Crimeware friendly has a certain connotation to it, that most registrars tend to want to avoid. In NameCheap' case however, it seems they quite like it - or at least, put money above all else, including their reputation.
I've been sending reports for years, and the majority of registrars and hosts, tend to deal with them quickly, or in some cases - eventually. Not NameCheap - all reports result in a reply along the lines of the following (the latest one to come in - I've removed the domain name and ticket ID so it doesn't tip the owner off);
Other variations I've gotten include;
Funny thing is - NameCheap Hosting is completely the opposite, and do suspend accounts.
Well NameCheap, as myself and others have pointed out to you, as an ICANN accredited registrar, you have an obligation under the UDRP Policy, to take action on reports - NOT to claim your customers actions aren't your responsibility.
By refusing to suspend domains reported to you, you are in direct violation of your contractual obligation to follow ICANN’s UDRP policy, which requires you (as well as all other accredited registrars) to suspend domains housing and/or leading to, malicious/illegal content.
You can view ICANN’s UDRP Policy here: