Verdict
bank.gov.ua appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Official website of the National Bank of Ukraine providing institutional information, policy decisions, statistics, publications, news, and public contact information in Ukrainian. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 26 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website presents itself as the institutional website of the National Bank of Ukraine, providing central-bank information in Ukrainian, including monetary-policy decisions, financial-stability material, statistics, publications, regulatory information, news, consumer-protection resources, and public contact services. Its apparent purpose is non-commercial public-sector communication and information delivery.
Scam/Impersonation Risk
No contradictions were observed between the site’s stated institutional purpose, its substantive central-bank content, and the available external security signals. The homepage identifies the National Bank of Ukraine and provides coherent institutional sections rather than commercial offers, investment solicitations, or misleading financial promotions. Behavioral testing did observe hidden forms, but no sensitive form, password-external destination, wallet connection, phishing indicator, cloaking behavior, or brand-impersonation signal was identified; the anomaly is therefore best treated as a low-impact implementation detail rather than evidence of deception. The domain is also long-established, and external reputation checks found no malicious or suspicious detections.
- The homepage is titled “National Bank of Ukraine” and contains institutional sections covering monetary policy, financial stability, payments, statistics, regulation, supervision, news, and consumer protection.
- The site’s behavioral inspection found no login form, no password submission to an external destination, no wallet-drainer activity, and no cloaking classification.
- Domain registration: 2000-12-31T22:00:00Z; age_years 25.63 (~25.63 years old).
Regulatory Verification Notes
The site’s content is consistent with a public-sector central-bank information service rather than a private financial product provider. It presents institutional identity, policy material, public services, and contact information, while the supplied evidence does not independently verify the real-world operator beyond the site’s own identity presentation. No commercial licensing claim or license number is presented as part of the apparent business model, so licensing is not a substantive issue for the informational functions observed; any separate transaction or regulated service encountered through another channel would require its own verification. The site also has an established page-authority signal and a clean contextual reputation, supporting the conclusion that it appears established while not proving operator identity.
- The homepage describes institutional functions of the National Bank of Ukraine and links to organizational structure, strategy, international cooperation, supervision, and consumer-protection material.
- The site is served from AS13335, CLOUDFLARENET — Cloudflare, Inc., US.
- The site’s TLS certificate is issued by WE1, uses Domain Validation (DV), and is valid to 2026-09-15T04:45:25+00:00.
- The available broker-reputation context contains no matching adverse record.
What to Verify Next
Before any credential or payment interaction, an organization should independently confirm that the domain and published contact channels correspond to the National Bank of Ukraine through a trusted government directory, an independently sourced institutional record, or an established offline contact route. If a page redirects to a separate service, the destination, legal entity, applicable authorization, payment protections, and any return or dispute terms should be assessed independently rather than inferred from the institutional presentation. Routine informational use should remain limited to the intended public-service content unless those checks support a separate interaction.
- The site publishes public contact and citizen-service resources on its institutional pages.
- The observed page model is informational and regulatory, with no commercial monetization mechanism identified.
- The site’s content includes consumer-protection material and a facility for reporting unlicensed activity.
Summary Verdict
Available evidence is consistent with an established, apparently legitimate website and supports a high-trust, low-risk posture with no observed scam, phishing, impersonation, or identity-conflict indicators. The conclusion concerns the website’s observed trust posture; it does not independently prove the real-world operator’s identity.
Infrastructure Integrity
The website is protected by Cloudflare’s CDN/WAF infrastructure, with observed edge addresses in AS13335 and no origin candidate exposed in the supplied infrastructure assessment. This provides a meaningful reduction in direct origin exposure and is a mitigating control, although protective hosting infrastructure alone is not proof of legitimacy.
Closing Assessment
Normal informational browsing is proportionate to the observed posture; credential or payment interactions should proceed only after ordinary independent confirmation of the relevant entity, destination, and consumer protections.
Written analysis generated 2026-08-13 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- Identity verified on page
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bank.gov.ua.
- The request stayed on bank.gov.ua. It was not redirected to another domain. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-06-04. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:78::90:0:540 |
| Name servers | elaine.ns.cloudflare.com, patrick.ns.cloudflare.com |
| SSL issuer | WE1 |
| SSL expiry | 2026-09-15 |
| Domain age | 25.63 years (continuous registration) |
| Domain expiry | 2027-06-04 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bank.gov.ua at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.