Ok all stolen money was moved from scammer's address to a bunch of addresses:
https://www.blockchain.com/btc/address/19YJVYZyuYvx9U3e6oGYsN4gqeRZeCKgje

One interesting transfer was to this address:
https://www.blockchain.com/btc/address/bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h it holds 35016.15030071 BTC