[SCAM ALERT] List of fake donation sites during the Ukraine crisis

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

Quote from: saxydev on April 15, 2022, 12:26:17 AM

Do you know where I may find more websites as these?

Thanks

There is no magic. You just have to dedicate a little time to search for them from the web. Most of them are usually promoted in places where people discuss crypto like this one or even crypto related social media groups, the most popular scammer haven being telegram.

saxydev

member

Activity: 429

Merit: 52

Quote from: FatFork on April 15, 2022, 02:50:39 PM

Quote from: saxydev on April 15, 2022, 12:26:17 AM

Hello FatFork,

Do you know where I may find more websites as these?

Thanks

I'm not sure why you'd want to find scams like these other than to expose them publicly and warn other members about them. Anyway, I found that some of these sites are being promoted on social media, and some of them have even tried to lure victims from this forum. Furthermore, I follow several cybersecurity research groups, such as @MalwareHunterTeam, that regularly alert of such and similar cyber threats.

I do work for anti money laundering, so this is why. Been reporting myself and responsable for the scams arround Ukraine past month. Any new way to find them is welcomed, there are tens of hundreds of sites made daily.

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Quote from: saxydev on April 15, 2022, 12:26:17 AM

Hello FatFork,

Do you know where I may find more websites as these?

Thanks

I'm not sure why you'd want to find scams like these other than to expose them publicly and warn other members about them. Anyway, I found that some of these sites are being promoted on social media, and some of them have even tried to lure victims from this forum. Furthermore, I follow several cybersecurity research groups, such as @MalwareHunterTeam, that regularly alert of such and similar cyber threats.

saxydev

member

Activity: 429

Merit: 52

Hello FatFork,

Do you know where I may find more websites as these?

Thanks

JollyGood

legendary

Activity: 2534

Merit: 1713

Top Crypto Casino

An excellent piece of work here by you. The list is extensive and you deserve full credit thank you. What is sad to read are the actual number of attempts at scamming people and the justifications provided by the scammers.

Potential donors have be aware that these are all scam websites and every single penny of any funds sent to these scammers will be going directly to their own pockets.

Quote from: FatFork on March 04, 2022, 03:27:48 PM

Make sure you send your donations to the right place!

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Here is another example of scammers taking advantage the Ukraine crisis to create fake charity donation ICO:

ukan.io [archived]

Quote from: https://whois.domaintools.com/ukan.io
Registrar: Key-Systems GmbH
Created on 2022-03-17

UKAN Token contract addresses:
Quote
0x49bc8340ACD3521150d7cCD8a4a3510D2F5130Ca

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Another day, another scam...

wesupportukraine.web.app [archived]

scammer's addresses:
Quote
BTC: 17gfJFjavzJcKJNqn2fX36ZJ29ydPTF317
ETH: 0xDa4a0b4824F123F2B2DAaF02C50c60dd26F5304F
BCH: qpy4pujrwf8xelsvzcfddfqs4jmh59qp2sd3uttcda

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Updating the list with a couple of new Ukraine related scams.

