Namecheap status: hosting issues and outage reports
No problems detected
If you are having issues, please submit a report below.
Namecheap provides services on domain name registration, and offer for sale domain names that are registered to third parties (also known as aftermarket domain names). It is also a web hosting company.
Problems in the last 24 hours
The graph below depicts the number of Namecheap reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.
At the moment, we haven't detected any problems at Namecheap. Are you experiencing issues or an outage? Leave a message in the comments section!
Most Reported Problems
The following are the most recent problems reported by Namecheap users through our website.
- Hosting (57%)
- Domains (43%)
Live Outage Map
The most recent Namecheap outage reports came from the following cities:
| City | Problem Type | Report Time |
|---|---|---|
|
|
Domains | 15 days ago |
|
|
Hosting | 15 days ago |
|
|
Domains | 27 days ago |
|
|
Domains | 1 month ago |
|
|
Hosting | 1 month ago |
|
|
Hosting | 1 month ago |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Namecheap Issues Reports
Latest outage, problems and issue reports in social media:
-
Dhairya (@dkare1009) reported๐ SaaS Stack โ โฃ ๐ Frontend โ โฃ ๐ React โ โฃ ๐ NextJS โ โฃ ๐ Vue โ โฃ ๐ TailwindCSS โ โ ๐ Shadcn UI โ โฃ ๐ Backend โ โฃ ๐ NodeJS โ โฃ ๐ Django โ โฃ ๐ Laravel โ โฃ ๐ FastAPI โ โ ๐ Express โ โฃ ๐ Database โ โฃ ๐ PostgreSQL โ โฃ ๐ MySQL โ โฃ ๐ MongoDB โ โฃ ๐ Redis โ โ ๐ Supabase โ โฃ ๐ Auth โ โฃ ๐ Clerk โ โฃ ๐ Auth0 โ โฃ ๐ Firebase Auth โ โฃ ๐ Supabase Auth โ โ ๐ NextAuth โ โฃ ๐ Payments โ โฃ ๐ Stripe โ โฃ ๐ Paddle โ โฃ ๐ Dodo Payments โ โฃ ๐ Lemon Squeezy โ โ ๐ Polar โ โฃ ๐ Emails โ โฃ ๐ Resend โ โฃ ๐ SendGrid โ โฃ ๐ Mailgun โ โฃ ๐ Postmark โ โ ๐ Amazon SES โ โฃ ๐ Storage โ โฃ ๐ AWS โ โฃ ๐ Cloudflare โ โฃ ๐ Google Cloud Storage โ โฃ ๐ Supabase Storage โ โ ๐ Uploadcare โ โฃ ๐ Deployment โ โฃ ๐ Vercel โ โฃ ๐ Netlify โ โฃ ๐ Railway โ โฃ ๐ Render โ โ ๐ AWS โ โฃ ๐ Domains and DNS โ โฃ ๐ Namecheap โ โฃ ๐ Hostinger โ โฃ ๐ Cloudflare DNS โ โฃ ๐ Google Domains โ โ ๐ SiteGround โ โฃ ๐ Analytics โ โฃ ๐ Google Analytics โ โฃ ๐ Plausible โ โฃ ๐ PostHog โ โฃ ๐ Mixpanel โ โ ๐ DataFast โ โฃ ๐ Monitoring โ โฃ ๐ Sentry โ โฃ ๐ LogRocket โ โฃ ๐ Datadog โ โฃ ๐ NewRelic โ โ ๐ UptimeRobot โ โฃ ๐ DevOps โ โฃ ๐ Docker โ โฃ ๐ Kubernetes โ โฃ ๐ GitHub Actions โ โฃ ๐ CI CD โ โ ๐ Terraform โ โฃ ๐ Search โ โฃ ๐ Algolia โ โฃ ๐ Meilisearch โ โฃ ๐ Elasticsearch โ โฃ ๐ Typesense โ โ ๐ OpenSearch โ โฃ ๐ AI Integration โ โฃ ๐ OpenAI API โ โฃ ๐ Anthropic API โ โฃ ๐ Replicate โ โฃ ๐ HuggingFace โ โ ๐ Gemini API โ โฃ ๐ Integrations โ โฃ ๐ Zapier โ โฃ ๐ Make โ โฃ ๐ n8n โ โฃ ๐ Pabbly โ โ ๐ Webhooks โ โฃ ๐ Security โ โฃ ๐ SSL โ โฃ ๐ Cloudflare โ โฃ ๐ WAF โ โฃ ๐ Rate Limiting โ โ ๐ Secrets Management โ โฃ ๐ Marketing โ โฃ ๐ Search Console โ โฃ ๐ Outrank โ โฃ ๐ Buffer โ โฃ ๐ Analytics โ โ ๐ Kit โ โ ๐ Customer Support โฃ ๐ Intercom โฃ ๐ Crisp โฃ ๐ Zendesk โฃ ๐ Tawk โ ๐ HelpScout
-
The Trunk Tales (@TheTrunkTales) reported@Namecheap So, you are not going to take action against the domain simply because it removed the subdomain? The root domain is the threat, and it continues to create subdomains with this content. This is not an isolated issue.
-
Sanjay Lazar (@sjlazars) reported@baxiabhishek @Namecheap Name cheap is just that ! Cheap !! Iโve had a similar experience a year ago, and I never went back to them. Buy domains elsewhere and pay a wee bit more for peace of mind
-
Shawn (@shawn_dot_so) reported@elgermerlo @GoDaddy @Cloudflare GoDaddy isnโt even a consideration for me.. itโs Cloudflare first place or namecheap for TLDs that Cloudflare doesnโt support yet
-
Kingsley Ibietela Felix (@Iamkingsleyf) reported@adahstwt Namecheap, first on the list should never be there
-
Ajetomobi Jamiu (@JamiuAjetomobi) reportedIt doesn't matter how great your content or product is if your audience never sees it. โThe fix requires updating your technical security keys inside your domain host (like @GoDaddy or @Namecheap) so providers know you are a trusted sender.
-
Qirisiti Returns (@QirisitiReturns) reported@Namecheap upon checking my hosting list there was nothing, talking to support they say that i have been refunded stellar, but there is no confirmation email of that. hmm, on the domain they said it was put on auction and i cant access it or recover it
-
Baber Rizvi (@BaberRizvi) reported@NamecheapCEO namecheap support on live chat keep asking for money just to reboot the server which is already down and they can't explain why it's down. We paid for reboot and server is still down now they are asking more money. This is insane. We are already paying for subscription and suffering business loss and they can't even tell us why our server is down for over 2 days now. Server down means all our websites are down and we can't run business. Need HELP
-
Imagine-This (@ImagineThisSM) reported@Namecheap hi, all my sites and applications are down, whats going on. please update us right away
-
Adam Holter (@AdamHoltererer) reported@gauravsapkotanp Definitely not Namecheap, because @theo said they were bad and scammy.
-
Resolver Vicky | Dev ๐ง (@resolvervicky) reportedCloudflare Registrar sells domains at cost and they make zero profit on domain registration. It's a loss leader to get you on their platform. That's why the renewal price never spikes. Namecheap's first-year discount is a customer acquisition trick; the real price is the renewal. Agree?
-
Wiz (@wizminar) reported@kalashvasaniya totally agreed, one crucial advice i can give is to keep domain and hosting service different. Will ideally prefer about it can look namecheap or porkbun for domain and netlify or hostinger for hoosting rest please do your own research
-
Matthias Reinholz (@MattReinholz) reportedInteresting side-fact: they say the issue was about DNSSEC. However, in contrast to .com, @Namecheap doesn't let me configure DNSSEC for .de domains (not because of the current issue but generally). @grok does DENIC use a different layer/method of DNSSEC that doesn't allow configuring it on the registry level?
-
Uday๐จโ๐ป (@uday_devops) reported@adahstwt I think namecheap is best but their renewal cost is not same that is the issue
-
Christine Harrington (@savvysaleslady) reportedMy domain was shut down by @GoDaddy on May 10th. No idea why & the domain was paid up for a year back in Feb. 2026. Iโve called twice a day trying to get this resolved with GoDaddy. Absolutely a waste of my time. I moved the domain today to @Namecheap but GoDaddy is now taking 5-7 days to initiate the transfer. Iโve reached out to @GoDaddyHelp numerous times with no response. Can you imagine providing such poor service?
-
John van Rijck (@John_ACW) reportedDoes @Namecheap pay their support team based on the amount of minutes they're in an active chat or what? Every support chat opens with: "Please allow me 10-12 minutes to check" Terrible support
-
WP Websites (@WebsitesWp) reported@TTrimoreau None. *Godaddy-pricy, had market place problems. *Hostinger+cloudflare-wouldnt use, not their niche *Namesilo-had major security incident, noone cared. *namecheap-not cheap, cluttered UI, intrusive upsells *spaceship-cheaper than internetbs, terrible UI
-
Mahdi Ezzeddine (@MahdiEzz_code) reportedMy domain has become too expensive I can't afford it (it wasn't that much when I bought it in 2023, it's getting expensive with each year) soo, I'm thinking of switching domains, and using cloudflare this time not namecheap but I'm gonna lose all my seo progress damn, idk what do you think guys?
-
Bhavya (@Bhavyaztwt) reported@Namecheap No problem man We gng ๐ฅ
-
David O. Ehibor (@grayontop_) reported@AlfinCodes Namecheap altho I had a bad experience with them and it took time to get resolved. Cloudfare is a better option.
-
Paul Sant ยท Telecodex (@YouPulseX) reported@rmastiyev @Namecheap 8080 works, 80 times out, fresh installs logged - "back to the same ticket" is not a network review.
-
Andrew Warner (@AndrewWarner) reportedGoodbye SquareSpace. Finally! I've hated having my wife's site on Squarespace. Some consultant set her up with it and I never had the patience to move it. On Sunday I told Claude Code to copy her site to a free @Cloudflare acount. Then I told Claude's Chrome plugin to figure out how to tell NameCheap where to point the domain. So satisfying.
-
The Trunk Tales (@TheTrunkTales) reported@RealTripleA I know exactly what happened. I cc'd the "host" and they took it down to prevent Namecheap from seeing it. Won't give them the heads up next time.
-
Pratik ๐ (@PratikSinhatwt) reportedClaude = coding. ($20/mo) Supabase = backend. (Free) Vercel = deploying. (Free) Namecheap = domain. ($12/yr) Stripe = payments. (2.9%/transaction) GitHub = version control. (Free) Resend = emails. (Free) Clerk = auth. (Free) Cloudflare = DNS. (Free) PostHog = analytics. (Free) Total monthly cost to run a startup: ~$20 There has never been a cheaper time to build.
-
CMJ_Pro (@CMJProus) reported@Namecheap is a moron service fu moron ****
-
Ken ๐ง (@thekenndubisi) reportedHow to setup an online business doing $1k a day revenue in 30 days: Step 1: Register a business and get a biz bank account. If youโre in Canada, use Ownr. If youโre incorporating in the US, use LegalZoom or Bizee. Step 2: Setup a business email address with Namecheap, connect it to Gmail and sort out tax registration (GST/HST in Canada, EIN for the US) 3: Choose your niche, build your one person offer and price it for an easy yes. A rough example: โI help local gym owners get 10-20 new member leads using meta ads in 30 days or less for $500 a monthโ 4. Setup your ad account and launch your one-person ad. Rough example: โAttention Toronto gym owners, are your ads getting clicks but no members? Most gym ads fail because of xyz. I help gym owners get x qualified signups using this. Click to watch this 3 minute video showing how it worksโ 5. Send the traffic to a landing page with the VSL that has these 3 components: a headline mirroring the ad, a short video speaking about the problem, and a link to book a call. 6. Get on a call and ask these 4 questions: whereโs your business right now? What have you tried so far? If we solved this like this, what would that look like for you? Hereโs how weโll solve this bottle neckโฆ.โ and then present your offer. Itโs not easy but it is simple; donโt over complicate it. Do this and get to $1k a day within 30 days. You want my help setting this up? Send a DM.
