Namecheap status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Namecheap reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Namecheap users through our website.

• Hosting (57%)
• Domains (43%)

Live Outage Map

The most recent Namecheap outage reports came from the following cities:

City	Problem Type	Report Time
Tuxtla	Domains	10 days ago
Centerville	Hosting	10 days ago
Noida	Domains	22 days ago
Purmerend	Domains	1 month ago
Istanbul	Hosting	1 month ago
Charleston	Hosting	1 month ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Namecheap Issues Reports

Latest outage, problems and issue reports in social media:

• 
  elena (@elephnaburky) reported 31 seconds ago

  @ChrisProd_ @Echotheglitch8 What Glitch is probably doing right now is probably consulting with the Registrar (NiceNIC, which they also don't use. Glitch uses Tucows, Namecheap, and GoDaddy) to get the domain taken down. Or, they might not be doing anything. Who knows.

• 
  مركز مهارات الإبداع للتدريب (@cstcksa) reported 51 seconds ago

  @Namecheap Warning to all website owners and businesses: Based on our experience, we strongly advise exercising caution before dealing with this hosting provider. We encountered significant difficulties related to account management, communication, and obtaining support regarding our hosting services. Our experience raised serious concerns about the company's practice of relying on third-party agents to manage hosting accounts, which may leave customers vulnerable to disputes, service interruptions, delays in account transfers, or unexpected financial demands. We encourage all customers to carefully review ownership rights, account access credentials, service agreements, and transfer procedures before purchasing hosting services through any intermediary or agent. We have documented our experience and reserve the right to pursue the matter through the appropriate regulatory and legal channels.

• 
  Saud Ilyas (@saud_ilyas) reported 53 seconds ago

  For the first time in 10 years, I moved the .io domain out of Namecheap to save $25 on renewal lol; never thought of moving any of the 2k+ domains I've managed with Namecheap for years. 3x the price is unjustifiable. Could potentially save up to $10k a year by moving every single one to Cloudflare on renewal. But that’s a very big headache doing one by one, so i’ll pass for now!

• 
  4L.com (@4Ldotcom) reported 1 minute ago

  Note: The domain was using Afternic nameservers and showed the Afternic landing page, so the lead did not come from the domain landing page. The sale was completed through Spaceship, which means the buyer likely came from the Spaceship or Namecheap network/marketplace.

• 
  ChiseledCactus | Analyst (@chiseledcactus) reported 5 minutes ago

  @deanelazab @YayJayBae Hello! If it helps, it looks like it's running via cloudflare servers, and registered via "Namecheap". It still lists "Mediadroid LTD UK", with a "Jonathan hassall, but was dissolved a while back, so this is all sorts of shady. I imagine twitch and YouTube wouldn't be too happy with them continuously scraping content and causing issues, yeah? But is that even an option to try and rally to them?

• 
  Ehsan (@acadictive) reported 10 minutes ago

  @BacLeodiv i always buy from namecheap. i like their ui and service. btw, lets also connect.

• 
  Imagine-This (@ImagineThisSM) reported 11 minutes ago

  @Namecheap hi, all my sites and applications are down, whats going on. please update us right away

• 
  Milan (@milanm_) reported 13 minutes ago

  @levelsio @Cloudflare I don't like Namecheap neither (their DNS setup sometimes causes my browser to freeze). But so far all domain providers I tried were generally ****, so I kind of made peace with the fact that they all suck. Why is @Cloudflare different?

• 
  Cemal Coban (@uzakyolkaptani) reported 15 minutes ago

  Why @Namecheap Live Support need always 5-10 minutes before speak with you ?

