Namecheap status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Namecheap reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Namecheap users through our website.

• Hosting (57%)
• Domains (43%)

Live Outage Map

The most recent Namecheap outage reports came from the following cities:

City	Problem Type	Report Time
Tuxtla	Domains	2 months ago
Centerville	Hosting	2 months ago
Noida	Domains	2 months ago
Purmerend	Domains	2 months ago
Istanbul	Hosting	2 months ago
Charleston	Hosting	2 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Namecheap Issues Reports

Latest outage, problems and issue reports in social media:

• 
  prabhat (@prbhtkumr) reported 5 minutes ago

  @vivekteega @Namecheap @snigdhasur hey i'm glad that it has worked for you, i doubt most people using such a well known service for standard domain holding would have much issues. but namecheap has made a life long hater out of me and i would do my best to divert any and all business to better alternatives.

• 
  The Smart Ape 🔥 (@the_smart_ape) reported 11 minutes ago

  millions of companies forget to renew their domain names every year. you can just buy the expired domain someone forgot about and get a premium on it. it’s called drop catching. where to find them discovery + filtering: → expireddomains[.]net → domcop → freshdrop → moonsy auctions + catching: → godaddy auctions → namecheap expired auctions → dynadot closeouts → namejet / snapnames → dropcatch (1,200+ registrars, best catch rate on contested names) the process: domain expires → grace period → “pending delete” → drops. once it’s pending delete (usually ~5 days before the drop) you can place a backorder. if more than one person wants it, it goes to auction. most of these never get listed for sale. catch the ones with real value (traffic, backlinks, brandable names).

• 
  prabhat (@prbhtkumr) reported 11 minutes ago

  i've said this before and i'll say it again. namecheap is not hated enough. **** you @Namecheap. die slow.

• 
  Saint (@stjpg_) reported 11 minutes ago

  @guillemcraft Also FastVPN (basically namecheap VPN service) offer 1 year VPN for ~$12.

• 
  NameBio (@NameBio) reported 14 minutes ago

  Sales With History 📈 Wowsy․com sold for $17,940 at Atom․com - up from $305 in June 2017 at DropCatch. 📈 GoAI․xyz sold for $4,000 at Afternic - up from $338 in October 2025 at Namecheap. 📉 Carpartment․com sold for $326 at GoDaddy - down from $3,500 in January 2013 at Sedo. 📉 ShopHip․com sold for $130 at GoDaddy - down from $3,452 in October 2015 at Sedo. 📉 1088․net sold for $293 at GoDaddy - down from $8,908 in July 2019 at GoDaddy. Yesterday's Word Cloud + TLD Breakdown 👇

• 
  Fernando (@unfernaonx) reported 14 minutes ago

  @larsbuilds What’s that service? Looks good. I use namecheap and sometimes it feels like 2014 cPanel

• 
  Atta 🐬 (@attacomsian) reported 14 minutes ago

  @arvidkahl @Namecheap DENIC runs .de transfers through a KK code and the registrar has to be a member or work via a partner. a lot of resellers only built the registration side and never the transfer one.

• 
  Pitch Market Strategies & Public Relations, LLC (@team_pitch) reported 15 minutes ago

  @digitalocean y’all left my company in a lurch, and now I’m looking to shift. Overpriced droplets in my opinion, horrible support, unless you’re paying $999 a month, in my opinion and a lack of uptime stability on smaller tiers in my opinion. @Namecheap VPS is lookin good.

