Topic: Fake Ukrainian donation website, BEWARE! (Read 307 times)
These scammers are ruthless they will even use the destruction of one country for their scams, I'm sure there are still many of these in many social media and other channels it's better to be aware of this and always report this to their domain registrar or host you can use this tool to trace their registrar or host https://www.whois.com/whois/
this is not the first time this has happened, I am still curious about all the collected covid 19 funds, whether all the funds are right on target! scammers won't stop doing their dirty work, this moment is perfect for them to try to make a profit, hopefully there are no victims, hope everyone donate to an official trusted account.
Similar to the COVID crisis, there has been an increase in fake websites using the Ukrainian crisis to scam people. There are websites designed to look like pages of the legitimate non-profit organizations, such as the Red Cross and UNHCR. There are also websites designed to look like they're official portals for established Ukrainian government institutions.
According to security researchers, It is to be expected that scammers will take advantage of such crises as they use emotional triggers, like a sense of urgency, as a means to steal money from people. As always, the golden rule remains: Do your due diligence and double check all information before sending any money or personal information to the shady website.
My antiphishing is working fine, some of the sites mentioned in this thread have been blocked from my browser. And 2 of them, seem to also include the identity of their fiat service account and the bitcoin address that has been used. Maybe someone can uncover something here:
https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd
By the way, Op can also add a link to the "how to report a scam site" thread so that anyone including non forum members reading this thread can participate in reporting these sites.
***https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd
By the way, Op can also add a link to the "how to report a scam site" thread so that anyone including non forum members reading this thread can participate in reporting these sites.
My antiphishing is working fine, some of the sites mentioned in this thread have been blocked from my browser. And 2 of them, seem to also include the identity of their fiat service account and the bitcoin address that has been used. Maybe someone can uncover something here:
https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd
By the way, Op can also add a link to the "how to report a scam site" thread so that anyone including non forum members reading this thread can participate in reporting these sites.
Good riddance, will do. Unfortunately, more of those will keep popping up, hoping to earn a quick buck or two. I'll be on the lookout to report each and one of them and also post them here, the more reports, the better, increasing our chances of taking them down. It's astonishing what measure some people take in an effort to earn money, scamming people instead of working.https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd
By the way, Op can also add a link to the "how to report a scam site" thread so that anyone including non forum members reading this thread can participate in reporting these sites.
For how huge the donation accumulater by legit instutiom asking donation to help Ukrain for sure many scammers will try to adopt the situation and conduct a scam campaign by using this sadden events. For many scams already pointed out its best for donater to check always what they are going since verification is so important so that it will go to the right hand and not with those faulty greedy scammers.
My antiphishing is working fine, some of the sites mentioned in this thread have been blocked from my browser. And 2 of them, seem to also include the identity of their fiat service account and the bitcoin address that has been used. Maybe someone can uncover something here:
https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd
By the way, Op can also add a link to the "how to report a scam site" thread so that anyone including non forum members reading this thread can participate in reporting these sites.
Good riddance, will do. Unfortunately, more of those will keep popping up, hoping to earn a quick buck or two. I'll be on the lookout to report each and one of them and also post them here, the more reports, the better, increasing our chances of taking them down. It's astonishing what measure some people take in an effort to earn money, scamming people instead of working. https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd
By the way, Op can also add a link to the "how to report a scam site" thread so that anyone including non forum members reading this thread can participate in reporting these sites.
My antiphishing is working fine, some of the sites mentioned in this thread have been blocked from my browser. And 2 of them, seem to also include the identity of their fiat service account and the bitcoin address that has been used. Maybe someone can uncover something here:
https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd
By the way, Op can also add a link to the "how to report a scam site" thread so that anyone including non forum members reading this thread can participate in reporting these sites.
https://supportukraine.org.ua - 15XAE8yg25Gg4nTMHQL4gqHEaRxZ5W22zS
https://saveukraine.help - 1239GvAbj78LLk7oD4CPnMyLd9kRTQTEGd
By the way, Op can also add a link to the "how to report a scam site" thread so that anyone including non forum members reading this thread can participate in reporting these sites.
Thank God for that, I think there are other scammers out there that might've got away with their scams. There's also one where they hacked into the Ukrainian's official website and change the donation link or they've probably impersonated their website to create a legitimately looking donation platform.
Scammers will not stop their activities, it has failed but they will create more new websites for the purpose of scamming people willing to donate. Because we have seen in recent times that as many trending news has come out, scammers have tried to scam people by creating one website after another.
So it is assumed that more websites will be created by scammers, using Ukraine's name. So those who are willing to donate should be careful before making any kind of transaction.
Thank God for that, I think there are other scammers out there that might've got away with their scams. There's also one where they hacked into the Ukrainian's official website and change the donation link or they've probably impersonated their website to create a legitimately looking donation platform.
Scammers will not stop their activities, it has failed but they will create more new websites for the purpose of scamming people willing to donate. Because we have seen in recent times that as many trending news has come out, scammers have tried to scam people by creating one website after another.
