Rise In Fake Donation Scams After Turkey Earthquake

**Executive Summary:** Cyble Research & Intelligence Labs identified a series of fraudulent donation websites exploiting the Feb 6, 2023 Turkey–Syria earthquake; the report documents multiple phishing domains and IPs (e.g., redcrossturkey.com, help-turkey.org, turkeyrelieftoken.help, and hosting IPs 128.199.90.75, 35.208.102.247, 162.213.251.229), shows WHOIS and payment-flow details (including PayPal redirects and a Google script used to collect user contact data), and provides mitigation recommendations and IoCs to help potential victims and defenders verify legitimacy and avoid financial fraud.