• 
  CAPED CRUSADER🦇 (@stilleclectic) reported 16 minutes ago

  @matthansbello Sigh, everything was originally done on namecheap but I’ve now just moved the dns to cloudflare. Waiting to see if that fixes the issue

• 
  NameBio (@NameBio) reported 18 minutes ago

  Sales With History 📉 HostCheap․com sold for $1,683 at Namecheap - down from $2,355 in January 2013 at Sedo. 📉 LifeLived․com sold for $786 at GoDaddy - down from $2,188 in November 2012 at Afternic. 📉 MindRevive․com sold for $483 at GoDaddy - down from $2,288 in August 2024 at BuyDomains. 📉 FinalClearance․com sold for $645 at GoDaddy - down from $3,650 in July 2018 at NameJet. 📉 OkBet․io sold for $6,500 at Namecheap - down from $34,988 in May 2024 at Afternic. Yesterday's Word Cloud + TLD Breakdown 👇

• 
  Tejas (@stejas809) reported 23 minutes ago

  @Umesh__digital I use namecheap. Never used hostinger.

• 
  Mykhailo Sorochuk (@sir4K_zen) reported 23 minutes ago

  @omarvvvr i go with Namecheap – straightforward UI, decent renewal rates and reliable support

• 
  Benjamin Thiele (@ESLotherwise) reported 25 minutes ago

  Holy ****, Thanks to @Namecheap Grace Period, i saved my Domains running out. I didnt even get a notice in my Inbox, or atleast the Mailbox didnt inform me.

• 
  AI SaaS Launchpad (@AISaaSLaunchpad) reported 25 minutes ago

  @arvidkahl @Namecheap DENIC (.de registry) handles transfers differently than gTLDs—it requires real-time authcode validation via a direct registry connection, which Namecheap's backend integration doesn't support for inbound moves. The workaround is transferring to a registry with direct DENIC support (like Porkbun or Hetzner) and pointing DNS to Namecheap.

• 
  SpamAuditor (@SpamAuditor) reported 26 minutes ago

  Watch for emails pretending to be support at @Namecheap, thankfully NameCheap has good SPF records in place, fake storage is full emails. If you get one of these, tell your email administrator to tighten up their SPF checks.@DatalixDE IP address 45.11.229.]113 this time

• 
  openwa (@openwadev) reported 29 minutes ago

  @mddanishyusuf @Cloudflare @Namecheap split between cf and porkbun. dont put all your domains in one basket, especially the one you use to log in to the domain service.

• 
  Tomodachi Life Updates (@TomoLifeUpdates) reported 29 minutes ago

  @Namecheap We'd appreciate it if your abuse team could take a look at tomodachilife[.]gg and tomoez[.]com (X has flagged both domains in posts already). We've received multiple reports from users who believed these sites were associated with an official web version/port of Nintendo's Tomodachi Life. The sites appear to be hosting a CAPTCHA scam disguised as an in-game Tomodachi Life menu, using Nintendo's branding and trademark in a way that may mislead users. A separate domain hosting the same scam, tomodachilife[.]cc, has already been taken down following reports. Could someone from your team review these domains and their operators or direct us to the appropriate reporting channel?

• 
  Srishti (@srishticodes) reported 30 minutes ago

  Claude = coding. ($20/mo) GitHub = version control. (Free) Supabase = backend. (Free) Clerk = auth. (Free) Resend = emails. (Free) Vercel = deploying. (Free) Cloudflare = DNS. (Free) Upstash = Redis. (Free) Pinecone = vector DB. (Free) PostHog = analytics. (Free) Sentry = error tracking. (Free) Stripe = payments. (2.9%/transaction) Namecheap = domain. ($12/yr) Total monthly cost to run a startup: ~$20 There has never been a cheaper time to build

