It's been going on for years. I've personally tried to report phishing scams to Namecheap and get the laziest action on it (for example, I report 30 domains, and only one gets taken down and the rest + the account stay active) or totally ignored altogether after one or two exchanges. This laziness in response despite their platform being abused this heavily suggests they don't want to give up the revenue they're getting from it. The CEO is incredibly defensive about it and suggests that the security theater is evidence that they actually want to do something, but it's been years and they're still heavily used. This is despite not being the cheapest out there, which suggests that scammers prefer it for other reasons.

https://www.reddit.com/r/NameCheap/comments/1duy4cn/constant...

https://news.ycombinator.com/item?id=30603615

https://shkspr.mobi/blog/2021/05/why-do-scammers-love-namech...

And last but not least: https://www.theregister.com/2021/05/10/ncsc_active_cyber_def...

I used to pay $5/yr for fastmail but that plan is now $15/yr, but I only get 0.5GB of storage.

So it's like $1.05/month!

Cloudflare sells domains at cost, if you can stomach them.

I've been happy with https://www.dynadot.com/ lately

I'm using now a Tucows reseller via eNom.com. So far, it's good although it does not accept my preferred credit card; I had to resort to my debit card for payment (same operator, same issuer bank; go figure). Gandi did not have that kind of issues but then, a 300% price hike certainly made me run from them.