Hello, Porkbun CTO here and I noticed this post. First, not sure what michaelpaoli's beef is with us. Maybe he's had a bad experience, not sure but I know you can't please everyone and he might fall into that bucket of folks. We're certainly not a "crud" or "low quality" registrar, I kind of take that a bit personally since Porkbun is a labor of love for me. I've been in this industry since '99 and helped build / built several registrars including name.com and dotster.com back in the day. We kind of pride ourselves on offering great service at great prices, and I think we've achieved that. We're not some faceless corporate juggernaut, we're a small team of real people. Anyhow, I can talk about your issue now that I've defended my honor (lol emoji here). We're not seeing any issues with DNS on our end and your domain appears to have been properly configured. We've also had no other reports of this sort of activity. We use Cloudflare as our backend DNS provider and they're not seeing any issues either. Without being able to diagnose things as they were when the issue was happening it's a little difficult to figure out what was up. The IP 185.167.97.90 does not belong to us. If that IP was being returned by your resolver for your domain it sounds to me like DNS cache poisoning but it's really impossible to tell without seeing it, and if DNSSEC was configured and supported by the resolver this seems highly unlikely. I really would have loved to see the behavior while it was happening. Usually stuff like this ends up being a misconfiguration, an individual hacked account, or a user error of some sort; but it's really hard to tell. Answer from porkbunregistrar on reddit.com
Porkbun
kb.porkbun.com › porkbun knowledge base › porkbun knowledge base › how to reset dns and park your domain
How to reset DNS and park your domain - Porkbun Knowledge Base
Parking removes any ALIAS, CNAME, A, and AAAA records for the root domain, the www subdomain, and the wildcard (*) subdomain in Porkbun DNS.
Porkbun
porkbun.com › parked
porkbun.com | An oddly satisfying experience.
The owner of the website you went to hasn't put anything up yet but I'm sure they will eventually. In the mean time why don't you find your own domain? Get Started! ... Copyright © Porkbun LLC. All rights reserved. Porkbun is a Top Level Design Company Made in the USA 🇺🇸
Porkbun
kb.porkbun.com › porkbun knowledge base › porkbun knowledge base › how to use the domain details area
How to use the Domain Details area - Porkbun Knowledge Base
If your SSL certificate hasn't ... to reset your domain to our default DNS records and point it at our parking page, the PARK DOMAIN feature in the domain Details area has you covered....
Reddit
reddit.com › r/dns › mysterious domain name hijacking/poisoning?
r/dns on Reddit: Mysterious Domain Name Hijacking/Poisoning?
March 31, 2023 -
I use Porkbun for domain management. I have a domain registered with them, but it resolved to a weird Russian website that is not mine for God knows how long. When I tried to fix it, something mysterious happened.
I originally expected the domain (fox-night.com) not to resolve to anything, but when I went to it, I was greeted with some stupid El*n M*sk web page (https://imgur.com/Re9dHph).
Tinkering with mitigation, I temporarily added URL forwarding through the Porkbun interface, which did work and stopped redirection to the Russian website.
HOWEVER, when I removed the URL forwarding, the domain stopped resolving to anything - I expected it to redirect to the Russian site like it did before. Apparently this was because adding URL forwarding removed the two resource records that existed previously (https://imgur.com/n8zDlAE) :
-
Type "ALIAS", with host "fox-night.com" and answer "uixie.porkbun.com"
-
Type "CNAME", with host "*.fox-night.com" and answer "uixie.porkbun.com"
So, I added those two back, and I am now greeted with the seemingly official Porkbun "Parked on the Bun" page that still appears right now (image https://imgur.com/fnyibLm).
Did I just witness a DNS poisoning attack? Did the attacker (attacker's script) notice I changed something and stopped hijacking my domain? Did I misconfigure something or is this on Porkbun? Can I prevent this from happening again?
More info, when the domain was hijackeddig'ing it (with the default DNS server) returned an A record with value 185.167.97.90. When I dig'ed with 1.1.1.1, I got two other IP addresses - 52.33.207.7 and another one I did not write down. Now, using dig returns nothing.
Top answer 1 of 2
3
Hello, Porkbun CTO here and I noticed this post. First, not sure what michaelpaoli's beef is with us. Maybe he's had a bad experience, not sure but I know you can't please everyone and he might fall into that bucket of folks. We're certainly not a "crud" or "low quality" registrar, I kind of take that a bit personally since Porkbun is a labor of love for me. I've been in this industry since '99 and helped build / built several registrars including name.com and dotster.com back in the day. We kind of pride ourselves on offering great service at great prices, and I think we've achieved that. We're not some faceless corporate juggernaut, we're a small team of real people. Anyhow, I can talk about your issue now that I've defended my honor (lol emoji here). We're not seeing any issues with DNS on our end and your domain appears to have been properly configured. We've also had no other reports of this sort of activity. We use Cloudflare as our backend DNS provider and they're not seeing any issues either. Without being able to diagnose things as they were when the issue was happening it's a little difficult to figure out what was up. The IP 185.167.97.90 does not belong to us. If that IP was being returned by your resolver for your domain it sounds to me like DNS cache poisoning but it's really impossible to tell without seeing it, and if DNSSEC was configured and supported by the resolver this seems highly unlikely. I really would have loved to see the behavior while it was happening. Usually stuff like this ends up being a misconfiguration, an individual hacked account, or a user error of some sort; but it's really hard to tell.
2 of 2
1
Porkbun Wouldn't recommend. domain registered with them, but it resolved to a weird Russian website that is not mine for God knows how long. When I tried to fix it, something mysterious happened. Shouldn't be anything "mysterious". It's basic DNS & IPs. the domain (fox-night.com) $ dig +noall +answer +nottl fox-night.com. NS | sort -if fox-night.com. IN NS curitiba.ns.porkbun.com. fox-night.com. IN NS fortaleza.ns.porkbun.com. fox-night.com. IN NS maceio.ns.porkbun.com. fox-night.com. IN NS salvador.ns.porkbun.com. $ dig +noall +answer +nottl fox-night.com. A fox-night.com. AAAA www.fox-night.com. A www.fox-night.com. AAAA fox-night.com. IN A 44.230.85.241 fox-night.com. IN A 52.33.207.7 www.fox-night.com. IN CNAME uixie.porkbun.com. uixie.porkbun.com. IN A 44.230.85.241 uixie.porkbun.com. IN A 52.33.207.7 www.fox-night.com. IN CNAME uixie.porkbun.com. $ If those aren't the nameservers, etc. you're expecting in DNS, you should change that. Your domain, after all. expected the domain (fox-night.com) not to resolve to anything Uhm, no, most registrars will default to having domain web site go to some "parking" or advertising/promotional page - of their choosing. So, if that's not what you want, well, then take responsibility for managing your domain, rather than having it default to ... whatever, as it will with most registrars. some stupid web page That's what you get for picking low quality registrar. Defaults and other things will suck. Don't like that? Don't pick a crud registrar. So, is that buck or so you saved going with a low quality registrar really worth that savings? Yeah, probably not. removed the two resource records that existed previously ( https://imgur.com/n8zDlAE ) : Type "ALIAS", with host "fox-night.com" and answer "uixie.porkbun.com" Type "CNAME", with host "*.fox-night.com" and answer "uixie.porkbun.com" Looks like all that sh*t is back again: $ dig +noall +answer +nottl \*.fox-night.com. A \*.fox-night.com. AAAA *.fox-night.com. IN CNAME uixie.porkbun.com. uixie.porkbun.com. IN A 52.33.207.7 uixie.porkbun.com. IN A 44.230.85.241 *.fox-night.com. IN CNAME uixie.porkbun.com . $ Did I just witness a DNS poisoning attack? I rather doubt it. But you don't seem to have saved any potentially relevant DNS information, so, dear knows. Did the attacker (attacker's script) notice I changed something and stopped hijacking my domain? Extraordinary claims require extraordinary proof (or at least reasonable evidence). You've not provided such, so I wouldn't jump to such conclusions. Did I misconfigure something or is this on Porkbun? Yeah, probably one of those two. Can I prevent this from happening again? Maybe. Might want to start with a quality registrar. And also managing your domain, rather than having it default to whatever regarding DNS, etc. 185.167.97.90 52.33.207.7 Per whois, looks like some cloud or cloud service providers. Now, using dig returns nothing That's not what I'm seeing.
Reddit
reddit.com › r/webdev › bought a domain name on pork bun, what is this? not letting me add dns records.
r/webdev on Reddit: Bought a domain name on pork bun, what is this? Not letting me add DNS records.
March 20, 2023 - Most domains allow for a grace ... behave differently. The error trying to add a DNS record is most likely it's due to our parking page, pixie.porkbun.com....
YouTube
youtube.com › nicole sauk - website help for business owners
Porkbun Domains: Register, Transfer, Connect Website, and Grant Access - YouTube
In this step-by-step guide, I'll take you through the process of securing the domain name for your website or business. Whether you're a budding entrepreneur...
Published September 27, 2023 Views 5K
Porkbun
kb.porkbun.com › porkbun knowledge base › porkbun knowledge base › how to list your domain for sale on marketplace
How to list your domain for sale on Marketplace - Porkbun Knowledge Base
If you choose to use the parking page we provide, you can set the "Domain Display" option, which will let you capitalize any part of the domain name you want.
Porkbun
kb.porkbun.com › porkbun knowledge base › porkbun knowledge base › dns
DNS - Porkbun Knowledge Base
How to use Porkbun email when your DNS is hosted elsewhere · How to use the Domain Details area · How to create a subdomain · How to reset DNS and park your domain · How to host your own nameservers with glue records · How to transfer a domain to Porkbun with little to no DNS downtime ·
Shopify Community
community.shopify.com › shopify discussion
How to resolve a domain parking issue after DNS settings edit?
November 30, 2022 - After editing the DNS settings it still shows the domain is parked when searched . How to fix this issue? Got the domain from porkbun
Shopify Community
community.shopify.com › c › shopify-discussions › domain-park-problem › td-p › 1839541
Domain Park Problem - Shopify Community
December 6, 2022 - Hi according to shopify my domain has been successfully connected but when i search the url the result says it's still park in porkbun where i bought it from my url is, ... Thank you for taking your time to help. ... Thanks for getting back with this information. If it says successfully connected in your admin then that is a good sign. I tried accessing the URL you provided of ikurumba.com and from what I can tell it seems to be working OK.
Porkbun
kb.porkbun.com › porkbun knowledge base › porkbun knowledge base › what happens after a domain expires?
What Happens After a Domain Expires? - Porkbun Knowledge Base
After the 10th day of the Auto-Renew Grace Period one of three things should happen: 1) the Porkbun name servers will be automatically assigned and your domain will display a notice to any visitors that it has expired or 2) the domain will be put into a status of "Client Hold", meaning it will be removed from the root zone and eventually no longer resolve or 3) the domain will be pointed to a monetized parking page.
Reddit
reddit.com › r/webhosting › new to this, pork bun default website showing on nick host
r/webhosting on Reddit: New to this, pork bun default website showing on Nick host
January 4, 2022 -
I’m new to hosting. I registered a domain through porkbun and went with nixihost’s cheapest option. I selected the option to keep my domain with porkbun and change the name servers (no idea what this is, and probably my issue).
I have a website I built with React. I added a homepage script linking to my domain and created a build file. Compressed to a zip, put it in nixihost’s cPanel public_html folder and extracted the files.
I’m still showing porkbuns “parked on the bun” default website. Is this something that takes a while to kick in, or did I mess something up and need to look into it more?
Reddit
reddit.com › r/webdev › best place to register and park domains
r/webdev on Reddit: Best place to register and park domains
February 26, 2024 -
I know this type of thing is asked a lot but the answer also changes frequently.
I have a bunch of domains at a variety of hosting services, they all seem to be raising prices faster than other places, I’m curious what everyone’s favorite registrar is today, just for registration, renewal, parking, and DNS. I don’t need hosting.
NamePros
namepros.com › forums › discussion › domain parking and traffic monetization
question - SSL for Porkbun domains parked with Sedo | NamePros
July 15, 2023 - I've contacted Porkbun support, this is their reply: "Unfortunately, right now our SSL is only able to be auto-installed on our web hosting services. Sedo would be the one providing a SSL on any Parked parked page as it would be their server." So Cloudflare seems to be the only option for ssl on Sedo. Maybe this will help someone. Log in or sign up to reply here. ... Bido.com, parking problem..
Reddit
reddit.com › r/domains › domain at porkbun, hosting at fastcomet, how long does it take to show my website ?
r/Domains on Reddit: domain at porkbun, hosting at fastcomet, how long does it take to show my website ?
August 8, 2023 -
I've put fastcomet's nameservers at Porkbun, saved, everything went smooth but till now I can't seem to see my website and it still shows Parked on the Bun when I go to my domain. How long does it usually take to process ? am I maybe missing something ? been a while since I did this.
Top answer 1 of 2
1
Did you create any dns records? Seems like the nameservers are up to date as they have default/parked records, just no ips or anything?
2 of 2
1
Nameserver changes can take up to 48 hours to fully propagate, you may want to try clearing your browser history or restart your modem/router to also clear any cached DNS entires. If you're still having issues feel free to reach out to support at [email protected] .
Porkbun-bodis
porkbun-bodis.com
Porkbun Parked Domain
We cannot provide a description for this page right now
PyPI
pypi.org › project › certbot-dns-porkbun
certbot-dns-porkbun · PyPI
Note: By default, Porkbun domains cannot be controlled through the API. This will cause an error when you generate certificates. Ensure that you have enabled API Access in your domain's settings to avoid this.
» pip install certbot-dns-porkbun
Porkbun
porkbun.com › legal › agreement › domain_name_registration_agreement
porkbun.com | domain name registration agreement
In which case, We may then set the name-servers and the DNS settings for the domain name services in any manner We choose, We may set the DNS to point to an IP address or to IP address(es) which host parking page(s) or a commercial search engine that may display paid advertisements, and/or We may change the contact information in the WHOIS output for the expired domain name so that You are no longer the listed registrant of the expired domain name.
Porkbun
kb.porkbun.com › porkbun knowledge base › porkbun knowledge base › how to fix your porkbun hosting dns
How to fix your Porkbun hosting DNS - Porkbun Knowledge Base
If you’ve purchased a web hosting ... website drops off the Internet. Fortunately, we make it easy to fix! The easiest way to do this is by using our Fix DNS feature. ... First, make sure that you didn’t recently switch to another provider's nameservers, as this will break ...