• 
  Dhairya (@dkare1009) reported 35 minutes ago

  📂 SaaS Stack ┃ ┣ 📂 Frontend ┃ ┣ 📂 React ┃ ┣ 📂 NextJS ┃ ┣ 📂 Vue ┃ ┣ 📂 TailwindCSS ┃ ┗ 📂 Shadcn UI ┃ ┣ 📂 Backend ┃ ┣ 📂 NodeJS ┃ ┣ 📂 Django ┃ ┣ 📂 Laravel ┃ ┣ 📂 FastAPI ┃ ┗ 📂 Express ┃ ┣ 📂 Database ┃ ┣ 📂 PostgreSQL ┃ ┣ 📂 MySQL ┃ ┣ 📂 MongoDB ┃ ┣ 📂 Redis ┃ ┗ 📂 Supabase ┃ ┣ 📂 Auth ┃ ┣ 📂 Clerk ┃ ┣ 📂 Auth0 ┃ ┣ 📂 Firebase Auth ┃ ┣ 📂 Supabase Auth ┃ ┗ 📂 NextAuth ┃ ┣ 📂 Payments ┃ ┣ 📂 Stripe ┃ ┣ 📂 Paddle ┃ ┣ 📂 Dodo Payments ┃ ┣ 📂 Lemon Squeezy ┃ ┗ 📂 Polar ┃ ┣ 📂 Emails ┃ ┣ 📂 Resend ┃ ┣ 📂 SendGrid ┃ ┣ 📂 Mailgun ┃ ┣ 📂 Postmark ┃ ┗ 📂 Amazon SES ┃ ┣ 📂 Storage ┃ ┣ 📂 AWS ┃ ┣ 📂 Cloudflare ┃ ┣ 📂 Google Cloud Storage ┃ ┣ 📂 Supabase Storage ┃ ┗ 📂 Uploadcare ┃ ┣ 📂 Deployment ┃ ┣ 📂 Vercel ┃ ┣ 📂 Netlify ┃ ┣ 📂 Railway ┃ ┣ 📂 Render ┃ ┗ 📂 AWS ┃ ┣ 📂 Domains and DNS ┃ ┣ 📂 Namecheap ┃ ┣ 📂 Hostinger ┃ ┣ 📂 Cloudflare DNS ┃ ┣ 📂 Google Domains ┃ ┗ 📂 SiteGround ┃ ┣ 📂 Analytics ┃ ┣ 📂 Google Analytics ┃ ┣ 📂 Plausible ┃ ┣ 📂 PostHog ┃ ┣ 📂 Mixpanel ┃ ┗ 📂 DataFast ┃ ┣ 📂 Monitoring ┃ ┣ 📂 Sentry ┃ ┣ 📂 LogRocket ┃ ┣ 📂 Datadog ┃ ┣ 📂 NewRelic ┃ ┗ 📂 UptimeRobot ┃ ┣ 📂 DevOps ┃ ┣ 📂 Docker ┃ ┣ 📂 Kubernetes ┃ ┣ 📂 GitHub Actions ┃ ┣ 📂 CI CD ┃ ┗ 📂 Terraform ┃ ┣ 📂 Search ┃ ┣ 📂 Algolia ┃ ┣ 📂 Meilisearch ┃ ┣ 📂 Elasticsearch ┃ ┣ 📂 Typesense ┃ ┗ 📂 OpenSearch ┃ ┣ 📂 AI Integration ┃ ┣ 📂 OpenAI API ┃ ┣ 📂 Anthropic API ┃ ┣ 📂 Replicate ┃ ┣ 📂 HuggingFace ┃ ┗ 📂 Gemini API ┃ ┣ 📂 Integrations ┃ ┣ 📂 Zapier ┃ ┣ 📂 Make ┃ ┣ 📂 n8n ┃ ┣ 📂 Pabbly ┃ ┗ 📂 Webhooks ┃ ┣ 📂 Security ┃ ┣ 📂 SSL ┃ ┣ 📂 Cloudflare ┃ ┣ 📂 WAF ┃ ┣ 📂 Rate Limiting ┃ ┗ 📂 Secrets Management ┃ ┣ 📂 Marketing ┃ ┣ 📂 Search Console ┃ ┣ 📂 Outrank ┃ ┣ 📂 Buffer ┃ ┣ 📂 Analytics ┃ ┗ 📂 Kit ┃ ┗ 📂 Customer Support ┣ 📂 Intercom ┣ 📂 Crisp ┣ 📂 Zendesk ┣ 📂 Tawk ┗ 📂 HelpScout

• 
  based64 (@based64_eth) reported 36 minutes ago

  @faa0311 Whatever you do stay away from @Namecheap. Once they had an issue with SMS OTP and users were locked out for months with no recourse.

