↗ CryptoScamDB↗ Ransomwhere↗ OFAC crypto list↗ Bitcoin Abuse

Blockchain forensics links route to authoritative explorers and attribution tools. Deep clustering/attribution (Chainalysis, Elliptic, TRM) are commercial services requiring accounts. Treat address associations as investigative leads requiring verification. Sanctioned-wallet data is the public OFAC designated-address list (via Crypto Intel).

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center