unitedhelpukraine.online [archived]
Quote from: https://whois.domaintools.com/unitedhelpukraine.online
Registrar: Hostinger, UAB
Created on 2022-03-19
scammer's addresses:
Quote
bc1qsuxgvrzsc44lyjea7rd95jcnu62wncdlcxg0cf
helpukraineinwar.com [archived]
Quote from: https://whois.domaintools.com/helpukraineinwar.com
Registrar: NameSilo, LLC
Created on 2022-03-19
scammer's addresses:
Quote
BTC: bc1qpxk652svuzxyfr9s47mhqvga78t9d6g7xy09tk
ETH/ERC-20: 0x52dD26fAE5e12df0573312A30B8CA2809d75757f
TRX/TRC-20: TUeWjt8ry2VsKUnHtCHsdohPfw8NuS2znA
LUNA: terra1evmdwf4epu8f4y6vjx60336y607pxhgz9z28md
DOT: 1wVnsZMopywrADej68uR83vHX9uQdMyPX4TDi9XHQ2zjfcV
SOL: GcL2fqX1KRyShYsSn2yv8uhhCoHbUnePxTwKUWMJXqvw
ADA: bnb16agx0scnlsl5engvlla5x96cencnqt4e5k2kmj
DOGE: DU7vPGFYnVczAA9TWRQnsSCztcJL9UzacC
XMR: 42MSFSwKHa94NEMm12gyALUuN8kg9TEyrK7pcF8MnZ1zZPavze948m1hS8cVjkYYwVUkmhcnxDwVJA2 UsFyZVwjc1nwa94K
ICX: hx514923b3e6ce7abd7e704cc2355bddf74520a0e8
CSPR: 0202aacf42dddd932d76ca61e5bada656e27d226245cea1629caabd4211e90b1abc7
ukrainesupport.life [archived]
Quote from: https://whois.domaintools.com/ukrainesupport.life
Registrar: GoDaddy.com, LLC
Created on 2022-03-19
save4ukraine.space [archived]
Quote from: https://whois.domaintools.com/save4ukraine.space
Registrar: NameCheap, Inc.
Created on 2022-03-20
scammer's addresses:
Quote
BTC: 15SEvxg9ZAT8zmLp4wxbELquZYRyiZHoec
TRC-20: THf6hyVgUzHiVC2B2rrbN9vPWLGK5944Kf
ETH: 0xaf81d39fb3b8b21312d2ee128a592276eb947903
help-ukraine.ooo [archived]
Quote from: https://whois.domaintools.com/help-ukraine.ooo
Registrar: Hosting Ukraine LLC
Created on 2022-03-20
scammer's addresses:
Quote
BTC: bc1qpqweu9vxyd9ypasnp566n3sz3c7mtppvnk0fjq
ETH: 0x02c1495E7Bbbe252eE15695f6371107097075a12
ukrainerelieffunding.org [archived]
Quote from: https://whois.domaintools.com/ukrainerelieffunding.org
Registrar: NameCheap, Inc.
Created on 2022-03-20
scammer's addresses:
Quote
BTC: 16D1T3Ah1S3Bs1SzqqHTCFHpGU9Tff9i4d
ETH: 0xceB1621492D9Cc9453228a918f1Dd7b848f7df5d
ukrainesupportaccelerated.in [archived]
Quote from: https://whois.domaintools.com/ukrainesupportaccelerated.in
Registrar: Endurance Digital Domain Technology LLP
Created on 2022-03-17
scammer's addresses:
Quote
BTC: 3DXnKxbKtTyPF3E6jVeNpmvcmJSFroNLM2
ETH: 0x6F60c893250Ffb4c21a074E6CdAF298dAB2234f5
BCH: qzxx5ty3gnyjepc5tp90t5807g65dd5yhvd5hzg4ea
XRP: r9n8aHTB5StrJRfnvz4qVJ1GKAyQwZCMZM
fight4ukraine.co [archived]
Quote from: https://whois.domaintools.com/fight4ukraine.co
Registrar: NameCheap, Inc.
Created on 2022-03-20
scammer's addresses:
Quote
BTC: bc1qrr7xmuccv76c5fxa0vx880at3jfrmjyfh283cl

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Daily update with a couple of new Ukraine related scams.

saveukrainefund.org.uk [archived]
Quote from: https://whois.domaintools.com/saveukrainefund.org.uk
Registrar: TUCOWS Inc
Created on 2022-03-15
standwithukraine1.wixsite.com/ukrainefund [archived]
Twitter profile: https://twitter.com/FundStand (Joined Feb 28, 2022)
scammer's addresses:
Quote
0X985200271E80FD297F5A409E82885B9F7FDB9C2E
support-ukraine.com [archived]
Quote from: https://whois.domaintools.com/support-ukraine.com
Registrar: GoDaddy.com, LLC
Created on 2022-02-18
scammer's addresses:
Quote
BTC: bc1q4w4l4jasdn36azs7rs9xkl7pv7htcs5np3mxva

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Quote from: saxydev on March 16, 2022, 03:07:35 PM

Also many of the archives from the first part don't work anymore.

I fixed the broken links I found in the first post. Unfortunately, some archives are not available.
Sites that are reported in different topics may appear twice.

saxydev

member

Activity: 429

Merit: 52

I work a lot with anti money laundering companies so this is why I have checked all the links from this thread.

This site have been added twice: https://donate-ukraine.info/ (on 2 lists here)

And the site that made me write this post was this: http://unitedhelpukraine.kiev.ua . When you go to the donate button it redirects you to ru version of blockchain.com. Motherfuckers, pieces of shit, animals.

Also many of the archives from the first part don't work anymore.

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Updating the list with a couple of new Ukraine related scams.

