Fake Ukrainian donation website, BEWARE!

[Ultegra134]

It was expected, sooner or later scammers would try to take advantage of such a terrible situation. I'm sick to my stomach that there are people who are genuinely interested in taking advantage of people who are suffering from war, whose life may be at stake at any possible time.

I stumbled upon this following website, which is being advertised on Facebook as we speak.

https://www.donationukraine.io/

Archived for security
https://web.archive.org/web/20220301212845/https://www.donationukraine.io/

The advertised BTC address is the following: bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t

A quick check on Blockchain explorer shows that it's likely a brand-new address, with zero balance.

https://www.blockchain.com/btc/address/bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t

According to the official Ukrainian Twitter account, the legitimate BTC donation address is the following, 357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P
which is also proven on the Blockchain Explorer

https://www.blockchain.com/btc/address/357a3So9CbsNfBBgFYACGvxxS6tMaDoa1P

Also seen on Twitter, of course.

https://twitter.com/Ukraine/status/1497594592438497282?s=20&t=GNC2gtKdKwnb0IXHepyIjQ

This is merely a petty attempt in scamming people out of their generosity, we're definitely bound to see these on a daily basis. Scammers have no consciousness, even if we're talking about something as awful as war casualties.

Edit:
According to Whois Lookup, the domain address is one day old.
https://whois.domaintools.com/donationukraine.io

Edit2: Found a phising/scam website? Learn how to report it yourself as well

https://bitcointalk.org/index.php?topic=5281378

[1714650554]

1714650554

[1714650554]

1714650554

[1714650554]

1714650554

[Bitcoin_Arena]

It is unfortunate how scammers use such sad moments to scam off people who would be willing to help the victims. I think I remember a spike of Fake donation site and tokens when COVID19 broke out too

I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them

Code:

abuse@namecheap.com

[Ultegra134]

It is unfortunate how scammers use such sad moments to scam off people who would be willing to help the victims. I think I remember a spike of Fake donation site and tokens when COVID19 broke out too

I don't know if namecheap.com can take down such domains instantly, but it would be a good thing to report them

Code:

abuse@namecheap.com

Unfortunately, after clicking on the advertisement on Facebook, the page refreshed and couldn't see who posted it, to proceed and report the page and the post itself.

Found this page promoting the scam website in one of their posts, not sure if they share something in common, or it was coincidental.

https://www.facebook.com/I-want-war-against-Ukraine-to-STOP-101864409114010

[SFR10]

Because of your thread, I stumbled upon someone else's tweets in regards to similar websites ^{[credit goes to @JCyberSec_]}: Tweets <sup>[#1 and #2]
- Please take a few minutes to "also" report them to their registrars.</sup>

• ukrainedonation.org ^[archived]
  

  Registrar URL: http://www.networksolutions.com

  
  
• ukrainebitcoin.online ^[archived]
  

  Registrar URL: https://www.godaddy.com

  
  
• help-ukraine-compaign.com ^[archived]
  

  Registrar URL: https://www.godaddy.com

  
  
• unitedhelpukraine.kiev.ua ^[archived]
  

  registrar:        ua.ukrnames

  
  
• ukrainedonate.today ^[archived]
  

  Registrar URL: www.publicdomainregistry.com

  
  
• ukraine-save.com ^[archived]
  

  Registrar URL: https://www.reg.com

  
  
• supportukraine.org.ua ^[archived]
  

  registrar:        ua.nic

  
  
• saveukraine.help ^[archived]
  

  Registrar URL: http://www.automattic.com

  
  
• help-fund-ukraine.org ^[archived]
  

  Registrar URL: http://www.namecheap.com

  
  
• fightforukraine.xyz ^[archived]
  

  Registrar URL: http://www.namecheap.com

  
  
• donate-ukraine.info ^[archived]
  

  Registrar URL: http://apiname.com

[albon]

Because of your thread, I stumbled upon someone else's tweets in regards to similar websites ^{[credit goes to @JCyberSec_]}: Tweets <sup>[#1 and #2]
- Please take a few minutes to "also" report them to their registrars.</sup>

Thank you for sharing these scam sites and I will report them all ASAP, Anyone who wants to donate must go to the official verified accounts of the government of the country concerned on social media and donate only to the addresses of the wallets that they posted, without paying attention to any site that demands a donation because scammers take advantage of crises and circumstances to deceive the innocent.

[chigo]

@SFR10 you did an amazing job, thanks for doing in depth research. the same thing as when covid was at its peak, many fake fundraisers appeared.. hopefully, the fraudsters who take advantage of this moment die in torment.

[Ultegra134]

Because of your thread, I stumbled upon someone else's tweets in regards to similar websites ^{[credit goes to @JCyberSec_]}: Tweets <sup>[#1 and #2]
- Please take a few minutes to "also" report them to their registrars.</sup>

~Snip~

Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.

I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.

[$crypto$]

Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.

I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.

Now there will definitely be more scams about Ukrainian donations that are being used by fraudsters, the most important thing is that we have to be careful when we see suspicious sites or advertisements on Facebook because basically they are not official about donations but are looking for prey on behalf of the Ukrainian victims, I also looked at there is a facebook ad like this but I forgot to archive and report it.
One day if I find it I will report it as soon as possible so that their ad is immediately closed or removed.

[coin-investor]

Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.

I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.

Now there will definitely be more scams about Ukrainian donations that are being used by fraudsters, the most important thing is that we have to be careful when we see suspicious sites or advertisements on Facebook because basically they are not official about donations but are looking for prey on behalf of the Ukrainian victims, I also looked at there is a facebook ad like this but I forgot to archive and report it.
One day if I find it I will report it as soon as possible so that their ad is immediately closed or removed.

I've seen a Youtube asking for donations on behalf of Ukraine and they are showing the Ukrainian president speaking with English subtitles, but checking the past videos to confirm if they really are from Ukrain I was surprised to see that they are showing dancing coming from Latin countries, you can easily figure out that it's not the official Ukrain Youtube channel, the channel is now disabled.
So if you stumble one be sure to check past videos from there you can verify if it's the official channel, you cannot make a Ukrainian channel showing other materials coming from other countries.

[Taskford]

Thank you, it's astonishing how many scam websites have already been created, trying to profit from such a misfortune, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.

I'll be on the lookout for any other websites that may pop up and post them here, and get them reported to their registrars.

Now there will definitely be more scams about Ukrainian donations that are being used by fraudsters, the most important thing is that we have to be careful when we see suspicious sites or advertisements on Facebook because basically they are not official about donations but are looking for prey on behalf of the Ukrainian victims, I also looked at there is a facebook ad like this but I forgot to archive and report it.
One day if I find it I will report it as soon as possible so that their ad is immediately closed or removed.

I've seen a Youtube asking for donations on behalf of Ukraine and they are showing the Ukrainian president speaking with English subtitles, but checking the past videos to confirm if they really are from Ukrain I was surprised to see that they are showing dancing coming from Latin countries, you can easily figure out that it's not the official Ukrain Youtube channel, the channel is now disabled.
So if you stumble one be sure to check past videos from there you can verify if it's the official channel, you cannot make a Ukrainian channel showing other materials coming from other countries.

If we see something like this promoted and the source is unknown then its good for people to do their own diligence to research about the legitimacy of the said campaign since anyone could really create the same thing since many scammers are now using Ukraine incident to scam people and they grab this opportunity since many people sympathize this country due to war happening on their country.

For donations we should always go to legitimate channels since anything outside with unknown people asking for this is quite suspicious.

[pinggoki]

I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.

[Ultegra134]

I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.

Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.

[JayTrain]

unfortunately, scammers are not confused by anything, neither human grief, nor the situation in this country, you need to be vigilant and always check such information on official sources, it's a pity that such people are found and transfer money to scam accounts...

[$crypto$]

I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.

Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.

It became full scale for Discord and Telegram to be a place for them to take action because not only ukraine donations but other scams there also exist but what is rife now is that donations to ukraine are always misused and of course they want to take advantage under any circumstances because of what fraudsters want is the money in the get.
Make sure on social media we have to be vigilant and do research about it, if you want to donate just go to the official ukraine twitter if you want to donate to them.

[Ultegra134]

I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.

Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.

It became full scale for Discord and Telegram to be a place for them to take action because not only ukraine donations but other scams there also exist but what is rife now is that donations to ukraine are always misused and of course they want to take advantage under any circumstances because of what fraudsters want is the money in the get.
Make sure on social media we have to be vigilant and do research about it, if you want to donate just go to the official ukraine twitter if you want to donate to them.

Not long ago (probably 2-3 months from now), I fell for one of Discord scams. I was sleepy, dizzy and tired from work and typed my private key on some phising website. I was fortunate enough that I immediately understood my stupid move and withdraw all my funds ASAP to another wallet. What surprised me was that when I asked for support/assistance on a Discord group shortly after, another scammer tried to trick me into "securing my wallet" by providing the seed phrase.

What a bunch of pathetic idiots.

[SFR10]

Thank you for sharing these scam sites and I will report them all ASAP,

Thank you,
~Snipped~
, great work sharing them. I'll go ahead and report each one of them, along with the one I've mentioned and the correlated Facebook page, which has promoted it in some of its posts.

Thanks to both of you for also reporting them, but it seems that none of the registrars in question have done anything yet ^{[based on the nature of these scams, I was expecting to see some results already]}.

@SFR10 you did an amazing job, thanks for doing in depth research.

Thank you for the compliment, but I only relisted them in here ^{[@JCyberSec_ deserves all the credit]}

it's astonishing how many scam websites have already been created,

Exactly, but I was more surprised at the fact that I couldn't find any of them prior to the creation of this thread ^{[I thought they didn't exist, but I was wrong]}.

• Found a couple of more fake ^[active] donation websites from @DdmrDdmr's post on another thread:
  
  
  • supportukraine.today ^[archived]
    

    Registrar URL: https://www.godaddy.com

    
    
  • tokenukraine.com ^[archived]
    

    Registrar URL: http://www.1api.net

[khaled0111]

Thanks to both of you for also reporting them, but it seems that none of the registrars in question have done anything yet ^{[based on the nature of these scams, I was expecting to see some results already]}.

Unfortunately, only the first website exposed in OP has been taken down (most likely by the hosting provider). All the other websites are still active except the last two that are active but blocked by Google Safe Browsing. Meaning that they will not appear in search results and if someone tries to visit them, he wil get a warning page that they are not safe.

I checked all the bitcoin addresses on those websites and all of them are empty and didn't receive a single donation meaning there are no victims so far, which is a good thing.

[pinggoki]

I was about to post a thread regarding this very site but then I saw this thread and I am relieved that someone has posted it already. This scammers really don't have any remorse and will scam everyone even if the situation is dire, in this case though it's worse as it's possible that we might be facing the end of the world or something like that, it's still quite appalling to me that they can still do this thing.

Fortunately, the Bitcoin address still appears empty, showing no transactions, meaning that people luckily didn't fall for it. Scams are unfortunately very common nowadays, Discord and Telegram groups are filled with crooks, scam websites are all over the web, some of which are even being advertised on social media. It's sick that there are people willing to take advantage of someone's misfortune, in this case, a full scale war.

Thank God for that, I think there are other scammers out there that might've got away with their scams. There's also one where they hacked into the Ukrainian's official website and change the donation link or they've probably impersonated their website to create a legitimately looking donation platform.

[ScamViruS]

Thank God for that, I think there are other scammers out there that might've got away with their scams. There's also one where they hacked into the Ukrainian's official website and change the donation link or they've probably impersonated their website to create a legitimately looking donation platform.

Scammers will not stop their activities, it has failed but they will create more new websites for the purpose of scamming people willing to donate. Because we have seen in recent times that as many trending news has come out, scammers have tried to scam people by creating one website after another.

So it is assumed that more websites will be created by scammers, using Ukraine's name. So those who are willing to donate should be careful before making any kind of transaction.

[pinggoki]

Thank God for that, I think there are other scammers out there that might've got away with their scams. There's also one where they hacked into the Ukrainian's official website and change the donation link or they've probably impersonated their website to create a legitimately looking donation platform.

Scammers will not stop their activities, it has failed but they will create more new websites for the purpose of scamming people willing to donate. Because we have seen in recent times that as many trending news has come out, scammers have tried to scam people by creating one website after another.

So it is assumed that more websites will be created by scammers, using Ukraine's name. So those who are willing to donate should be careful before making any kind of transaction.

I agree with that statement and I think that we should continue this never ending battle by educating people how to spot a scam and how to report them so it gets shut down immediately, I think that we should improve in that department because people nowadays are gullible and at the same time, don't take the time to do some research before believing something.