Ongoing Phishing and Typosquatting Campaign Targeting Porkbun.com: An Urgent Alert for Users and Stakeholders
In recent weeks, Porkbun.com has identified a concerning rise in malicious activities involving multiple typo-squatting domains hosting active phishing schemes aimed at impersonating the brand. These deceptive domains are designed to trick users into revealing sensitive information and compromise their online security.
Identified Threats and Domains Involved
Porkbun.com has documented approximately 15 suspect domains employing slight misspellings to deceive users. Despite persistent efforts to have these domains taken down through GoDaddy, their registrar of record, these have remained active. The domains in question include:
- porkbunt.[com]
- porksbun.[com]
- porknun.[com]
- parkbun.[com]
- porkubn.[com]
- porkbnu.[com]
- pokrbun.[com]
- porkbin.[com]
- poekbun.[com]
- porkvun.[com]
- porkbyn.[com]
- porkbjn.[com]
- porbun.[com]
- porkben.[com]
- porkbunn.[com]
Note: The above domains often replicate authentic Porkbun branding but contain subtle misspellings intended to mislead users.
Current Status and Response Efforts
All identified domains are presently under clientHold status, indicating they have been temporarily suspended at the registrar level. Porkbun expresses gratitude toward the cybersecurity community and users who have reported these incidents, assisting in swift action against the malicious actors.
Despite these efforts, the challenge persists, highlighting the need for vigilant monitoring and prompt reporting of suspicious activity.
Recommended Actions for Users
- Verify URL Authenticity: Always double-check the website URL before entering sensitive information. Small misspellings are common tactics used in typosquatting.
- Remain Vigilant with Emails: Be cautious of unsolicited emails or links claiming to be from Porkbun. Confirm the sender’s email address and avoid clicking on suspicious links.
- Secure Your Accounts: If you suspect you’ve interacted with one of these phishing sites, immediately change your passwords, enable two-factor authentication, and monitor your accounts for unusual activity.
- Report Suspicious Domains: If you encounter other potentially malicious domains or phishing attempts, please notify Porkbun at [email protected]. Additionally, reporting these to the registrar can help expedite takedown procedures.
How to Report Phishing Domains
For those inclined to assist in combating these threats, you can submit abuse reports through GoDaddy’s official abuse reporting portal: https://supportcenter.godaddy.com/abusereport/phishing?plid=1. When reporting, include details such as the domain name and a description of the suspicious activity.
Sample Response for Reporting
These domains are engaging in a typo-squatting and phishing campaign against Porkbun.com, collecting user email addresses before redirecting to the official site.
Conclusion
The rise of typo-squatting and phishing domains poses a significant threat to online security and brand integrity. Porkbun.com remains committed to combating these malicious activities through cooperation with domain registrars, security professionals, and vigilant users. Ongoing monitoring and quick action are crucial in safeguarding the community from potential fraud and data breaches.
Stay informed, stay cautious, and report suspicious activity promptly.
For updates and further assistance, visit Porkbun’s security blog or contact us directly.