save-ukraine.fund [archived]
Quote from: https://whois.domaintools.com/saveukraine.fund
Registrar: GoDaddy.com, LLC
Created on 2022-03-08
scammer's addresses:
Quote
TRX: TVUBinVpQvU6eEHXxkEGKby4gTYd1utUV8
ETH: 0x3444459f158df9000DAf08a5Ba47Bd99A112099a
BTC: bc1qk9tmywwmuxy87arq9fy78l8v4x0zc972s7khfc
DOT: 15tTciiyBpMSqTsGzPsYv17ZdTPJbc6zpEPN9kqWiNk19Pi
NEAR: 22d9e3c67243a98eb169e0afc8bd1dc179236ca32d283753b45020023e2b449c
BNB: 0x3444459f158df9000DAf08a5Ba47Bd99A112099a
DASH: XyCAPHUkrhAW6oW4qbkKmYJWZszVg4wT3S
saveukraine.fund
Quote from: https://whois.domaintools.com/saveukraine.fund
Registrar: NameCheap, Inc.
Created on 2022-02-27
fundusukraine.com [archived]
Quote from: https://whois.domaintools.com/fundusukraine.com
Registrar: Hosting Concepts B.V.
Created on 2022-03-01
scammer's addresses:
Quote
bc1qrv5kzqa5sjevkd3hlfy8y5t0lwrsn40an3yj45

https://twitter.com/malwrhunterteam/status/1502426430776479746

https://twitter.com/malwrhunterteam/status/1502411280832991232

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

The list has been updated with a few new domain names

ua-helpukraine.com [archived]
Quote from: https://whois.domaintools.com/ua-helpukraine.com
Registrar: Hosting Concepts B.V.
Created on 2022-03-06
ukraine-glory.com [archived]
Quote from: https://whois.domaintools.com/ukraine-glory.com
Registrar: GoDaddy.com, LLC
Created on 2022-03-10
defend-ukraine.com [archived]
Quote from: https://whois.domaintools.com/defend-ukraine.com
Registrar: Key-Systems GmbH
Created on 2022-03-09

https://twitter.com/malwrhunterteam/status/1502361543660474368

https://twitter.com/malwrhunterteam/status/1502393582438789126

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Another domain added to the list:

slavaukrainidao.com [archived] ^{[reported by @examplens]}
Quote from: https://whois.domaintools.com/slavaukrainidao.com
Registrar: GoDaddy.com, LLC
Created on 2022-03-01

As @examplens stated here, it appears that the "SlavaUkraini DAO" is a fake project launched with the obvious goal of fraudulent fundraising and taking advantage of the current situation in Ukraine. Scam was originally posted ^[archive] by a newbie account shredded_ceo.

Bitcoin_Arena

copper member

Activity: 2114

Merit: 1814

฿itcoin for all, All for ฿itcoin.

helpukrainepeople.org [Archived]

Quote

Registrar: NameCheap, Inc.
Created on: 2022-03-02

The site has donation options for different cryptos. Luckily, no one has sent anything yet

aioc

hero member

Activity: 2926

Merit: 567

Quote from: goaldigger on March 06, 2022, 09:48:00 AM

I'd rather donate later on when the War is over especially if there's an NGO already working on the site to help Ukraine recovers, you can be more sure that your money will be forwarded to those people who are really in need. Keep watching this thread, we might see more fake domain.

We have a huge number of scams dedicated to Ukraine donations, just like in the days of Elon hype of Doge it's preferable to donate when the war is over for rebuilding, but countries who can afford to donate ammunitions and food supplies for the soldiers who are in the middle of the battle, we are just feeding scammers and we all know scammers are heartless, they don't care about the war.

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Updating the list with a couple of new domains that have surfaced on twitter over the past few days.

stand-with-ukraine.com [archived]
Quote from: https://whois.domaintools.com/stand-with-ukraine.com
Registrar: NameCheap, Inc.
Created on 2022-02-26
ukraineglobalaid.com [archived]
Quote from: https://whois.domaintools.com/ukraineglobalaid.com
Registrar: NETIM NETIM sarl
Created on 2022-02-27
fundukraine.com [archived]
Quote from: https://whois.domaintools.com/fundukraine.com
Registrar: NameCheap, Inc.
Created on 2022-02-26
donateukraine.sbs [archived]
Quote from: https://whois.domaintools.com/donateukraine.sbs
Registrar: NameCheap, Inc.
Created on 2022-02-25

https://www.bleepingcomputer.com/news/security/help-ukraine-crypto-scams-emerge-as-ukraine-raises-over-37-million/

https://twitter.com/malwrhunterteam/status/1500205146755710978

https://twitter.com/JCyberSec_/status/1498239774116753409

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

The list has been updated with a few new domains. Be careful not to send any money to scammers.

donate-ukraine.info [archived]
Quote from: https://whois.domaintools.com/donate-ukraine.info
Registrar: Atakteknoloji.com
Created on 2022-02-27
stand-with-ukraine.shop [archived]
Quote from: https://whois.domaintools.com/stand-with-ukraine.shop
Registrar: Tucows Domains Inc.
Created on 2022-02-27

The Cryptovator

legendary

Activity: 2394

Merit: 2223

Signature space for rent

Yea, the war between Russia and Ukraine become an opportunity for scammers. Thanks for sharing the information about scammers. No reason to donate any others where authorized sources tweet about the cryptocurrency donation. Scammer using sentiment and emotion to scam us. We should be careful when spending money online to make sure money goes to the right place.

goaldigger

sr. member

Activity: 2422

Merit: 357

Quote from: robelneo on March 06, 2022, 12:05:25 AM

Is the government of Ukraine aware that scammers are using their country to scam people they should establish their donation address and make people aware of these scammers exploiting the situation, this war is feeding scammers this is very bad and disgusting after the Elon airdrop here we are the Ukraine donation scam, I hope they make it aware so those who want to donate will not be deceived.