-
๐ก๏ธShir Khorshid Noor Cyber Unit๐ก๏ธ (@FriendOfTheInst) reportedSponsored search results are not a trust boundary. A fake ChatGPT download campaign used brand impersonation, malvertising, shared-link abuse, cloaking, platform-specific payloads, CAPTCHA gating, Electron packaging, JavaScript obfuscation, and staged execution to deliver malware to Windows and macOS users. This is not merely another fake download page. It is a clear demonstration of how attackers exploit trust across multiple layers: โข Trusted brand โข Trusted search flow โข Trusted-looking ad placement โข Trusted-looking domain patterns โข Trusted UI/branding โข Trusted installer frameworks โข Trusted code-signing assumptions โข Trusted AI platform sharing features What happened: Attackers promoted a fake OpenAI/ChatGPT download experience using the domain: openew[.]app The site copied OpenAI-style branding and offered download paths for: โข Windows โข macOS โข Chrome extension The Chrome extension path linked to a legitimate ChatGPT-related extension, further increasing perceived legitimacy. The Windows and macOS download paths delivered malware. Attackers also abused legitimate ChatGPT shared conversation links, including chatgpt[.]com/s/ pages, to host fake outage or download pages. A link hosted on a trusted domain can still deliver attacker-controlled content to users. The campaign employed cloaking and conditional rendering: automated scanners and analysis tools were shown benign content, reportedly an unrelated AR/VR company site, while real browsers received the malicious ChatGPT-themed download experience. That is the key lesson: A trusted domain, HTTPS padlock, sponsored ad, or polished UI does not equal a safe download. Why this campaign matters: Victims were not browsing dark web forums or downloading cracks. They were searching for a legitimate AI tool. That is why malvertising is effective: it targets high-intent users at the exact moment they are ready to install software. The campaign turned normal user behavior into an initial access path. Windows chain: The Windows payload was distributed as: Chat_GPT.exe Reported SHA-256: 56CC26E88C064B0C423AA8AD6530E58F91D1E4D28FAB1A8BCEDEF16A6582B4D2 Additional reported Windows hash: c9e0e6985dca3a179c9bdea4e7b38f7dc57fe00ecedc2fd634256fc53bf2de2d Important: hashes are useful for triage, not sufficient for defense. Campaigns rotate samples. Hunt behaviorally. Windows technical observations: โข Installer built with Inno Setup โข Electron-based application โข Chromium runtime components โข resources\app.asar archive โข Large obfuscated JavaScript payload identified as winter.js โข Hex-encoded strings โข Dynamically resolved functions โข Control-flow obfuscation โข Event-driven execution โข CAPTCHA gating before core behavior โข Inner Electron payload (App.exe) launched after installation โข PowerShell spawned after CAPTCHA completion Observed PowerShell pattern: -ExecutionPolicy Unrestricted -Command - That trailing dash matters. It suggests commands may be supplied through standard input rather than appearing directly in the process command line. This reduces the value of command-line-only detection and makes process-tree and behavioral monitoring much more important. Static red flags: The filename suggested ChatGPT, but embedded metadata reportedly identified the installer as: PovariEGLESVapp Setup The executable was signed by: F.F.A.P. Hurkmans Beheer B.V. That publisher does not align with OpenAI or ChatGPT. Important reminder: a valid code signature does not mean software is safe. It only confirms that the file was signed by a certificate and has not been modified since signing. It does not establish that the software is legitimate or authorized by the brand it imitates. Additional Windows indicators: โข App.exe SHA-256: D9AD44D43E57B870793FA5CF7FB3A813990D0CBD0C7087BDE70A5E61FB1F1FE6 โข Unexpected Chromium/Electron profile: %APPDATA%\Satoshi โข Additional reported path: %APPDATA%\LeronApplication โข Reported Electron/Node capabilities: systeminformation, child_process, os, fs, zip-lib, Those modules indicate a capable execution environment: system discovery, file access, archive handling, process execution, and network communication. macOS chain: The macOS payload was delivered as: ChatGpt.dmg Reported SHA-256: 7E5B708F6659B1FAD3AAE7B589A706434FBF21708AEEC5AF5910189B96E25FEF Additional reported macOS hash: c0919e1999eaee67e67aeda0287722775afb04e9a9a0f727928b4d11265fb70b The macOS malware is reported as Odyssey Stealer, a fork of AMOS / Atomic Stealer. Reported macOS targeting includes: โข Browser passwords โข Browser cookies โข Saved logins โข macOS keychain data โข Telegram sessions โข Cryptocurrency wallet directories โข Desktop/Documents files with sensitive wallet/key extensions โข Ledger Live โข Trezor Suite โข Exodus โข Electrum โข Sparrow The most dangerous macOS behavior: Wallet replacement. The malware reportedly attempts to replace legitimate wallet-related applications with trojanized versions. That means a victim may later open what appears to be their normal wallet app, but actually launch an attacker-controlled version. That is not only credential theft. That is long-tail financial compromise. Infrastructure: Reported malicious domain: openew[.]app Reported infrastructure includes: 144[.]172[.]104[.]205 188[.]137[.]246[.]189 192[.]253[.]248[.]181 172[.]94[.]9[.]250 Infrastructure notes: โข Recently registered domain โข Namecheap / registrar-servers infrastructure reported โข RouterHosting infrastructure reported โข Passive DNS linked infrastructure to other suspicious or malicious domains โข .app domains require HTTPS, so browsers show a padlock The padlock only means the connection is encrypted. It does not mean the site is legitimate. Detection opportunities for defenders: 1. Newly created executables launched from Downloads, Temp, or other user-writable paths 2. Trusted-brand filenames that do not match embedded metadata 3. Installer publisher mismatch: filename says ChatGPT, signer is unrelated 4. Electron apps spawning scripting engines: powershell.exe cmd.exe osascript bash sh zsh 5. PowerShell with: -ExecutionPolicy Unrestricted -Command - 6. Unexpected Chromium/Electron profile directories, such as: %APPDATA%\Satoshi %APPDATA%\LeronApplication or other anomalous Electron profile paths 7. app.asar archives containing large obfuscated JavaScript bundles 8. CAPTCHA or user-interaction gating before malicious behavior 9. Newly registered domains impersonating major software or AI vendors 10. Users installing software from ads instead of official vendor channels 11. Suspicious wallet-app replacement attempts on macOS 12. Post-install network traffic to low-cost VPS infrastructure 13. Legitimate AI sharing URLs that render fake support, outage, update, or installation pages 14. Download pages that show different content to scanners than to real browsers The key defensive point: Do not build detections only around hashes or static strings. This campaign reduces the value of static analysis through: โข Obfuscation โข Runtime string construction โข CAPTCHA gating โข Electron packaging โข Conditional execution โข Cloaking โข Staged payload behavior โข Shared-link abuse on trusted domains The better approach: โข Behavioral detection โข Process-tree monitoring โข Parent-child process analysis โข Script-engine execution monitoring โข Browser/download source telemetry โข Application control โข Newly registered domain monitoring โข Publisher and metadata validation โข EDR detections for Electron-to-shell execution โข Monitoring for AI-platform shared links used as delivery pages โข User training focused on sponsored-result and fake-download risk For users: Only download ChatGPT from official OpenAI channels or the Microsoft Store. Do not install software from ads, mirror sites, download portals, unfamiliar domains, or fake support/outage pages. If you installed a โChatGPTโ app from an ad or unfamiliar page: Use a clean device and: โข Sign out everywhere from important accounts โข Change passwords, starting with primary email โข Rotate API keys, SSH keys, cloud credentials, and tokens โข Revoke active sessions for email, GitHub, cloud, Discord, Telegram, crypto exchanges, banking, and password managers โข Move crypto funds from a clean device โข Do not open Ledger/Trezor apps on a potentially infected Mac โข Monitor financial accounts โข Reinstall the OS โข Notify IT/security immediately if it was a work device For AI vendors and platform owners: This is now part of the product security perimeter. Brand impersonation, malicious search ads, fake download pages, clone domains, and abuse of shared AI content are active distribution channels. Practical controls: โข Make official download links easy to find โข Monitor sponsored ads for brand abuse โข Monitor newly registered lookalike domains โข Detect abuse of shared-content features โข Run takedowns quickly โข Publish clear download guidance โข Provide signed-installer verification guidance โข Coordinate with search/ad platforms โข Alert users when major impersonation campaigns are active Bottom line: Attackers are not just exploiting ChatGPT. They are exploiting the trust, urgency, and confusion around fast-moving AI adoption. Today it is ChatGPT. Yesterday it was another AI tool. Tomorrow it will be the next trending product. The malware can rotate. The domain can rotate. The payload can rotate. The brand can rotate. The infrastructure can rotate. The defensive mindset must rotate too: From: โIs this file known bad?โ To: โIs this behavior legitimate for this software, this publisher, this user, this source, and this execution context?โ That is the difference between signature-based reaction and modern detection engineering. Analysis draws on reporting from Malwarebytes Labs, Evalian SOC, Push Security, BleepingComputer, CybersecurityNews, and OpenAI documentation. #CyberSecurity #Malvertising #ThreatIntelligence
-
Hackology (@Hackology) reported@Namecheap VPS CP is now responsive, even that was not loading rest even namecheap site appears to off ... VPS etc all down , even the IP associated with it
-
Formerly Exit 2 ๐ด โฎ๏ธ (@SchraderValves) reported@YourHornedGod I used to use Namecheap, never had a problem. Don't know if they are still good
-
Sarthak Shaurya (@alwaysSarthak) reported@nalinrajput23 I have tried namecheap and GoDaddy both but I never understood what is the difference between buying it from each