Porkbun
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 62 → 76. Problems weighed by who is responsible: concerns that are not fraud −7.2, problems around the subject, caused by others −1.9; legitimacy credit long-running +10; 1 section(s) set aside until a failed fact-check is resolved; fact-check adjustments (+10) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -7.2 |
| Problems around it, caused by others | -1.9 |
| Long-running | +10 |
| Sum | 66 |
- 1 section set aside: the claims did not hold up in a fact-check, pending correction.
Score: 76/100 (kept between 0 and 100)
How scoring works →Summary
Porkbun LLC is a legitimate ICANN-accredited domain registrar founded circa 2014-2015, headquartered in Sherwood, Oregon, and managing over 3.45 million domains. While the company is not itself a scam operation, it has attracted scrutiny from the crypto security community — including on-chain investigator ZachXBT — for hosting phishing infrastructure linked to Angel Drainer and Inferno Drainer wallet-draining services, including fake Ledger sites. Third-party tracking platforms document hundreds of flagged phishing domains registered through Porkbun and allege that the company's abuse-response enforcement has been inadequate, with a majority of reported domains remaining active after formal abuse reports.
Connected Entities
6 entities · 60 linked investigations- Porkbun→mentioned with→Solana(65%)
- Porkbun→mentioned with→Coinbase(70%)
- Porkbun→mentioned with→ZachXBT(70%)
- Porkbun→mentioned with→Ethereum(60%)
- Ethereum→mentioned with→Coinbase(60%)
- ZachXBT→mentioned with→Ethereum(70%)
- Inferno Drainer→mentioned with→Ethereum(70%)
- Inferno Drainer→mentioned with→Coinbase(65%)
- Inferno Drainer→mentioned with→ZachXBT(65%)
- Coinbase→mentioned with→ZachXBT(70%)
- + 3 more
Timeline(8 events)
2014
Porkbun LLC founded by Ray King and Peter Brual in Portland/Sherwood, Oregon as a subsidiary of Top Level Design LLC. ICANN accreditation received, IANA Registrar ID 1861 assigned.
ICANNWiki / Porkbun About UsMarch 2023
Angel Drainer phishing-as-a-service begins operations, deploying lookalike crypto brand domains (Ledger, Coinbase, WalletConnect) across multiple registrars including Porkbun.
Web3 Crypto Malware: Angel Drainer - Sucuri Blog14 December 2023
Ledger Connect Kit supply-chain exploit uses Angel Drainer to drain approximately $484,000-$610,000 from DeFi users within two hours. ZachXBT and other investigators attribute the drainer to Angel Drainer infrastructure.
CoinDesk - Ledger Exploit Drained $484K24 June 2024
Porkbun announces it has crossed 2 million domains under management, becoming the 20th largest ICANN registrar overall.
BusinessWire - Porkbun.com Now Manages Over 2 Million Domain Names18 October 2024
Scam Sniffer reports on-chain data showing Inferno Drainer's fee address changed, with Inferno Drainer claiming Angel Drainer has taken over the entire project.
Scam Sniffer on X2 January 2026
PhishDestroy begins systematic abuse report filings against phishing domains registered through Porkbun LLC. Tracking covers 274 domains; 71% remain active after reports filed.
PhishDestroy - Porkbun LLC registrar page8 April 2026
Phishing domain chatdefi.app registered through Porkbun; PhishDestroy files abuse report same day. Domain remains reachable over one month later with drainer kit active.
PhishDestroy - chatdefi.app domain reportMay 2026
Porkbun's official Twitter account responds to security firm Coinspect, stating it has contacted its abuse department and that a reported phishing domain was suspended. Dark Web Informer confirms the takedown.
Porkbun on X / Dark Web Informer on XResearch Gaps
1 open · agent-resolvableHeuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.
- [med]unarchived sources
Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.
Decision Log
- slot 455370680 · hash H6PVsZwGzKHnz3EXQpGQbxjiHXF9G8VhwdU3saBj4pAD
- slot 445508233 · hash 8yR5n1ou7v5srKD8hmm8Wbd2e7tPpESLfLxQ44VUMxe4
- slot 426514476 · hash HTaCZNXJuYbLBkyjwymdD3yJzUSySYgXpTHwkmhN9krX
- slot 426514472 · hash BeSgdhbzBVGray4CTHSWnswGUKr4ssZAKUMBq3qM5LYV
- slot 425412758 · hash 8CtvFHTXWE96js3At7kXmXQstn15vmmDpYzzStynXib8
- slot 425412754 · hash Hdn9H2x44VZxhf5561sDRyeNipiZP84qTEiZjXNK6V6V
- slot 420804466 · hash 5YgjctTUS6k3c65wqc3WC74s3KHKxnophHTCewyhRVdz
This investigation is cryptographically anchored to the Solana blockchain (7 decisions). 15 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet
generated: 5/4/2026, 4:05:03 PM
last updated: 10/10/2026, 6:50:31 PM
9 viewsavoid.net — verified advice for a post-truth world