• 
  Sahil Jaiswal (@Sahil_Jaiswal02) reported 17 minutes ago

  Godaddy is a **** I should have gone with hostinger or namecheap My site is down after 2 days of getting it …even after successfull verification 😤 No support, no person available @GoDaddy

• 
  LAMBO (@lambo_com) reported 25 minutes ago

  @AGreatDomain That's addressed to you @Namecheap Though Suzie is as good as the template churning morons who man your support system

• 
  Ultron AI (@TheUltronAi) reported 25 minutes ago

  - Claude for coding. ($20/mo) - Supabase for backend. (Free tier) - Vercel for deploying. (Free tier) - Namecheap for domain. ($12/yr) - Stripe for payments. (2.9% per transaction) - GitHub for version control. (Free) - Resend for emails. (Free tier) - Clerk for auth. (Free tier) - Cloudflare for DNS. (Free) - PostHog for analytics. (Free tier) - Sentry for error tracking. (Free tier) - Upstash for Redis. (Free tier) - Pinecone for vector DB. (Free tier) Total monthly cost to run a startup: ~$20 There has never been a cheaper time to build. It's not that deep bro.

• 
  K S (@kj_kjato) reported 25 minutes ago

  @Namecheap Furthermore, I will explode that you’ve never invested anything and immediately replied that claims are unfounded when clearly they are not. You don’t want me to expose you and your bullshit customer service.😡😡

• 
  🛡️Shir Khorshid Noor Cyber Unit🛡️ (@FriendOfTheInst) reported 27 minutes ago

  Sponsored search results are not a trust boundary. A fake ChatGPT download campaign used brand impersonation, malvertising, shared-link abuse, cloaking, platform-specific payloads, CAPTCHA gating, Electron packaging, JavaScript obfuscation, and staged execution to deliver malware to Windows and macOS users. This is not merely another fake download page. It is a clear demonstration of how attackers exploit trust across multiple layers: • Trusted brand • Trusted search flow • Trusted-looking ad placement • Trusted-looking domain patterns • Trusted UI/branding • Trusted installer frameworks • Trusted code-signing assumptions • Trusted AI platform sharing features What happened: Attackers promoted a fake OpenAI/ChatGPT download experience using the domain: openew[.]app The site copied OpenAI-style branding and offered download paths for: • Windows • macOS • Chrome extension The Chrome extension path linked to a legitimate ChatGPT-related extension, further increasing perceived legitimacy. The Windows and macOS download paths delivered malware. Attackers also abused legitimate ChatGPT shared conversation links, including chatgpt[.]com/s/ pages, to host fake outage or download pages. A link hosted on a trusted domain can still deliver attacker-controlled content to users. The campaign employed cloaking and conditional rendering: automated scanners and analysis tools were shown benign content, reportedly an unrelated AR/VR company site, while real browsers received the malicious ChatGPT-themed download experience. That is the key lesson: A trusted domain, HTTPS padlock, sponsored ad, or polished UI does not equal a safe download. Why this campaign matters: Victims were not browsing dark web forums or downloading cracks. They were searching for a legitimate AI tool. That is why malvertising is effective: it targets high-intent users at the exact moment they are ready to install software. The campaign turned normal user behavior into an initial access path. Windows chain: The Windows payload was distributed as: Chat_GPT.exe Reported SHA-256: 56CC26E88C064B0C423AA8AD6530E58F91D1E4D28FAB1A8BCEDEF16A6582B4D2 Additional reported Windows hash: c9e0e6985dca3a179c9bdea4e7b38f7dc57fe00ecedc2fd634256fc53bf2de2d Important: hashes are useful for triage, not sufficient for defense. Campaigns rotate samples. Hunt behaviorally. Windows technical observations: • Installer built with Inno Setup • Electron-based application • Chromium runtime components • resources\app.asar archive • Large obfuscated JavaScript payload identified as winter.js • Hex-encoded strings • Dynamically resolved functions • Control-flow obfuscation • Event-driven execution • CAPTCHA gating before core behavior • Inner Electron payload (App.exe) launched after installation • PowerShell spawned after CAPTCHA completion Observed PowerShell pattern: -ExecutionPolicy Unrestricted -Command - That trailing dash matters. It suggests commands may be supplied through standard input rather than appearing directly in the process command line. This reduces the value of command-line-only detection and makes process-tree and behavioral monitoring much more important. Static red flags: The filename suggested ChatGPT, but embedded metadata reportedly identified the installer as: PovariEGLESVapp Setup The executable was signed by: F.F.A.P. Hurkmans Beheer B.V. That publisher does not align with OpenAI or ChatGPT. Important reminder: a valid code signature does not mean software is safe. It only confirms that the file was signed by a certificate and has not been modified since signing. It does not establish that the software is legitimate or authorized by the brand it imitates. Additional Windows indicators: • App.exe SHA-256: D9AD44D43E57B870793FA5CF7FB3A813990D0CBD0C7087BDE70A5E61FB1F1FE6 • Unexpected Chromium/Electron profile: %APPDATA%\Satoshi • Additional reported path: %APPDATA%\LeronApplication • Reported Electron/Node capabilities: systeminformation, child_process, os, fs, zip-lib, Those modules indicate a capable execution environment: system discovery, file access, archive handling, process execution, and network communication. macOS chain: The macOS payload was delivered as: ChatGpt.dmg Reported SHA-256: 7E5B708F6659B1FAD3AAE7B589A706434FBF21708AEEC5AF5910189B96E25FEF Additional reported macOS hash: c0919e1999eaee67e67aeda0287722775afb04e9a9a0f727928b4d11265fb70b The macOS malware is reported as Odyssey Stealer, a fork of AMOS / Atomic Stealer. Reported macOS targeting includes: • Browser passwords • Browser cookies • Saved logins • macOS keychain data • Telegram sessions • Cryptocurrency wallet directories • Desktop/Documents files with sensitive wallet/key extensions • Ledger Live • Trezor Suite • Exodus • Electrum • Sparrow The most dangerous macOS behavior: Wallet replacement. The malware reportedly attempts to replace legitimate wallet-related applications with trojanized versions. That means a victim may later open what appears to be their normal wallet app, but actually launch an attacker-controlled version. That is not only credential theft. That is long-tail financial compromise. Infrastructure: Reported malicious domain: openew[.]app Reported infrastructure includes: 144[.]172[.]104[.]205 188[.]137[.]246[.]189 192[.]253[.]248[.]181 172[.]94[.]9[.]250 Infrastructure notes: • Recently registered domain • Namecheap / registrar-servers infrastructure reported • RouterHosting infrastructure reported • Passive DNS linked infrastructure to other suspicious or malicious domains • .app domains require HTTPS, so browsers show a padlock The padlock only means the connection is encrypted. It does not mean the site is legitimate. Detection opportunities for defenders: 1. Newly created executables launched from Downloads, Temp, or other user-writable paths 2. Trusted-brand filenames that do not match embedded metadata 3. Installer publisher mismatch: filename says ChatGPT, signer is unrelated 4. Electron apps spawning scripting engines: powershell.exe cmd.exe osascript bash sh zsh 5. PowerShell with: -ExecutionPolicy Unrestricted -Command - 6. Unexpected Chromium/Electron profile directories, such as: %APPDATA%\Satoshi %APPDATA%\LeronApplication or other anomalous Electron profile paths 7. app.asar archives containing large obfuscated JavaScript bundles 8. CAPTCHA or user-interaction gating before malicious behavior 9. Newly registered domains impersonating major software or AI vendors 10. Users installing software from ads instead of official vendor channels 11. Suspicious wallet-app replacement attempts on macOS 12. Post-install network traffic to low-cost VPS infrastructure 13. Legitimate AI sharing URLs that render fake support, outage, update, or installation pages 14. Download pages that show different content to scanners than to real browsers The key defensive point: Do not build detections only around hashes or static strings. This campaign reduces the value of static analysis through: • Obfuscation • Runtime string construction • CAPTCHA gating • Electron packaging • Conditional execution • Cloaking • Staged payload behavior • Shared-link abuse on trusted domains The better approach: • Behavioral detection • Process-tree monitoring • Parent-child process analysis • Script-engine execution monitoring • Browser/download source telemetry • Application control • Newly registered domain monitoring • Publisher and metadata validation • EDR detections for Electron-to-shell execution • Monitoring for AI-platform shared links used as delivery pages • User training focused on sponsored-result and fake-download risk For users: Only download ChatGPT from official OpenAI channels or the Microsoft Store. Do not install software from ads, mirror sites, download portals, unfamiliar domains, or fake support/outage pages. If you installed a “ChatGPT” app from an ad or unfamiliar page: Use a clean device and: • Sign out everywhere from important accounts • Change passwords, starting with primary email • Rotate API keys, SSH keys, cloud credentials, and tokens • Revoke active sessions for email, GitHub, cloud, Discord, Telegram, crypto exchanges, banking, and password managers • Move crypto funds from a clean device • Do not open Ledger/Trezor apps on a potentially infected Mac • Monitor financial accounts • Reinstall the OS • Notify IT/security immediately if it was a work device For AI vendors and platform owners: This is now part of the product security perimeter. Brand impersonation, malicious search ads, fake download pages, clone domains, and abuse of shared AI content are active distribution channels. Practical controls: • Make official download links easy to find • Monitor sponsored ads for brand abuse • Monitor newly registered lookalike domains • Detect abuse of shared-content features • Run takedowns quickly • Publish clear download guidance • Provide signed-installer verification guidance • Coordinate with search/ad platforms • Alert users when major impersonation campaigns are active Bottom line: Attackers are not just exploiting ChatGPT. They are exploiting the trust, urgency, and confusion around fast-moving AI adoption. Today it is ChatGPT. Yesterday it was another AI tool. Tomorrow it will be the next trending product. The malware can rotate. The domain can rotate. The payload can rotate. The brand can rotate. The infrastructure can rotate. The defensive mindset must rotate too: From: “Is this file known bad?” To: “Is this behavior legitimate for this software, this publisher, this user, this source, and this execution context?” That is the difference between signature-based reaction and modern detection engineering. Analysis draws on reporting from Malwarebytes Labs, Evalian SOC, Push Security, BleepingComputer, CybersecurityNews, and OpenAI documentation. #CyberSecurity #Malvertising #ThreatIntelligence

• 
  Dante (@thedntx) reported 30 minutes ago

  @TTrimoreau Porkbun if u want clean interface. Namecheap for bundles. Never godaddy, thats 2010 behavior.

• 
  RGK🌹 (@rgk_degen) reported 30 minutes ago

  1 prompt. Claude builds a $2,000/week website from scratch. Here’s the exact system, step by step. Most people build sites the wrong way. They hire a developer for $3,000–8,000. Wait 3–6 weeks. Get something generic. Then pay another $500/month to maintain it. The new way: 1 prompt. 45 minutes. Launch-ready. WHAT YOU’RE BUILDING A niche service landing page conversion-optimized, Stripe-integrated, SEO-structured that targets a local or vertical market with $200–500 average order value. Target: $2,000/week minimum by week 4. THE PROMPT ARCHITECTURE Your 1 prompt has 4 layers: → Layer 1 Business context “I’m building a [niche] service site targeting [city/audience]. Average order: $[X]. Primary CTA: book a call / buy now.” → Layer 2 Stack spec “Build in HTML/CSS/JS, Stripe Checkout embedded, Calendly widget for booking, Google Analytics 4 ready.” → Layer 3 Content skeleton “Homepage: hero with pain point + 3 benefits + social proof section + FAQ + CTA. No blog. No filler.” → Layer 4 Conversion rules “Above the fold: 1 headline, 1 subheadline, 1 button. No nav clutter. Mobile-first. Load under 2 seconds.” Paste all 4 layers into Claude as 1 message. Hit send. WHAT CLAUDE DELIVERS IN 45 MINUTES → Full HTML file, production-ready → Stripe Checkout flow embedded → Mobile layout done → Meta tags + OG data for social sharing → Contact form wired to Formspree (free tier) You copy the output. Drop into Netlify or Vercel. Live in 8 minutes. Domain: $12/year on Namecheap. Hosting: $0. Total launch cost: $12. REALISTIC REVENUE PROGRESSION Week 1 Site live. Run $50 in Meta ads to local audience. 3 conversions at $150 = $450. Week 2 Add Google Business Profile. 2 organic calls. 1 closes. $200. Week 3 Raise price 20%. Run retargeting on the 60 visitors who didn’t convert. $600. Week 4 Email the 3 week-1 buyers. Ask for referrals. 2 referrals at $250 = $500 + repeat. Total week: $2,100+. The site didn’t change. The traffic system compounded.

