Namecheap (Vendor): news timeline & CVEs

Internet Infrastructure Services Empower Deepfake Abuse, New Study Finds

Researchers found Cloudflare, Google, Namecheap, WordPress, and Proton supporting 88 non-consensual AI imagery sites.

Hany Farid of Dartmouth and Lancaster researchers Sophie Nightingale and Sarah Morgan published “The Backbone of Abuse” in Stanford’s Journal of Online Trust and Safety. In six weeks they identified 400 URLs and 88 sites actively hosting non-consensual AI intimate imagery, mostly of women celebrities and public figures. Cloudflare dominated hosting, CDN, and DNS; Google supplied SSL certificates and advertising; Namecheap registered domains; WordPress was the main CMS; Proton provided mail. Google said it blocks monetization and offers removal, while WordPress.org said it is software rather than a host, a claim Farid disputed regarding Automattic.

404 MediaSep 30, 16:02 UTC · 15h agoAI safety & security

670 Jev Domains Registered After Launch as Fake AI Marketplaces Target Users

About 670 lookalike Jev domains appeared days after launch, with fake shops marking up API access.

Eye Security found about 670 domains containing "jev" received TLS certificates within eight days of TypeSafe AI launching its Jev decision model on September 15. Operating storefronts, including jev-ai.pro, present API docs and checkout flows while proxying prompts to TypeSafe and charging roughly six to 11.5 times the official $0.042 per million input tokens. Researchers tied jev-ai.pro to at least six similarly built AI storefronts registered through Namecheap and placed behind Cloudflare. The scheme creates overpayment and prompt-data exposure risks, alongside typosquatting and possible API-key theft.

GBHackersupdated Sep 30, 19:00 UTC · 12h agofirst Sep 28, 10:21 UTC · 2d agoPhishing & fraud 5 sources

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware

Infoblox reports Sable Squirrel spent nearly $7 million on expired domains to redirect traffic to illegal sports streaming, gambling, and malware infrastructure.

Infoblox tracked 50,400 dropcatch domains re-registered daily in gTLDs during H1 2026, nearly 20% of all registrations, with .net and .xyz leading. The threat actor Sable Squirrel has acquired more than 10,000 expired domains supporting Asian sports piracy brands such as Xoilac, Cakhia, 90phut, Socolive, and MiTom while promoting betting services like VSBet, ColaScore, and 8xbet. The operation, assessed as Vietnam-based and overlapping the dismantled Xoi Lac TV streaming network, targets users in Vietnam, South Korea, Japan, Taiwan, Singapore, and Australia via a traffic distribution system, publishes Android apps through suspected compromised Google Play developer accounts, and deployed over 31,000 malware samples including Quasar RAT, AsyncRAT, DCRat, NanoCore, Remcos RAT, and njRAT.

The Hacker NewsSep 8, 06:20 UTC · 23d agoThreat actor in the wild1

Namecheap

Timeline3 articles

Appears with

Internet Infrastructure Services Empower Deepfake Abuse, New Study Finds

670 Jev Domains Registered After Launch as Fake AI Marketplaces Target Users

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware