Earlier quoted context omitted.
Considering your comment history -- good job NameCheap.
They are one angry person, from quantum mechanics to politics, not one comment that barely even tries to be friendly. Just bashing.
NameCheap's email hacked to send Metamask, DHL phishing emails
91–100 of 114 posts
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#92Got one today. Funny I was actually expecting a package. Of course the email is for suckers as it has more than enough clues about being scam but I guess some poor souls might actually fall for it.
I wonder whether that type of comment is in line with Hacker News Guidelines.
In any case, blaming or demeaning scam victims (what you call "suckers" and "poor souls") only adds to the psychological damage that those people experience. There are plenty of studies, recommendations and campaigns on this issue. For example, the UK's Financial Conduct Authority has a whole section in their website https://www.fca.org.uk/scamsmart and have been running TV ads to help protect pensioners.
The clues in the Metamask and DHL phising emails may have been obvious to you and many other Hacker News readers. I received them and quickly noticed they were phising messags. However, having the skills to spot (and stop) this type of messages doesn't mean we are always able to do it. A recent blog post by Kev Quirk, an infosec expert, is a case in point https://kevquirk.com/i-was-nearly-phished/
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#93Earlier quoted context omitted.
> Please stop using this company. Out of curiosity, what are these better alternatives? I think many viewed NameCheap as the better alternative to GoDaddy in the first place. Apparently some were successful with Porkbun for their domains, but I don't think they offer e-mail, hosting as well as a bunch of other stuff NameCheap has. There's also Google Domains I guess, but some are cautious about using too many of Goog…
I saw a lot of people recommending Gandi.net as a Namecheap alternative the last time there was a controversy, and I've recently switched my domains over to them myself. Gandi seems to be a solid provider that's maintained its good reputation for a long while.
Apart from that time when they lost users data AND backups. https://news.ycombinator.com/item?id=22001822
(Though I am still using gandi, can't fault them otherwise).
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#94To be clear, the issue was with a 3rd party provider that we use to send our newsletter. None of our own systems or customer accounts where breached. I sent a follow up email to all users that were affected. The domains linked in the original phishing emails were also disabled. I apologize for this issue and to anyone it may have affected. We have also taken immediate steps to insure it will not happen again.
This ridiculous registrar threatened to lock our domain and destroy our business within 24 hours for a defective DMCA notice that addressed one if our 40 million user profile subdomains. Our legal counsel advised to temporarily comply instead of arguing (although he did send them a nasty letter) to move over to a normal registrar from this cheap one, that i got when i was bootstrapping with no money because it was se…
Untitled Note Hello XXXXX,
We are contacting you from the Namecheap Legal and Abuse department regarding your “XXXXX” Namecheap account.
We are in receipt of a copyright infringement notice pursuant to 17 U.S.C. §512 of the Copyright Act, requesting that we disable allegedly infringing material that appears on a domain hosted in your account (“Domain”):
xLINKSx
As a hosting service provider, Namecheap complies with the Digital Millennium Copyright Act (“DMCA”). We would like to help you avoid any service interruption. Please review the DMCA notice that we have included in this communication.
If you do not have the authorization to host the alleged disputed content, and if you are not authorized to use the disputed content, you will need to remove the content within 72 hours, or we may be required to suspend your hosting account under DMCA guidelines.
In order for us to consider a case resolved, the reported link(s) is to show the '404 Not Found' error/suspended page or redirect to the main page of the website.
If you believe that the identification of this infringing content is in error, we suggest that you contact the reporting copyright owner to resolve the matter. If the reporting copyright owner agrees there is a mistake, ask them to email Namecheap at dmca@namecheap.com.
If you are not able to come to an agreement with the reporting copyright owner or if you disagree with the copyright claim, you may submit a DMCA Counter-Notice to Namecheap within ten (10) business days of the date of this email. The Counter-Notice must comply with the requirements of the DMCA and must contain the following points:
1. Your contact information, including name, address, and telephone number, as well as facsimile number and email, if available;
2. A statement that, under penalty of perjury, you have a good faith belief that the material was removed or disabled as a result of a mistake or misidentification of the material to be removed or disabled;
3. Identification of the material that has been removed or to which access has been disabled, and the location at which the material had appeared before it was removed or access was disabled;
4. A statement that you consent to the jurisdiction of the United States District Court in which the address you provide is located, or if your address is outside the United States, for the judicial district of California;
5. A statement that you will accept service of process from the person who provided the initial notice or an agent of that person;
6. A physical or electronic signature by you or your agent.
The DMCA Counter-Notice should be sent either via this ticket by replying to our notice or to Namecheap.com Attn: Legal Department, 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, USA, Facsimile:
Once a valid DMCA Counter-Notice has been submitted, Namecheap would provide a copy of the Counter-Notice to the reporting copyright owner. In addition, the DMCA requires that you remove the disputed content for at least ten (10) and not more than fourteen (14) days from when the Counter-Notice was served. Thus, Namecheap will advise the complaining party that the listing will be reinstated within ten (10) days and will remain so unless we hear from the reporting copyright owner that he or she has filed an action against you under the DMCA in a court of competent jurisdiction for copyright infringement and is seeking a court order to restrain you from publishing the disputed content.
By submitting your Counter-Notice to Namecheap, you agree to waive, and hereby do waive any legal or equitable rights or remedies you have or may have against Namecheap with respect to any Counter-Notice you send, or claims regarding any aspect of the disputed content and its publication and/or Namecheap's action in implementing a takedown or re-establishing the content, and you agree to indemnify and hold Namecheap, and its owners/operators, affiliates and/or licensors, harmless to the fullest extent allowed by law regarding all matters relating to your sending of a Counter-Notice.
If you feel you received this notification in error, please contact us at with more information as to why. We do apologize for any inconvenience this may cause you.
====================================
Edit
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#95NameCheap have been training their customers to be vulnerable to this for years. When your account gets suspended (in my case for using VPN to login) they send you an email telling you to go to a privately registered domain (not referenced on their site) and do a cam show with your credit card.. Support is so slow they have already shut down your account before you get a response. I lost a domain and only got a parti…
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#96Earlier quoted context omitted.
This ridiculous registrar threatened to lock our domain and destroy our business within 24 hours for a defective DMCA notice that addressed one if our 40 million user profile subdomains. Our legal counsel advised to temporarily comply instead of arguing (although he did send them a nasty letter) to move over to a normal registrar from this cheap one, that i got when i was bootstrapping with no money because it was se…
This is our standard notification, word for word: Untitled Note Hello XXXXX, We are contacting you from the Namecheap Legal and Abuse department regarding your “XXXXX” Namecheap account. We are in receipt of a copyright infringement notice pursuant to 17 U.S.C. §512 of the Copyright Act, requesting that we disable allegedly infringing material that appears on a domain hosted in your account (“Domain”): xLINKSx As a h…
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#97Earlier quoted context omitted.
Considering your comment history -- good job NameCheap.
They are one angry person, from quantum mechanics to politics, not one comment that barely even tries to be friendly. Just bashing.
But yeah, I do act bashing when discussing politics. Do you feel this is somehow undeserved? I don't really see anyone else acting friendly - it's all just one ignorant two minutes hate after another.
Besides, English is obviously not my native language.
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#98Earlier quoted context omitted.
They are one angry person, from quantum mechanics to politics, not one comment that barely even tries to be friendly. Just bashing.
That and the obvious narrative pushing of whataboutism and Russian apologism.
Not everything is a narrative and not every omitted fact or forgotten nuance visible from a perspective of a local is "apologism". Back again, kinda hard to act friendly when people are so systemically discriminating against anything that doesn't correlate with their impressions.
What is so wrong with my comment history that you are now accusing me of a thoughcrime? It's just that your comment history is also full of, let us call it "opinionated", arguments, but I'm not acting that you are a worse person than me. Why are you acting like you are a better person than me I wonder?
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#99Earlier quoted context omitted.
So… What happened? Did you get your keys stolen out of a CI or something? It just seems suspicious that you’d be the only business affected by this 3rd party provider.
I don't think this is unique to NameCheap, I've gotten both metamask and DHL emails from other lists I'm on, I assume from the same threat actor. I would assume that they're opportunistically using whatever mailing list they can gain access to.
Re: NameCheap's email hacked to send Metamask, DHL phishing emails
#100To be clear, the issue was with a 3rd party provider that we use to send our newsletter. None of our own systems or customer accounts where breached. I sent a follow up email to all users that were affected. The domains linked in the original phishing emails were also disabled. I apologize for this issue and to anyone it may have affected. We have also taken immediate steps to insure it will not happen again.
I had clicked on the DHL one link. It took me to a site which looked like DHL, and in the next step, chrome refused to load the website. Is there any impact on folks on clicked on the links? I never entered any info as such, so not sure, but looking for more information on whether I should be concerned.