Sarah Breeden <aline.aranda@matsuda.com.br> wrote:2025-9-9 02:22
Email subject: Dringender Handlungsbedarf
Reply-to: sarah.breeden@englandbankcx.info
Hallo, hiermit informieren wir Sie darüber, dass auf Ihren Namen
nicht beanspruchte Gelder vorhanden sind. Um Ihren Anspruch geltend zu
machen, wenden Sie sich bitte zur Bestätigung an Sarah Breeden,
stellvertretende Gouverneurin der Bank of England für
Finanzstabilität. Bitte geben Sie Ihren vollständigen Namen an, wenn
Sie sie per E-Mail an sarah.breeden@englandbankcx.info kontaktieren.
2025-07-21: We have updated our Privacy Policy. Thanks to Vietnamese blackhat SEO wannabe DDoS:ing forums with Russian malware developed by Aleksandr Ryanchenko (Александр Рябченко) aka Alexandru Robu for automatic registrations and spam posts, this forum is now manually moderated to ban clueless script kiddies.
Dringender Handlungsbedarf
-
emailbot
- Posts: 594
- Joined: 2025-4-22 17:52
-
s
- Posts: 368
- Joined: 2017-7-5 09:58
I reported this attack to the registrar which is porkbun.com 3 days ago. First of all their abuse email address is just replying with some automated messages saying
The domain is still valid and has MX record pointing to google which means that attackers are receiving emails to that fake phishing email address thanks to porkbun. And reporting abuse to google is futile as we learned earlier.
What a shame. I am strongly considering ditching porkbun as my domain registrar.
Their abuse form is abusive. Filling it is laborious with a lot of unnecessary but obligatory or broken (date) fields and when you finally manage to fill it, you will discover that is it broken. Pressing submit button does nothing. Apparently porkbun is more interested in selling domain registrations to criminals than dealing with abusers and preventing phishing attacks like this.Porkbun has transitioned to a new abuse reporting process. We are now using an Abuse Reporting Form for all types of abuse reporting. This means we no longer accept abuse reports via email, everything will now be handled through the form.
The domain is still valid and has MX record pointing to google which means that attackers are receiving emails to that fake phishing email address thanks to porkbun. And reporting abuse to google is futile as we learned earlier.What a shame. I am strongly considering ditching porkbun as my domain registrar.
-
s
- Posts: 368
- Joined: 2017-7-5 09:58
From: Porkbun Abuse <abuse@porkbun.com>
Date: Fri, 12 Sept 2025 at 15:01
Subject: Re: Your abuse reporting is broken
Hello,
Debugging isn't necessary, as the form is working as expected. Occasionally, we receive reports that the abuse reporting form isn't working and it usually is the result of browser settings, extensions, or another issue local to the reporter's computer.
As a one-time courtesy, we will accept your report and enter it into our abuse reporting system.
Can you send us a copy of any emails received as a .eml file for us to investigate?
We look forward to your reply.
Best,
Porkbun Fraud and Abuse Reporting Center
abuse@porkbun.com
