I'm receiving legal threats from a law firm that wants me to remove information from my website that one of their clients are unhappy with. Specifically they threaten me with a court order forcing me to remove the contents should I not comply.
But... they don't know who I am because:
1) I got WhoIs Guard protection on the affected domain
2) The real registration details are incomplete and do not point towards my identity
3) The website is hosted on a dedicated server (no shared resources on that IP)
4) Nothing on the website points to me. Not even an email (I use a contact form)
5) I'm not a company or legal entity. Just a dude with a website.
Now, my real identity is linked to:
1) The NameCheap user account (that's where I purchased the domain) and credit card transaction for the purchase
2) The Amazon AWS hosting account and my credit card details
Now, I'm not a terrorist and have not broken any laws - just dealing with a disgruntled company that's unhappy with a product review they claim is "defamatory" (it's a pretty harsh review) - but I'm stubborn and don't want these jokers to dictate what I post on my website.
With a court order - should they obtain one - what's the risk of either NameCheap or AWS disclosing my identity through user account details or credit card payments?