So it is assumed that more websites will be created by scammers, using Ukraine's name. So those who are willing to donate should be careful before making any kind of transaction.
I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.
Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.
Thanks to both of you for also reporting them, but it seems that none of the registrars in question have done anything yet [based on the nature of these scams, I was expecting to see some results already].
Unfortunately, only the first website exposed in OP has been taken down (most likely by the hosting provider). All the other websites are still active except the last two that are active but blocked by Google Safe Browsing. Meaning that they will not appear in search results and if someone tries to visit them, he wil get a warning page that they are not safe.I checked all the bitcoin addresses on those websites and all of them are empty and didn't receive a single donation meaning there are no victims so far, which is a good thing.
Thank you for sharing these scam sites and I will report them all ASAP,
Thank you,
~Snipped~
, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.
Thanks to both of you for also reporting them, but it seems that none of the registrars in question have done anything yet [based on the nature of these scams, I was expecting to see some results already].~Snipped~
, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.
@SFR10 you did an amazing job, thanks for doing in depth research.
Thank you for the compliment, but I only relisted them in here [@JCyberSec_ deserves all the credit] 
it's astonishing how many scam websites have already been created,
Exactly, but I was more surprised at the fact that I couldn't find any of them prior to the creation of this thread [I thought they didn't exist, but I was wrong].- Found a couple of more fake [active] donation websites from @DdmrDdmr's post on another thread:
- supportukraine.today [archived]Registrar URL: https://www.godaddy.com
- tokenukraine.com [archived]Registrar URL: http://www.1api.net
- supportukraine.today [archived]
I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.
Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.Make sure on social media we have to be vigilant and do research about it, if you want to donate just go to the official ukraine twitter if you want to donate to them.
What a bunch of pathetic idiots.
I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.
Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.Make sure on social media we have to be vigilant and do research about it, if you want to donate just go to the official ukraine twitter if you want to donate to them.
unfortunately, scammers are not confused by anything, neither human grief, nor the situation in this country, you need to be vigilant and always check such information on official sources, it's a pity that such people are found and transfer money to scam accounts...
I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.
Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.
I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.
Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.
I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.
Now there will definitely be more scams about Ukrainian donations that are being used by fraudsters, the most important thing is that we have to be careful when we see suspicious sites or advertisements on Facebook because basically they are not official about donations but are looking for prey on behalf of the Ukrainian victims, I also looked at there is a facebook ad like this but I forgot to archive and report it.I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.
One day if I find it I will report it as soon as possible so that their ad is immediately closed or removed.
I've seen a Youtube asking for donations on behalf of Ukraine and they are showing the Ukrainian president speaking with English subtitles, but checking the past videos to confirm if they really are from Ukrain I was surprised to see that they are showing dancing coming from Latin countries, you can easily figure out that it's not the official Ukrain Youtube channel, the channel is now disabled.
So if you stumble one be sure to check past videos from there you can verify if it's the official channel, you cannot make a Ukrainian channel showing other materials coming from other countries.
If we see something like this promoted and the source is unknown then its good for people to do their own diligence to research about the legitimacy of the said campaign since anyone could really create the same thing since many scammers are now using Ukraine incident to scam people and they grab this opportunity since many people sympathize this country due to war happening on their country.
For donations we should always go to legitimate channels since anything outside with unknown people asking for this is quite suspicious.
Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.
I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.
Now there will definitely be more scams about Ukrainian donations that are being used by fraudsters, the most important thing is that we have to be careful when we see suspicious sites or advertisements on Facebook because basically they are not official about donations but are looking for prey on behalf of the Ukrainian victims, I also looked at there is a facebook ad like this but I forgot to archive and report it.I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.
One day if I find it I will report it as soon as possible so that their ad is immediately closed or removed.
I've seen a Youtube asking for donations on behalf of Ukraine and they are showing the Ukrainian president speaking with English subtitles, but checking the past videos to confirm if they really are from Ukrain I was surprised to see that they are showing dancing coming from Latin countries, you can easily figure out that it's not the official Ukrain Youtube channel, the channel is now disabled.
So if you stumble one be sure to check past videos from there you can verify if it's the official channel, you cannot make a Ukrainian channel showing other materials coming from other countries.
Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.
I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.
Now there will definitely be more scams about Ukrainian donations that are being used by fraudsters, the most important thing is that we have to be careful when we see suspicious sites or advertisements on Facebook because basically they are not official about donations but are looking for prey on behalf of the Ukrainian victims, I also looked at there is a facebook ad like this but I forgot to archive and report it.I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.
One day if I find it I will report it as soon as possible so that their ad is immediately closed or removed.
Because of your thread, I stumbled upon someone else's tweets in regards to similar websites [credit goes to @JCyberSec_]: Tweets [#1 and #2]
- Please take a few minutes to "also" report them to their registrars.
~Snip~
Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.- Please take a few minutes to "also" report them to their registrars.
