61–70 of 114 posts
[flagged]
Personally I've used them for years and they are by far the best of the many registrars I've used over the past 25+ years.
To be clear, the issue was with a 3rd party provider that we use to send our newsletter. None of our own systems or customer accounts where breached. I sent a follow up email to all users that were affected. The domains linked in the original phishing emails were also disabled. I apologize for this issue and to anyone it may have affected. We have also taken immediate steps to insure it will not happen again.
I wonder how many people got caught and ruined by this scam, what if you are behind it? you don't deserve to be in business.
Earlier quoted context omitted.
So… What happened? Did you get your keys stolen out of a CI or something? It just seems suspicious that you’d be the only business affected by this 3rd party provider.
If I have a business and I use a company like sendgrid, I have credentials to use that service. If some employee has access to that account (such as to send newsletters), and that employee’s credentials were lost or stolen, that doesn’t seems suspicious at all. I don’t have any inside info here, but it makes sense. And as a namecheap customer, I see no reason to panic at this time.
I was still very paranoid so I opened it in a non-Javascript, private browser but it seems that my DNS with anti-spam filters already picked it up as the destination was not being resolved.
[flagged]
Why do you say that? I've got a lot of names with them so would be keen to know if there are any issues. Personally I've used them for years and they are by far the best of the many registrars I've used over the past 25+ years.
some more details here: https://mailman.nanog.org/pipermail/nanog/2023-February/2216...
[flagged]
> Please stop using this company. Out of curiosity, what are these better alternatives? I think many viewed NameCheap as the better alternative to GoDaddy in the first place. Apparently some were successful with Porkbun for their domains, but I don't think they offer e-mail, hosting as well as a bunch of other stuff NameCheap has. There's also Google Domains I guess, but some are cautious about using too many of Goog…
Earlier quoted context omitted.
So… What happened? Did you get your keys stolen out of a CI or something? It just seems suspicious that you’d be the only business affected by this 3rd party provider.
If I have a business and I use a company like sendgrid, I have credentials to use that service. If some employee has access to that account (such as to send newsletters), and that employee’s credentials were lost or stolen, that doesn’t seems suspicious at all. I don’t have any inside info here, but it makes sense. And as a namecheap customer, I see no reason to panic at this time.
One can send newsletters using a subdomain like news.acmecorp.com and have Sendgrid's IPs in SPF record only for this subdomain and not for the main domains (though most recipient would not notice change from say @acmecorp.com to @news.acmecorp.com).