Comment by KomoD | Hacker News Reader

Comment by KomoD | Hacker News Reader

Parent Full thread

Okay? Namecheap is a massive registrar, abuse is bound to happen, but they actually deal with the abuse and in an incredibly short amount of time, most reports I submit are taken care of in less than 30min.

If you actually look into the history of the domains linked to "Josef Bakhovsky" and registered with Namecheap you can see they've got put on serverHold

A lot of registrars don't deal with abuse at all and simply say "report it to the hosting company", example here (domain in question was a Redline Stealer C2):

> Please, be aware that we, as a domain-only provider and not providing any content, hosting or e-mail services, are not in a position to judge the content of a website. For that reason, our normal procedure is that we inform our reseller and the domain holder, but will not suspend the domain names without an official WIPO decision or court order.

And an example from the article, NameSilo didn't take the domains down even after talking to Krebs?

> dig +short 1ox.us

> 167.71.25.56

> 157.245.248.19

> hey actually deal with the abuse and in an incredibly short amount of time, most reports I submit are taken care of in less than 30min.

I don't know what your secret is. I'll admit they're a bit better than they used to be, but I regularly see stuff I report to them left online for weeks! Is there something that works better than their online reporting form?

Domains used for things like URL shorteners or free form/survey/website builders that get abused by phishers over and over and over again stay online too. Domains that eventually take down a single URL within a few weeks after it's reported, but do nothing to prevent the next one or the next one or the next one.

Namecheap seems perfectly happy to keep taking money from what are basically safe havens for scammers.

> but I regularly see stuff I report to them left online for weeks.

What kind of abuse are you reporting? The few reports I send about spam tend to take a bit longer than the rest (since I need to send along email headers, etc.) but I've never had reports take weeks.

> Is there something that works better than their online reporting form?

I've used both Twitter and the form, there's been a few times where I've had to nudge them, but with the hundreds of reports I've done I'd say they're definitely one of the best domain registrars at handling abuse, some registrars I don't even bother reporting to anymore because they refuse to do anything whatsoever (dynadot, openprovider, godaddy, nicenic, key-systems to name a few)

> Domains used for things like URL shorteners or free form/survey/website builders that get abused by phishers over and over and over again stay online too. Domains that eventually take down a single URL within a few weeks after it's reported, but do nothing to prevent the next one or the next one or the next one.

That's a case I rarely come across but yeah that does sound like they handle it poorly, in my opinion they should be suspending the entire domain if the service is repeatedly slow at taking action.

I mostly send them phishing sites and spam. I've never tried shaming them via twitter though!

What's up with all of the namecheap bots in this thread? There are like 10 accounts defending namecheap like their lives depended on it.

I'm a bot? Alright 20 karma, 6 month old account

Back-off-ski? Too funny.

joe! back-offski!

Reply on news.ycombinator.com