• 
  🛡️Shir Khorshid Noor Cyber Unit🛡️ (@FriendOfTheInst) reported 37 minutes ago

  Sponsored search results are not a trust boundary. A fake ChatGPT download campaign used brand impersonation, malvertising, shared-link abuse, cloaking, platform-specific payloads, CAPTCHA gating, Electron packaging, JavaScript obfuscation, and staged execution to deliver malware to Windows and macOS users. This is not merely another fake download page. It is a clear demonstration of how attackers exploit trust across multiple layers: • Trusted brand • Trusted search flow • Trusted-looking ad placement • Trusted-looking domain patterns • Trusted UI/branding • Trusted installer frameworks • Trusted code-signing assumptions • Trusted AI platform sharing features What happened: Attackers promoted a fake OpenAI/ChatGPT download experience using the domain: openew[.]app The site copied OpenAI-style branding and offered download paths for: • Windows • macOS • Chrome extension The Chrome extension path linked to a legitimate ChatGPT-related extension, further increasing perceived legitimacy. The Windows and macOS download paths delivered malware. Attackers also abused legitimate ChatGPT shared conversation links, including chatgpt[.]com/s/ pages, to host fake outage or download pages. A link hosted on a trusted domain can still deliver attacker-controlled content to users. The campaign employed cloaking and conditional rendering: automated scanners and analysis tools were shown benign content, reportedly an unrelated AR/VR company site, while real browsers received the malicious ChatGPT-themed download experience. That is the key lesson: A trusted domain, HTTPS padlock, sponsored ad, or polished UI does not equal a safe download. Why this campaign matters: Victims were not browsing dark web forums or downloading cracks. They were searching for a legitimate AI tool. That is why malvertising is effective: it targets high-intent users at the exact moment they are ready to install software. The campaign turned normal user behavior into an initial access path. Windows chain: The Windows payload was distributed as: Chat_GPT.exe Reported SHA-256: 56CC26E88C064B0C423AA8AD6530E58F91D1E4D28FAB1A8BCEDEF16A6582B4D2 Additional reported Windows hash: c9e0e6985dca3a179c9bdea4e7b38f7dc57fe00ecedc2fd634256fc53bf2de2d Important: hashes are useful for triage, not sufficient for defense. Campaigns rotate samples. Hunt behaviorally. Windows technical observations: • Installer built with Inno Setup • Electron-based application • Chromium runtime components • resources\app.asar archive • Large obfuscated JavaScript payload identified as winter.js • Hex-encoded strings • Dynamically resolved functions • Control-flow obfuscation • Event-driven execution • CAPTCHA gating before core behavior • Inner Electron payload (App.exe) launched after installation • PowerShell spawned after CAPTCHA completion Observed PowerShell pattern: -ExecutionPolicy Unrestricted -Command - That trailing dash matters. It suggests commands may be supplied through standard input rather than appearing directly in the process command line. This reduces the value of command-line-only detection and makes process-tree and behavioral monitoring much more important. Static red flags: The filename suggested ChatGPT, but embedded metadata reportedly identified the installer as: PovariEGLESVapp Setup The executable was signed by: F.F.A.P. Hurkmans Beheer B.V. That publisher does not align with OpenAI or ChatGPT. Important reminder: a valid code signature does not mean software is safe. It only confirms that the file was signed by a certificate and has not been modified since signing. It does not establish that the software is legitimate or authorized by the brand it imitates. Additional Windows indicators: • App.exe SHA-256: D9AD44D43E57B870793FA5CF7FB3A813990D0CBD0C7087BDE70A5E61FB1F1FE6 • Unexpected Chromium/Electron profile: %APPDATA%\Satoshi • Additional reported path: %APPDATA%\LeronApplication • Reported Electron/Node capabilities: systeminformation, child_process, os, fs, zip-lib, Those modules indicate a capable execution environment: system discovery, file access, archive handling, process execution, and network communication. macOS chain: The macOS payload was delivered as: ChatGpt.dmg Reported SHA-256: 7E5B708F6659B1FAD3AAE7B589A706434FBF21708AEEC5AF5910189B96E25FEF Additional reported macOS hash: c0919e1999eaee67e67aeda0287722775afb04e9a9a0f727928b4d11265fb70b The macOS malware is reported as Odyssey Stealer, a fork of AMOS / Atomic Stealer. Reported macOS targeting includes: • Browser passwords • Browser cookies • Saved logins • macOS keychain data • Telegram sessions • Cryptocurrency wallet directories • Desktop/Documents files with sensitive wallet/key extensions • Ledger Live • Trezor Suite • Exodus • Electrum • Sparrow The most dangerous macOS behavior: Wallet replacement. The malware reportedly attempts to replace legitimate wallet-related