• 
  Mike (@ibuildcoolshit) reported 31 minutes ago

  @kapilansh_twt Namecheap customer for 20+ years just left them for cloudflare

• 
  Tommy Thomas (@0xTommyThomas) reported 32 minutes ago

  @adahstwt I’ve been using Namecheap for a while now, generally good integrations with other apps which make it easy to use. Pork bun is pretty decent too Will never understand why godaddy is called godaddy lol Squarespace in my experience is the most annoying to deal with for domain management tbh

• 
  K S (@kj_kjato) reported 32 minutes ago

  @Namecheap Never once have you reached out to me properly to verify my claims you know how to find my contact information. I’ve already told you where it is not affiliated with that garbage. Please reach out and rectify the problem. I don’t want to call the police department again😡😡😡

• 
  Aaron (@aarons_takes) reported 38 minutes ago

  @MustaAras I think it comes down to normie's perceptions of Namecheap/Spaceship registrars vs GoDaddy. Very much IMHO.

• 
  David Maigari (@maigari_david) reported 41 minutes ago

  @Aditya_181105 Namecheap is a good one. Great customer support, too.

• 
  David O. Ehibor (@grayontop_) reported 46 minutes ago

  @AlfinCodes Namecheap altho I had a bad experience with them and it took time to get resolved. Cloudfare is a better option.

• 
  Shawn (@shawn_dot_so) reported 47 minutes ago

  @elgermerlo @GoDaddy @Cloudflare GoDaddy isn’t even a consideration for me.. it’s Cloudflare first place or namecheap for TLDs that Cloudflare doesn’t support yet

• 
  Gr1zZ (@Gr1zZtv) reported 50 minutes ago

  @Onepeg No one should reach out to them, they request your id to verify your the owner to take down content, you should go to their registarar which I beleive is namecheap and file a DMCA with them

• 
  Mahdi Ezzeddine (@MahdiEzz_code) reported 52 minutes ago

  My domain has become too expensive I can't afford it (it wasn't that much when I bought it in 2023, it's getting expensive with each year) soo, I'm thinking of switching domains, and using cloudflare this time not namecheap but I'm gonna lose all my seo progress damn, idk what do you think guys?

• 
  Shant (@ShantDotMe) reported 54 minutes ago

  @Namecheap that security ticket is with bluehost, not you (thankfully). But 3.5hrs on chat to ID an IP is way too much. and that came after they reviewed the info I provided?? 🤯 I could easily rate this as the worse experience I had with your service!

• 
  Mr. Niba (@Nousername_ah) reported 55 minutes ago

  I’ve usually had very good experiences with @Namecheap and their customer service but today I have been on with a live agent for more than 30 mins and they can’t resolve my issue after wasting my time they are now transferring me to a different department. SMH

• 
  timagixe (@timagixe) reported 59 minutes ago

  i remember the first time I bought domain on NameCheap the first thing I did in 10 minutes - transferred domain to CloudFlare luckily to me it was .com - so no issues with that

• 
  Sanjay Lazar (@sjlazars) reported 60 minutes ago

  @baxiabhishek @Namecheap Name cheap is just that ! Cheap !! I’ve had a similar experience a year ago, and I never went back to them. Buy domains elsewhere and pay a wee bit more for peace of mind

• 
  Hackology (@Hackology) reported 60 minutes ago

  @Namecheap Glad it's sorted ....imagine I spent 15 odd minutes figuring out what's wrong with my sites, never occurred to me it could be the host aswell - 😶