Most probably they are aware of this, this is why they tweet their right address details https://twitter.com/Ukraine/status/1497594592438497282 - and even confirm that this is their correct address. Though of course you still have to stay cautious since this can still be a hacker's address and there's an on-going cyber war as well.

The list of scammer's address has been multiplied, I'd rather donate later on when the War is over especially if there's an NGO already working on the site to help Ukraine recovers, you can be more sure that your money will be forwarded to those people who are really in need. Keep watching this thread, we might see more fake domain.

robelneo

legendary

Activity: 3416

Merit: 1225

Is the government of Ukraine aware that scammers are using their country to scam people they should establish their donation address and make people aware of these scammers exploiting the situation, this war is feeding scammers this is very bad and disgusting after the Elon airdrop here we are the Ukraine donation scam, I hope they make it aware so those who want to donate will not be deceived.

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

reserved for future use...

FatFork

legendary

Activity: 1624

Merit: 2594

Top Crypto Casino

Make sure you send your donations to the right place!

As might be expected, we began to notice an increasing number of fake sites trying to take advantage of the Ukrainian crisis to scam altruistic individuals looking to help those in need. Since some members have already pointed out a number of fake domains, I decided to put them all in one place for easier reference.

Anyone who wants to contribute is encouraged to post in this thread, so if you come across such scam attempts, please let me know so I can add them to the list. However, please keep the thread clean, without unnecessary or off-topic comments.

So without further ado, here is a list of FAKE donation sites I've come across so far:

sendhelptoukraine.com [archived]
Quote from: Ultegra134 on March 01, 2022, 04:33:09 PM
Registrar: NameCheap, Inc.
Created on 2022-02-28
scammer's addresses:
Quote from: Bitcoin_Arena on March 08, 2022, 06:33:46 PM
Registrar: NameCheap, Inc.
Created on 2022-03-02
scammer's addresses:
Quote from: Rikafip on March 08, 2022, 05:44:37 AM
Registrar: NameSilo, LLC
Created on 2022-03-05
scammer's addresses:
Quote from: examplens on March 03, 2022, 08:39:51 AM
Registrar: GoDaddy.com, LLC
Created on 2022-03-01
scammer's addresses:
Quote from: SFR10 on March 02, 2022, 10:47:20 AM
- ukrainedonation.org ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=ukrainedonation.org
  Registrar URL: http://www.networksolutions.com
- ukrainebitcoin.online ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=ukrainebitcoin.online
  Registrar URL: https://www.godaddy.com
- help-ukraine-compaign.com ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=help-ukraine-compaign.com
  Registrar URL: https://www.godaddy.com
- unitedhelpukraine.kiev.ua ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=unitedhelpukraine.kiev.ua
  registrar: ua.ukrnames
- ukrainedonate.today ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=ukrainedonate.today
  Registrar URL: www.publicdomainregistry.com
- ukraine-save.com ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=ukraine-save.com
  Registrar URL: https://www.reg.com
- supportukraine.org.ua ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=supportukraine.org.ua
  registrar: ua.nic
- saveukraine.help ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=saveukraine.help
  Registrar URL: http://www.automattic.com
- help-fund-ukraine.org ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=help-fund-ukraine.org
  Registrar URL: http://www.namecheap.com
- fightforukraine.xyz ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=fightforukraine.xyz
  Registrar URL: http://www.namecheap.com
- donate-ukraine.info ^[archived]
  Quote from: https://www.namecheap.com/domains/whois/result?domain=donate-ukraine.info
  Registrar URL: http://apiname.com
Quote from: SFR10 on March 03, 2022, 05:17:02 PM
- Found a couple of more fake ^[active] donation websites from @DdmrDdmr's post on another thread:
  - supportukraine.today ^[archived]
    Quote from: https://www.namecheap.com/domains/whois/result?domain=supportukraine.today
    Registrar URL: https://www.godaddy.com
  - tokenukraine.com ^[archived]
    Quote from: https://www.namecheap.com/domains/whois/result?domain=tokenukraine.com
    Registrar URL: http://www.1api.net

Topic: [SCAM ALERT] List of fake donation sites during the Ukraine crisis (Read 412 times)