applications with trojanized versions. That means a victim may later open what appears to be their normal wallet app, but actually launch an attacker-controlled version. That is not only credential theft. That is long-tail financial compromise. Infrastructure: Reported malicious domain: openew[.]app Reported infrastructure includes: 144[.]172[.]104[.]205 188[.]137[.]246[.]189 192[.]253[.]248[.]181 172[.]94[.]9[.]250 Infrastructure notes: • Recently registered domain • Namecheap / registrar-servers infrastructure reported • RouterHosting infrastructure reported • Passive DNS linked infrastructure to other suspicious or malicious domains • .app domains require HTTPS, so browsers show a padlock The padlock only means the connection is encrypted. It does not mean the site is legitimate. Detection opportunities for defenders: 1. Newly created executables launched from Downloads, Temp, or other user-writable paths 2. Trusted-brand filenames that do not match embedded metadata 3. Installer publisher mismatch: filename says ChatGPT, signer is unrelated 4. Electron apps spawning scripting engines: powershell.exe cmd.exe osascript bash sh zsh 5. PowerShell with: -ExecutionPolicy Unrestricted -Command - 6. Unexpected Chromium/Electron profile directories, such as: %APPDATA%\Satoshi %APPDATA%\LeronApplication or other anomalous Electron profile paths 7. app.asar archives containing large obfuscated JavaScript bundles 8. CAPTCHA or user-interaction gating before malicious behavior 9. Newly registered domains impersonating major software or AI vendors 10. Users installing software from ads instead of official vendor channels 11. Suspicious wallet-app replacement attempts on macOS 12. Post-install network traffic to low-cost VPS infrastructure 13. Legitimate AI sharing URLs that render fake support, outage, update, or installation pages 14. Download pages that show different content to scanners than to real browsers The key defensive point: Do not build detections only around hashes or static strings. This campaign reduces the value of static analysis through: • Obfuscation • Runtime string construction • CAPTCHA gating • Electron packaging • Conditional execution • Cloaking • Staged payload behavior • Shared-link abuse on trusted domains The better approach: • Behavioral detection • Process-tree monitoring • Parent-child process analysis • Script-engine execution monitoring • Browser/download source telemetry • Application control • Newly registered domain monitoring • Publisher and metadata validation • EDR detections for Electron-to-shell execution • Monitoring for AI-platform shared links used as delivery pages • User training focused on sponsored-result and fake-download risk For users: Only download ChatGPT from official OpenAI channels or the Microsoft Store. Do not install software from ads, mirror sites, download portals, unfamiliar domains, or fake support/outage pages. If you installed a “ChatGPT” app from an ad or unfamiliar page: Use a clean device and: • Sign out everywhere from important accounts • Change passwords, starting with primary email • Rotate API keys, SSH keys, cloud credentials, and tokens • Revoke active sessions for email, GitHub, cloud, Discord, Telegram, crypto exchanges, banking, and password managers • Move crypto funds from a clean device • Do not open Ledger/Trezor apps on a potentially infected Mac • Monitor financial accounts • Reinstall the OS • Notify IT/security immediately if it was a work device For AI vendors and platform owners: This is now part of the product security perimeter. Brand impersonation, malicious search ads, fake download pages, clone domains, and abuse of shared AI content are active distribution channels. Practical controls: • Make official download links easy to find • Monitor sponsored ads for brand abuse • Monitor newly registered lookalike domains • Detect abuse of shared-content features • Run takedowns quickly • Publish clear download guidance • Provide signed-installer verification guidance • Coordinate with search/ad platforms • Alert users when major impersonation campaigns are active Bottom line: Attackers are not just exploiting ChatGPT. They are exploiting the trust, urgency, and confusion around fast-moving AI adoption. Today it is ChatGPT. Yesterday it was another AI tool. Tomorrow it will be the next trending product. The malware can rotate. The domain can rotate. The payload can rotate. The brand can rotate. The infrastructure can rotate. The defensive mindset must rotate too: From: “Is this file known bad?” To: “Is this behavior legitimate for this software, this publisher, this user, this source, and this execution context?” That is the difference between signature-based reaction and modern detection engineering. Analysis draws on reporting from Malwarebytes Labs, Evalian SOC, Push Security, BleepingComputer, CybersecurityNews, and OpenAI documentation. #CyberSecurity #Malvertising #ThreatIntelligence

• 
  NameBio (@NameBio) reported 41 minutes ago

  Sales With History 📈 ReleaseKit․com sold for $4,988 at Afternic - up from $188 in January 2026 at Namecheap. 📈 MyOldCar․com sold for $4,550 at Afternic - up from $412 in January 2026 at GoDaddy. 📈 CapitalSeven․com sold for $1,999 at Afternic - up from $290 in March 2024 at GoDaddy. 📉 ExchangeSafe․com sold for $116 at Namecheap - down from $3,088 in October 2021 at BuyDomains. 📉 SolarInstallation․com sold for $4,133 at GoDaddy - down from $19,888 in April 2022 at Sedo. Yesterday's Word Cloud + TLD Breakdown 👇

• 
  Luca Capone | Vibe Coder (@LucaCaponeX) reported 42 minutes ago

  @buildwithmaya @Namecheap Namecheap funded a whole graveyard of my half-built ideas. Buying the domain takes 5 minutes. Shipping the actual thing is where I disappear for 3 months. The domain was never the hard part.

• 
  Edgex (@SahilExec) reported 44 minutes ago

  @YashHustle_22 I usually go with Namecheap, cheap prices and solid support.

• 
  SYL Vexora- Jaron K Bragg (@JaronBragg) reported 46 minutes ago

  @its_sidraa Why not skip namecheap and just use cloudflare for both domain and DNS? Cloudflare actually puts my website on the map. Namecheap I never seen it and was hard for others to surface. Other than that it makes sense.

• 
  alencristen (@alencristen) reported 49 minutes ago

  @p_naix @spaceship maybe different managment team or something but honestly i'd stay away from anything namecheap related. very bad company

• 
  Joseph Miclaus (@josephmiclaus) reported 51 minutes ago

  @arvidkahl @Namecheap Didn't know this. Maybe they can do it manually through support?

• 
  Jay (@Cyberlane) reported 53 minutes ago

  @diegohaz Already did that a while ago. I really disliked namecheap, their support was poor and the inability to simply change a username was crazy to me. Everything is on Cloudflare now and couldn’t be happier!

• 
  eepy 🐾 (@theepiest) reported 55 minutes ago

  @Porkbun @that2art @Lunascaped no shade at you guys i've even used y'all before<3 i had great service too! but in this specific case i know what im talking. spaceship/namecheap will provide their 'Withheld for Privacy ehf' (i had a domain it expired) and for that same extension you guys say no whois privacy

• 
  Bhavya (@Bhavyaztwt) reported 60 minutes ago

  @Namecheap No problem man We gng 💥