CloudFlare has their plusses and minuses, but they do offer domain registration at cost, for example $10.46/year for .com (every year, not one of those deals for the first year then more expensive down the line).
Tell HN: Namecheap gave my account to an unverified third party
21–30 of 190 posts
Re: Tell HN: Namecheap gave my account to an unverified third party
#22Just a few weeks ago I moved from Namecheap to Porkbun. That's not an advertisement - I simply Googled popular registrars. But it is an indictment of Namecheap. They are going the way of GoDaddy. Please move away from them immediately. They are shifting to short-term strategies (high prices, immoral data practices, etc). Edit: Apparently they were bought by private equity just weeks before I noticed something was wro…
Is it time to change registrars already? I fled Gandi a while ago because of private equity fuckery. And now I need to go somewhere else. Who won't adopt enshitification-as-a-business-plan for a few years? No wonder people are leaving tech to go be goat farmers.
Gandi got EXPENSIVE which is unfortunate because they often had TLDs no one else had first. I'm still with them for a single domain. Once Cloudflare supports .se, I'm outta there!
Re: Tell HN: Namecheap gave my account to an unverified third party
#23Yep. I've been with Namecheap for a similar length of time. This week they sent me an email saying I had to update my namecheap profile information or they would close my account in 24 hours. They locked my account so I couldn't log in. To be clear, my whois information was fullly legally compliant, and I was happy to also update my namecheap profile, but when I sent them an email they didn't get back to with an resp…
That sounds more like a phishing attempt than anything a real company should send.
I think I have one domain left with them. I haven't received anything yet, but it's a good reminder to move on.
Re: Tell HN: Namecheap gave my account to an unverified third party
#24People are (rightfully) concerned about superintelligent AI but social engineering continues to be by far the biggest attack vector for digital infrastructure. And it’s being made worse by companies continuously cutting costs in areas like support.
The call center employee making third world minimum wage doesn’t give a shit who the real owner of the domain is. They want to end the call quickly and get 5 stars from the customer on the feedback form.
I have made it a point to move off services that force SMS-based 2fa for this exact reason. Recently even changed banks because of this.
Re: Tell HN: Namecheap gave my account to an unverified third party
#25Namecheap has been owned by a private equity firm for several months now. It would be nice to have a nonprofit registrar so jumping every few years isn't necessary.
Enshittification and PE sellouts are great for DNS providers because migrating it can be a real pain sometimes and carry a high risk if something goes wrong. It's why so many of them are chains of "Buy through Company N! We used to work for Company N-1 before they sold out!"
Re: Tell HN: Namecheap gave my account to an unverified third party
#26Well, they didn't call it NameCompetent, did they?
They're not even cheap these days, either. I'm still with them as a matter of laziness but I really need to migrate out.
Cloudflare offers domain registration/renewal with no markup if you're looking for an option. I moved to them after AWS increased fees.
Re: Tell HN: Namecheap gave my account to an unverified third party
#27Namecheap has been owned by a private equity firm for several months now. It would be nice to have a nonprofit registrar so jumping every few years isn't necessary.
...seriously?
Where do I jump ship to now?
Re: Tell HN: Namecheap gave my account to an unverified third party
#28CloudFlare has their plusses and minuses, but they do offer domain registration at cost, for example $10.46/year for .com (every year, not one of those deals for the first year then more expensive down the line).
The problem is that they then force you to use them as a DNS host as well.
Re: Tell HN: Namecheap gave my account to an unverified third party
#29Earlier quoted context omitted.
I did have domain privacy enabled. NC allows people to initiate a password reset via username, email address, or domain name. I was a happy customer right up until this incident. And I certainly agree that due diligence is a must for something as critical as a registrar.
Glad you posted your experience. I'll definitely be keeping my eye out for shenanigans on my own domains.
How will that help you prevent the transfer? The OP also "kept his eye out"
Re: Tell HN: Namecheap gave my account to an unverified third party
#30Humans are the weakest link, wouldn't be shocked if it's some underpaid off shore call centre or whatever. That's not a vulnerability though, that is social engineering, the attack vector was a human and the exploit was a form of identity theft.