Skip to main content
AVOID.NET

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·48p9bJ…9AUc

Summary

Porkbun LLC is a legitimate ICANN-accredited domain registrar founded circa 2014-2015, headquartered in Sherwood, Oregon, and managing over 3.45 million domains. While the company is not itself a scam operation, it has attracted scrutiny from the crypto security community — including on-chain investigator ZachXBT — for hosting phishing infrastructure linked to Angel Drainer and Inferno Drainer wallet-draining services, including fake Ledger sites. Third-party tracking platforms document hundreds of flagged phishing domains registered through Porkbun and allege that the company's abuse-response enforcement has been inadequate, with a majority of reported domains remaining active after formal abuse reports.

Connected Entities

6 entities · 60 linked investigations
Relationships
  • Porkbunmentioned withSolana(65%)
  • Porkbunmentioned withCoinbase(70%)
  • Porkbunmentioned withZachXBT(70%)
  • Porkbunmentioned withEthereum(60%)
  • Ethereummentioned withCoinbase(60%)
  • ZachXBTmentioned withEthereum(70%)
  • Inferno Drainermentioned withEthereum(70%)
  • Inferno Drainermentioned withCoinbase(65%)
  • Inferno Drainermentioned withZachXBT(65%)
  • Coinbasementioned withZachXBT(70%)
  • + 3 more
Have evidence about Porkbun?

Timeline(8 events)

2014

Porkbun LLC founded by Ray King and Peter Brual in Portland/Sherwood, Oregon as a subsidiary of Top Level Design LLC. ICANN accreditation received, IANA Registrar ID 1861 assigned.

ICANNWiki / Porkbun About Us

March 2023

Angel Drainer phishing-as-a-service begins operations, deploying lookalike crypto brand domains (Ledger, Coinbase, WalletConnect) across multiple registrars including Porkbun.

Web3 Crypto Malware: Angel Drainer - Sucuri Blog

14 December 2023

Ledger Connect Kit supply-chain exploit uses Angel Drainer to drain approximately $484,000-$610,000 from DeFi users within two hours. ZachXBT and other investigators attribute the drainer to Angel Drainer infrastructure.

CoinDesk - Ledger Exploit Drained $484K

24 June 2024

Porkbun announces it has crossed 2 million domains under management, becoming the 20th largest ICANN registrar overall.

BusinessWire - Porkbun.com Now Manages Over 2 Million Domain Names

18 October 2024

Scam Sniffer reports on-chain data showing Inferno Drainer's fee address changed, with Inferno Drainer claiming Angel Drainer has taken over the entire project.

Scam Sniffer on X

2 January 2026

PhishDestroy begins systematic abuse report filings against phishing domains registered through Porkbun LLC. Tracking covers 274 domains; 71% remain active after reports filed.

PhishDestroy - Porkbun LLC registrar page

8 April 2026

Phishing domain chatdefi.app registered through Porkbun; PhishDestroy files abuse report same day. Domain remains reachable over one month later with drainer kit active.

PhishDestroy - chatdefi.app domain report

May 2026

Porkbun's official Twitter account responds to security firm Coinspect, stating it has contacted its abuse department and that a reported phishing domain was suspended. Dark Web Informer confirms the takedown.

Porkbun on X / Dark Web Informer on X

Research Gaps

1 open · agent-resolvable

Heuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.

  • [med]
    unarchived sources

    Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (6 events). 15 of 17 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-09-0727 claims checked12 corrections pending0 applied⛓ anchoredSee findings →

model: claude-sonnet

generated: 5/4/2026, 4:05:03 PM

last updated: 7/24/2026, 6:53:26 PM

5 views

avoid.net — verified advice for a post-truth world