
Tell HN: Namecheap gave my account to an unverified third party
The update
I’ve been a NameCheap customer for 13 years. I’ve also helped out an old college club paying for a.
Why it matters
com they use (that is registered to me under my name, address, and phone number). During a recent leadership transition, the incoming club lead wanted to make changes to the DNS and didn’t know to contact me.
What sits behind it
They figured out the domain name was parked at NameCheap, so they initiated a password reset using the domain name
Where this fits in Signal Ledger
Related coverage from the Technology desk.
Our take
They figured out the domain name was parked at NameCheap, so they initiated a password reset using the domain name. He convinced them the domain registered in my name and address really belonged to his club, and with no verification or validation whatsoever.
Source note
Hacker News reporting: https://news.ycombinator.com/item?id=49028037