Topic: Fake Ukrainian donation website, BEWARE! - page 2. (Read 345 times)
@SFR10 you did an amazing job, thanks for doing in depth research. the same thing as when covid was at its peak, many fake fundraisers appeared.. hopefully, the fraudsters who take advantage of this moment die in torment.
Because of your thread, I stumbled upon someone else's tweets in regards to similar websites [credit goes to @JCyberSec_]: Tweets [#1 and #2]
- Please take a few minutes to "also" report them to their registrars.
- Please take a few minutes to "also" report them to their registrars.
Thank you for sharing these scam sites and I will report them all ASAP, Anyone who wants to donate must go to the official verified accounts of the government of the country concerned on social media and donate only to the addresses of the wallets that they posted, without paying attention to any site that demands a donation because scammers take advantage of crises and circumstances to deceive the innocent.
Because of your thread, I stumbled upon someone else's tweets in regards to similar websites [credit goes to @JCyberSec_]: Tweets [#1 and #2]
- Please take a few minutes to "also" report them to their registrars.
- Please take a few minutes to "also" report them to their registrars.
- ukrainedonation.org [archived]Registrar URL: http://www.networksolutions.com
- ukrainebitcoin.online [archived]Registrar URL: https://www.godaddy.com
- help-ukraine-compaign.com [archived]Registrar URL: https://www.godaddy.com
- unitedhelpukraine.kiev.ua [archived]registrar: ua.ukrnames
- ukrainedonate.today [archived]Registrar URL: www.publicdomainregistry.com
- ukraine-save.com [archived]Registrar URL: https://www.reg.com
- supportukraine.org.ua [archived]registrar: ua.nic
- saveukraine.help [archived]Registrar URL: http://www.automattic.com
- help-fund-ukraine.org [archived]Registrar URL: http://www.namecheap.com
- fightforukraine.xyz [archived]Registrar URL: http://www.namecheap.com
- donate-ukraine.info [archived]Registrar URL: http://apiname.com
It is unfortunate how scammers use such sad moments to scam off people who would be willing to help the victims. I think I remember a spike of Fake donation site and tokens when COVID19 broke out too
I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them
Unfortunately, after clicking on the advertisement on Facebook, the page refreshed and couldn't see who posted it, to proceed and report the page and the post itself.I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them
Code:
Found this page promoting the scam website in one of their posts, not sure if they share something in common, or it was coincidental.
https://www.facebook.com/I-want-war-against-Ukraine-to-STOP-101864409114010
It is unfortunate how scammers use such sad moments to scam off people who would be willing to help the victims. I think I remember a spike of Fake donation site and tokens when COVID19 broke out too
I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them
I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them
Code:
It was expected, sooner or later scammers would try to take advantage of such a terrible situation. I'm sick to my stomach that there are people who are genuinely interested in taking advantage of people who are suffering from war, whose life may be at stake at any possible time.
I stumbled upon this following website, which is being advertised on Facebook as we speak.
https://web.archive.org/web/20220301212845/https://www.donationukraine.io/
The advertised BTC address is the following: bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
A quick check on Blockchain explorer shows that it's likely a brand-new address, with zero balance.
https://www.blockchain.com/btc/address/bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
According to the official Ukrainian Twitter account, the legitimate BTC donation address is the following, 357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
which is also proven on the Blockchain Explorer
https://www.blockchain.com/btc/address/357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
Also seen on Twitter, of course.
https://twitter.com/Ukraine/status/1497594592438497282?s=20&t=GNC2gtKdKwnb0IXHepyIjQ
This is merely a petty attempt in scamming people out of their generosity, we're definitely bound to see these on a daily basis. Scammers have no consciousness, even if we're talking about something as awful as war casualties.
Edit:
According to Whois Lookup, the domain address is one day old.
https://whois.domaintools.com/donationukraine.io
Edit2: Found a phising/scam website? Learn how to report it yourself as well
I stumbled upon this following website, which is being advertised on Facebook as we speak.
Quote
Archived for securityhttps://web.archive.org/web/20220301212845/https://www.donationukraine.io/
The advertised BTC address is the following: bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
A quick check on Blockchain explorer shows that it's likely a brand-new address, with zero balance.
https://www.blockchain.com/btc/address/bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
According to the official Ukrainian Twitter account, the legitimate BTC donation address is the following, 357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
which is also proven on the Blockchain Explorer
https://www.blockchain.com/btc/address/357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
Also seen on Twitter, of course.
https://twitter.com/Ukraine/status/1497594592438497282?s=20&t=GNC2gtKdKwnb0IXHepyIjQ
This is merely a petty attempt in scamming people out of their generosity, we're definitely bound to see these on a daily basis. Scammers have no consciousness, even if we're talking about something as awful as war casualties.
Edit:
According to Whois Lookup, the domain address is one day old.
https://whois.domaintools.com/donationukraine.io
Edit2: Found a phising/scam website? Learn how to report it yourself as well
Quote
Jump to: