Facebook could pay NameCheap a few bucks to attach an observer pattern to some registration watch filter and get real-time notification from some narrow scope of name patterns.
In the olden days one would make a 20 line Perl script w/a nasty regex that's forked off for every registration -- and bill on the value not time to code.
Is a more modern pattern to egregious? FB just send NC a filter table.
Other name sensitive watchers could be added too.
I can see both sides of this one. Namecheap is doing the right thing by protecting customer privacy, and Facebook reasonably wants to stop what is probably a well-organized and persistent phishing campaign aimed at their own customers.