~Snip~
I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.
@SFR10 you did an amazing job, thanks for doing in depth research. the same thing as when covid was at its peak, many fake fundraisers appeared.. hopefully, the fraudsters who take advantage of this moment die in torment.
Because of your thread, I stumbled upon someone else's tweets in regards to similar websites [credit goes to @JCyberSec_]: Tweets [#1 and #2]
- Please take a few minutes to "also" report them to their registrars.
- Please take a few minutes to "also" report them to their registrars.
Thank you for sharing these scam sites and I will report them all ASAP, Anyone who wants to donate must go to the official verified accounts of the government of the country concerned on social media and donate only to the addresses of the wallets that they posted, without paying attention to any site that demands a donation because scammers take advantage of crises and circumstances to deceive the innocent.
Because of your thread, I stumbled upon someone else's tweets in regards to similar websites [credit goes to @JCyberSec_]: Tweets [#1 and #2]
- Please take a few minutes to "also" report them to their registrars.
- Please take a few minutes to "also" report them to their registrars.
- ukrainedonation.org [archived]Registrar URL: http://www.networksolutions.com
- ukrainebitcoin.online [archived]Registrar URL: https://www.godaddy.com
- help-ukraine-compaign.com [archived]Registrar URL: https://www.godaddy.com
- unitedhelpukraine.kiev.ua [archived]registrar: ua.ukrnames
- ukrainedonate.today [archived]Registrar URL: www.publicdomainregistry.com
- ukraine-save.com [archived]Registrar URL: https://www.reg.com
- supportukraine.org.ua [archived]registrar: ua.nic
- saveukraine.help [archived]Registrar URL: http://www.automattic.com
- help-fund-ukraine.org [archived]Registrar URL: http://www.namecheap.com
- fightforukraine.xyz [archived]Registrar URL: http://www.namecheap.com
- donate-ukraine.info [archived]Registrar URL: http://apiname.com
It is unfortunate how scammers use such sad moments to scam off people who would be willing to help the victims. I think I remember a spike of Fake donation site and tokens when COVID19 broke out too
I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them
Unfortunately, after clicking on the advertisement on Facebook, the page refreshed and couldn't see who posted it, to proceed and report the page and the post itself.I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them
Code:
Found this page promoting the scam website in one of their posts, not sure if they share something in common, or it was coincidental.
https://www.facebook.com/I-want-war-against-Ukraine-to-STOP-101864409114010
It is unfortunate how scammers use such sad moments to scam off people who would be willing to help the victims. I think I remember a spike of Fake donation site and tokens when COVID19 broke out too
I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them
I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them
Code:
It was expected, sooner or later scammers would try to take advantage of such a terrible situation. I'm sick to my stomach that there are people who are genuinely interested in taking advantage of people who are suffering from war, whose life may be at stake at any possible time.
I stumbled upon this following website, which is being advertised on Facebook as we speak.
https://web.archive.org/web/20220301212845/https://www.donationukraine.io/
The advertised BTC address is the following: bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
A quick check on Blockchain explorer shows that it's likely a brand-new address, with zero balance.
https://www.blockchain.com/btc/address/bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
According to the official Ukrainian Twitter account, the legitimate BTC donation address is the following, 357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
which is also proven on the Blockchain Explorer
https://www.blockchain.com/btc/address/357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
Also seen on Twitter, of course.
https://twitter.com/Ukraine/status/1497594592438497282?s=20&t=GNC2gtKdKwnb0IXHepyIjQ
This is merely a petty attempt in scamming people out of their generosity, we're definitely bound to see these on a daily basis. Scammers have no consciousness, even if we're talking about something as awful as war casualties.
Edit:
According to Whois Lookup, the domain address is one day old.
https://whois.domaintools.com/donationukraine.io
Edit2: Found a phising/scam website? Learn how to report it yourself as well
I stumbled upon this following website, which is being advertised on Facebook as we speak.
Quote
Archived for securityhttps://web.archive.org/web/20220301212845/https://www.donationukraine.io/
The advertised BTC address is the following: bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
A quick check on Blockchain explorer shows that it's likely a brand-new address, with zero balance.
https://www.blockchain.com/btc/address/bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
According to the official Ukrainian Twitter account, the legitimate BTC donation address is the following, 357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
which is also proven on the Blockchain Explorer
https://www.blockchain.com/btc/address/357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
Also seen on Twitter, of course.
https://twitter.com/Ukraine/status/1497594592438497282?s=20&t=GNC2gtKdKwnb0IXHepyIjQ
This is merely a petty attempt in scamming people out of their generosity, we're definitely bound to see these on a daily basis. Scammers have no consciousness, even if we're talking about something as awful as war casualties.
Edit:
According to Whois Lookup, the domain address is one day old.
https://whois.domaintools.com/donationukraine.io
Edit2: Found a phising/scam website? Learn how to report it yourself as well
Quote
Jump to: