[SCAM ALERT] List of fake donation sites during the Ukraine crisis

[FatFork]

Make sure you send your donations to the right place!

As might be expected, we began to notice an increasing number of fake sites trying to take advantage of the Ukrainian crisis to scam altruistic individuals looking to help those in need. Since some members have already pointed out a number of fake domains, I decided to put them all in one place for easier reference.

Anyone who wants to contribute is encouraged to post in this thread, so if you come across such scam attempts, please let me know so I can add them to the list. However, please keep the thread clean, without unnecessary or off-topic comments.

So without further ado, here is a list of FAKE donation sites I've come across so far:

• sendhelptoukraine.com [archived]
  

  Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
  Created on 2022-03-02
  

• ukraine-foundation.com [archived]
  

  Registrar: NAMECHEAP INC
  Created on 2022-02-25
  

  scammer's addresses:
  

  BTC: bc1qczdtle427kd5axrde4tufcutfehsac3l9zy4yp
  ETH: 0x665AE19F5b1e8BBF392dD59DBD460ddFE0c72D2C
  TRC: TTAUPy5kseoDoXUzZVHeWU4UVPusJiFaG7

• freedom-for-ukraine.com [archived]
  

  Registrar: Wix.Com Ltd.
  Created on 2022-02-25
  

• support4ukraine.info [archived]
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-02-25
  

• patreon-ukraine.com [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-25
  

  scammer's addresses:
  

  BTC: bc1ql6gqcwv8ex0vklejffcc8qh9muce2yf7xqg677
  ETH: 0xecFf2C02A98d8072C17d4ECeC340f4f04B9B0Bea

• ukraine-fund.org [archive unavailable]
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-26
  

  scammer's addresses:
  

  BTC: 1PQvksnuCpQY7vM7sTbrM5Vs9JYn8t3zFb
  ETH: 0x784378db3a7f2acE423D8eD586394030f4de7848
  

• donate-ukraine.info [archived]
  

  Registrar: Atakteknoloji.com
  Created on 2022-02-27
  

  scammer's addresses:
  

  BTC: bc1qjvyhyvpl24dtkdw7mygphk4p98pgldxprsq5mc
  ETH: 0xf003dD8117889Cb2A80f86c78629f8EBe1e27224
  TRC: TJCeLsUDmt1SwzzzvEKxqYKjz6pcr7SGw6

• stand-with-ukraine.shop [archive unavailable]
  

  Registrar: Tucows Domains Inc.
  Created on 2022-02-27
  

• stand-with-ukraine.com [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-26
  

• ukraineglobalaid.com [archived]
  

  Registrar: NETIM NETIM sarl
  Created on 2022-02-27
  

• fundukraine.com [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-26
  

• donateukraine.sbs [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-25
  

  scammer's addresses:
  

  BTC : bc1qgdkvqvkal2dxm4fuvd6cl9wqphfy9lwwnnksa6
  BCH : qz7hfnkrlgj3440az62yxendqfe3kmz3vu227pt5wk
  LTC : ltc1qzu25g9t5s7kcrv46nd3j44vfv48l46qe3897d5
  ETH : 0x51f96e50914FE1De9c63EF63734169Cc357a35F8

• donationukraine.io [archived] ^{[this was reported by @Ultegra134]}
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-28
  

  scammer's addresses:
  

  BTC: bc1q25wjxy2zxe94wz8pwtfp7md5y4hz8cn2suww6t
  ETH: 0x5F937Bed6624c05606F5cf19Fac79098DFc76a04
  BSC: 0x5F937Bed6624c05606F5cf19Fac79098DFc76a04

• helpukrainepeople.org [archived] ^{[reported by @Bitcoin_Arena]}
  

  Registrar: NameCheap, Inc.
  Created on 2022-03-02
  

  scammer's addresses:
  

  BTC : 3QjZz7d1wNhhbkvx4u98NkF3D9KLMVb5jv
  ETH : 0x8E86ac59915fE35656d4a5c538cE8cb6Bd65B10B
  LTC : MQvDV6exmaiksLSNd5aDpoaAoPeBoREVVi
  XMR : 8AuGj6okRuQM46pM5Gk2TLcvJL4WDkVNaJjAJwQs1Mvn346EtozZ9d1KVHNdWFmGKPVmDnXxRUsxGHZ nLjP9t5bNToXrFJN
  TRX : TQJUUwKMEfiS9RQq9sBu7dBan1bnWguGPX
  TRC20 : TP5Lo1dQMWXnoZLtzRNTipuhqLpqdh9YfU

• ualivesmatter.com [archived] ^{[reported by @Rikafip]}
  

  Registrar: NameSilo, LLC
  Created on 2022-03-05
  

  scammer's addresses:
  

  BSC Contract: 0x43C140D78C6D2f1e0C3D2DeAFee775Fc32286346
  BSC Address (Creator): 0xF201FD2b2ef4dA0f67FC1769dfEace23Cdc35C21

• slavaukrainidao.com [archived] ^{[reported by @examplens]}
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-03-01
  

  scammer's addresses:
  

  Polygon: 0x8fe2251b6cdb0aff85d7cdb6a225d57d23b100de

• ua-helpukraine.com [archived]
  

  Registrar: Hosting Concepts B.V.
  Created on 2022-03-06
  

  scammer's addresses:
  

  ETH: 0x930e94B79DE9c8279b286106Bb6A6660629310E2
  BTC: bc1qghw85fm0e763n0h6txp8tfnf7pp0q937s2qwag
  TRX: TF3nxDNQq38uT3NEF8je65T3DCQszzLNEX
  BNB: bnb13usxmw739rjtydlvh8cfzm6v82xhux07ejz5du

• ukraine-glory.com [archived]
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-03-10
  

• defend-ukraine.com [archived]
  

  Registrar: Key-Systems GmbH
  Created on 2022-03-09
  

• save-ukraine.fund [archived]
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-03-08
  

  scammer's addresses:
  

  TRX: TVUBinVpQvU6eEHXxkEGKby4gTYd1utUV8
  ETH: 0x3444459f158df9000DAf08a5Ba47Bd99A112099a
  BTC: bc1qk9tmywwmuxy87arq9fy78l8v4x0zc972s7khfc
  DOT: 15tTciiyBpMSqTsGzPsYv17ZdTPJbc6zpEPN9kqWiNk19Pi
  NEAR: 22d9e3c67243a98eb169e0afc8bd1dc179236ca32d283753b45020023e2b449c
  BNB: 0x3444459f158df9000DAf08a5Ba47Bd99A112099a
  DASH: XyCAPHUkrhAW6oW4qbkKmYJWZszVg4wT3S
  

• saveukraine.fund
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-27
  

• fundusukraine.com [archived]
  

  Registrar: Hosting Concepts B.V.
  Created on 2022-03-01
  

  scammer's addresses:
  

  bc1qrv5kzqa5sjevkd3hlfy8y5t0lwrsn40an3yj45

• saveukrainefund.org.uk [archived]
  

  Registrar: TUCOWS Inc
  Created on 2022-03-15
  

• standwithukraine1.wixsite.com/ukrainefund [archived]
  Twitter profile: https://twitter.com/FundStand (Joined Feb 28, 2022)
  scammer's addresses:
  

  0X985200271E80FD297F5A409E82885B9F7FDB9C2E
  

• support-ukraine.com [archived]
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-02-18
  

  scammer's addresses:
  

  BTC: bc1q4w4l4jasdn36azs7rs9xkl7pv7htcs5np3mxva
  

• wesupportukraine.web.app [archived]
  
  scammer's addresses:
  

  BTC: 17gfJFjavzJcKJNqn2fX36ZJ29ydPTF317
  ETH: 0xDa4a0b4824F123F2B2DAaF02C50c60dd26F5304F
  BCH: qpy4pujrwf8xelsvzcfddfqs4jmh59qp2sd3uttcda
  

• ukan.io [archived]
  
  

  Registrar:  Key-Systems GmbH
  Created on 2022-03-17

  
  UKAN Token contract addresses:
  

  0x49bc8340ACD3521150d7cCD8a4a3510D2F5130Ca

Domains already reported in other threads:

• ukrainedonation.org ^[archived]
  

  Registrar URL: http://www.networksolutions.com

  
  
• ukrainebitcoin.online ^[archived]
  

  Registrar URL: https://www.godaddy.com

  
  
• help-ukraine-compaign.com ^[archived]
  

  Registrar URL: https://www.godaddy.com

  
  
• unitedhelpukraine.kiev.ua ^[archived]
  

  registrar:        ua.ukrnames

  
  
• ukrainedonate.today ^[archived]
  

  Registrar URL: www.publicdomainregistry.com

  
  
• ukraine-save.com ^[archived]
  

  Registrar URL: https://www.reg.com

  
  
• supportukraine.org.ua ^[archived]
  

  registrar:        ua.nic

  
  
• saveukraine.help ^[archived]
  

  Registrar URL: http://www.automattic.com

  
  
• help-fund-ukraine.org ^[archived]
  

  Registrar URL: http://www.namecheap.com

  
  
• fightforukraine.xyz ^[archived]
  

  Registrar URL: http://www.namecheap.com

  
  
• donate-ukraine.info ^[archived]
  

  Registrar URL: http://apiname.com

• Found a couple of more fake ^[active] donation websites from @DdmrDdmr's post on another thread:
  
  
  • supportukraine.today ^[archived]
    

    Registrar URL: https://www.godaddy.com

    
    
  • tokenukraine.com ^[archived]
    

    Registrar URL: http://www.1api.net

[FatFork]

reserved for future use...

[robelneo]

Is the government of Ukraine aware that scammers are using their country to scam people they should establish their donation address and make people aware of these scammers exploiting the situation, this war is feeding scammers this is very bad and disgusting after the Elon airdrop here we are the Ukraine donation scam, I hope they make it aware so those who want to donate will not be deceived.

[goaldigger]

Is the government of Ukraine aware that scammers are using their country to scam people they should establish their donation address and make people aware of these scammers exploiting the situation, this war is feeding scammers this is very bad and disgusting after the Elon airdrop here we are the Ukraine donation scam, I hope they make it aware so those who want to donate will not be deceived.

Most probably they are aware of this, this is why they tweet their right address details https://twitter.com/Ukraine/status/1497594592438497282 - and even confirm that this is their correct address. Though of course you still have to stay cautious since this can still be a hacker's address and there's an on-going cyber war as well.

The list of scammer's address has been multiplied, I'd rather donate later on when the War is over especially if there's an NGO already working on the site to help Ukraine recovers, you can be more sure that your money will be forwarded to those people who are really in need. Keep watching this thread, we might see more fake domain.

 

[The Cryptovator]

Yea, the war between Russia and Ukraine become an opportunity for scammers. Thanks for sharing the information about scammers. No reason to donate any others where authorized sources tweet about the cryptocurrency donation. Scammer using sentiment and emotion to scam us. We should be careful when spending money online to make sure money goes to the right place.

[FatFork]

The list has been updated with a few new domains. Be careful not to send any money to scammers.

• donate-ukraine.info [archived]
  

  Registrar: Atakteknoloji.com
  Created on 2022-02-27
  

• stand-with-ukraine.shop [archived]
  

  Registrar: Tucows Domains Inc.
  Created on 2022-02-27
  

[FatFork]

Updating the list with a couple of new domains that have surfaced on twitter over the past few days.

• stand-with-ukraine.com [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-26
  

• ukraineglobalaid.com [archived]
  

  Registrar: NETIM NETIM sarl
  Created on 2022-02-27
  

• fundukraine.com [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-26
  

• donateukraine.sbs [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-25
  

https://www.bleepingcomputer.com/news/security/help-ukraine-crypto-scams-emerge-as-ukraine-raises-over-37-million/


https://twitter.com/malwrhunterteam/status/1500205146755710978


https://twitter.com/JCyberSec_/status/1498239774116753409

[aioc]

I'd rather donate later on when the War is over especially if there's an NGO already working on the site to help Ukraine recovers, you can be more sure that your money will be forwarded to those people who are really in need. Keep watching this thread, we might see more fake domain.

We have a huge number of scams dedicated to Ukraine donations, just like in the days of Elon hype of Doge it's preferable to donate when the war is over for rebuilding, but countries who can afford to donate ammunitions and food supplies for the soldiers who are in the middle of the battle, we are just feeding scammers and we all know scammers are heartless, they don't care about the war.

[Bitcoin_Arena]

helpukrainepeople.org [Archived]

Registrar: NameCheap, Inc.
Created on: 2022-03-02

The site has donation options for different cryptos. Luckily, no one has sent anything yet

[FatFork]

Another domain added to the list:

• slavaukrainidao.com [archived] ^{[reported by @examplens]}
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-03-01
  

As @examplens stated here, it appears that the "SlavaUkraini DAO" is a fake project launched with the obvious goal of fraudulent fundraising and taking advantage of the current situation in Ukraine. Scam was originally posted ^[archive] by a newbie account shredded_ceo.

[FatFork]

The list has been updated with a few new domain names

• ua-helpukraine.com [archived]
  

  Registrar: Hosting Concepts B.V.
  Created on 2022-03-06
  

• ukraine-glory.com [archived]
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-03-10
  

• defend-ukraine.com [archived]
  

  Registrar: Key-Systems GmbH
  Created on 2022-03-09
  

https://twitter.com/malwrhunterteam/status/1502361543660474368


https://twitter.com/malwrhunterteam/status/1502393582438789126

[FatFork]

Updating the list with a couple of new Ukraine related scams.

• save-ukraine.fund [archived]
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-03-08
  

  scammer's addresses:
  

  TRX: TVUBinVpQvU6eEHXxkEGKby4gTYd1utUV8
  ETH: 0x3444459f158df9000DAf08a5Ba47Bd99A112099a
  BTC: bc1qk9tmywwmuxy87arq9fy78l8v4x0zc972s7khfc
  DOT: 15tTciiyBpMSqTsGzPsYv17ZdTPJbc6zpEPN9kqWiNk19Pi
  NEAR: 22d9e3c67243a98eb169e0afc8bd1dc179236ca32d283753b45020023e2b449c
  BNB: 0x3444459f158df9000DAf08a5Ba47Bd99A112099a
  DASH: XyCAPHUkrhAW6oW4qbkKmYJWZszVg4wT3S
  

• saveukraine.fund
  

  Registrar: NameCheap, Inc.
  Created on 2022-02-27
  

• fundusukraine.com [archived]
  

  Registrar: Hosting Concepts B.V.
  Created on 2022-03-01
  

  scammer's addresses:
  

  bc1qrv5kzqa5sjevkd3hlfy8y5t0lwrsn40an3yj45

https://twitter.com/malwrhunterteam/status/1502426430776479746


https://twitter.com/malwrhunterteam/status/1502411280832991232   

[saxydev]

I work a lot with anti money laundering companies so this is why I have checked all the links from this thread.

This site have been added twice: https://donate-ukraine.info/ (on 2 lists here)

And the site that made me write this post was this: http://unitedhelpukraine.kiev.ua . When you go to the donate button it redirects you to ru version of blockchain.com. Motherfuckers, pieces of shit, animals.

Also many of the archives from the first part don't work anymore.

[FatFork]

Also many of the archives from the first part don't work anymore.

I fixed the broken links I found in the first post. Unfortunately, some archives are not available.
Sites that are reported in different topics may appear twice.

[FatFork]

Daily update with a couple of new Ukraine related scams.

• saveukrainefund.org.uk [archived]
  

  Registrar: TUCOWS Inc
  Created on 2022-03-15
  

• standwithukraine1.wixsite.com/ukrainefund [archived]
  Twitter profile: https://twitter.com/FundStand (Joined Feb 28, 2022)
  scammer's addresses:
  

  0X985200271E80FD297F5A409E82885B9F7FDB9C2E
  

• support-ukraine.com [archived]
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-02-18
  

  scammer's addresses:
  

  BTC: bc1q4w4l4jasdn36azs7rs9xkl7pv7htcs5np3mxva
  

[FatFork]

Updating the list with a couple of new Ukraine related scams.

• unitedhelpukraine.online [archived]
  

  Registrar: Hostinger, UAB
  Created on 2022-03-19
  

  scammer's addresses:
  

  bc1qsuxgvrzsc44lyjea7rd95jcnu62wncdlcxg0cf

• helpukraineinwar.com [archived]
  

  Registrar: NameSilo, LLC
  Created on 2022-03-19
  

  scammer's addresses:
  

  BTC: bc1qpxk652svuzxyfr9s47mhqvga78t9d6g7xy09tk
  ETH/ERC-20: 0x52dD26fAE5e12df0573312A30B8CA2809d75757f
  TRX/TRC-20: TUeWjt8ry2VsKUnHtCHsdohPfw8NuS2znA
  LUNA: terra1evmdwf4epu8f4y6vjx60336y607pxhgz9z28md
  DOT: 1wVnsZMopywrADej68uR83vHX9uQdMyPX4TDi9XHQ2zjfcV
  SOL: GcL2fqX1KRyShYsSn2yv8uhhCoHbUnePxTwKUWMJXqvw
  ADA: bnb16agx0scnlsl5engvlla5x96cencnqt4e5k2kmj
  DOGE: DU7vPGFYnVczAA9TWRQnsSCztcJL9UzacC
  XMR: 42MSFSwKHa94NEMm12gyALUuN8kg9TEyrK7pcF8MnZ1zZPavze948m1hS8cVjkYYwVUkmhcnxDwVJA2 UsFyZVwjc1nwa94K
  ICX: hx514923b3e6ce7abd7e704cc2355bddf74520a0e8
  CSPR: 0202aacf42dddd932d76ca61e5bada656e27d226245cea1629caabd4211e90b1abc7

• ukrainesupport.life [archived]
  

  Registrar: GoDaddy.com, LLC
  Created on 2022-03-19
  

• save4ukraine.space [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-03-20
  

  scammer's addresses:
  

  BTC: 15SEvxg9ZAT8zmLp4wxbELquZYRyiZHoec
  TRC-20: THf6hyVgUzHiVC2B2rrbN9vPWLGK5944Kf
  ETH: 0xaf81d39fb3b8b21312d2ee128a592276eb947903
  

• help-ukraine.ooo [archived]
  

  Registrar: Hosting Ukraine LLC
  Created on 2022-03-20
  

  scammer's addresses:
  

  BTC: bc1qpqweu9vxyd9ypasnp566n3sz3c7mtppvnk0fjq
  ETH: 0x02c1495E7Bbbe252eE15695f6371107097075a12
  

• ukrainerelieffunding.org [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-03-20
  

  scammer's addresses:
  

  BTC: 16D1T3Ah1S3Bs1SzqqHTCFHpGU9Tff9i4d
  ETH: 0xceB1621492D9Cc9453228a918f1Dd7b848f7df5d
  

• ukrainesupportaccelerated.in [archived]
  

  Registrar: Endurance Digital Domain Technology LLP
  Created on 2022-03-17
  

  scammer's addresses:
  

  BTC: 3DXnKxbKtTyPF3E6jVeNpmvcmJSFroNLM2
  ETH: 0x6F60c893250Ffb4c21a074E6CdAF298dAB2234f5
  BCH: qzxx5ty3gnyjepc5tp90t5807g65dd5yhvd5hzg4ea
  XRP: r9n8aHTB5StrJRfnvz4qVJ1GKAyQwZCMZM
  

• fight4ukraine.co [archived]
  

  Registrar: NameCheap, Inc.
  Created on 2022-03-20
  

  scammer's addresses:
  

  BTC: bc1qrr7xmuccv76c5fxa0vx880at3jfrmjyfh283cl
  

[FatFork]

Another day, another scam...

• wesupportukraine.web.app [archived]
  
  scammer's addresses:
  

  BTC: 17gfJFjavzJcKJNqn2fX36ZJ29ydPTF317
  ETH: 0xDa4a0b4824F123F2B2DAaF02C50c60dd26F5304F
  BCH: qpy4pujrwf8xelsvzcfddfqs4jmh59qp2sd3uttcda
  

[FatFork]

Here is another example of scammers taking advantage the Ukraine crisis to create fake charity donation ICO:

• ukan.io [archived]
  
  

  Registrar:  Key-Systems GmbH
  Created on 2022-03-17

  
  UKAN Token contract addresses:
  

  0x49bc8340ACD3521150d7cCD8a4a3510D2F5130Ca

[JollyGood]

An excellent piece of work here by you. The list is extensive and you deserve full credit thank you. What is sad to read are the actual number of attempts at scamming people and the justifications provided by the scammers.

Potential donors have be aware that these are all scam websites and every single penny of any funds sent to these scammers will be going directly to their own pockets.

Make sure you send your donations to the right place!

[saxydev]

Hello FatFork,

Do you know where I may find more websites as these?

Thanks