News for hackers. Stuff that matters.

throwawaykwt01

> Call them out on Twitter, they'll reply. Be aware much of their team is in the Ukraine, so expect some potentially belated replies.

That's unfortunate. That would explain why they haven't taken action yet. If that's indeed the case, then I expect more scammers to start abusing namecheap once they realize that namecheap's ability to purge abuse is degraded.

Already tried that without avail.

I posted the scam link publicly now that this post has been manually approved: https://news.ycombinator.com/item?id=30616831

Already tried that without avail.

Namecheap is listed in WHOIS as the registrar. The domain's reverse DNS record points to namecheap servers. I posted the scam link publicly now that this post has been manually approved: https://news.ycombinator.com/item?id=30616831

Thank you for the advice. I'm not a citizen of the US so I'm not sure if me contacting IC3 would be appropriate. I'll probably reach out to them in a couple of days if the phishing site remains up.

I posted the scam link publicly now that this post has been approved: https://news.ycombinator.com/item?id=30616831

Here is the url lightly obfuscated if anyone is interested in investigating further: https:// kuwaitpostparcel [DOT] express / KW343

You can trigger the website by using "responsive mode" in dev tools and selecting a common android device.

Please note that this site /is/ malicious. Investigate at your own risk.

Ask HN: Namecheap is refusing to halt a novel phishing scam. Please Help

There is a relatively clever phishing scam that's active right now where the site only shows the phishing scam when it's visited by a smart phone. Visiting it from a regular desktop browser redirects to some other service. (can still be seen using dev tools)A cursory investigation showed that Namecheap is providing both registrar and hosting services for this phishing site. I reported the...

( Read More... | 10 comments | 8 points | on HN )