Online Threat Alerts (OTA) - Alerting you to scams and frauds.

"cPanel Removal and Deactivation" Phishing Scams
cPanel Removal and Deactivation Phishing Scams

Webmasters who are recipients of the "cPanel Removal and Deactivation" email below, which claims that their web hosting will be deactivated and removed from their hosting provider's server, should delete the email and should not follow the instructions in it. This is because the phishing e-mail message is being sent by cybercriminals/scammers, to frighten and trick the webmasters into visiting phishing websites that will steal their website hosting accounts credentials, by claiming their hosting services will be interrupted. Once the cyber thieves have stolen their potential victims’ hosting account credentials (usernames and passwords), they will gain access to their accounts, hijack them and use them fraudulently.

The "cPanel Removal and Deactivation" Phishing Scam

From: cPanel on more-group.eu <accounts@cpanel.net>

Subject: De-activation

cPanel

De-activation Programmed

Final Notice for Domain :

Removal of from our server has been approved and initiated,

Due to ignorance of last verification warning.

Removal will occur exactly at our server programmed time and hour

We recommend that you chose any of the below for your Domain :

Continue Removal or Cancel Removal

7

Comment sectionComments / Answers (7)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 7

by an anonymous user from: Greater Manchester, Irlam, England, United Kingdom

Got a similar one today, same email address as above;

You’re receiving this email because we are updating the cPanel Services Agreement, which applies to one or more cPanel or services you use. We’re making these updates to clarify our terms and ensure that they remain transparent for you, as well as to cover new cPanel products, services and features.

Ignored and deleted.

Delete


by an anonymous user from: Canberra, Australian Capital Territory, Australia

__cpanel__service__auth__icontact__hierbdimkhy1ncej-rs2.noc254.com

De-activation Programmed

Final Notice for Domain : xxxxxxxxx.com.au
Removal of xxxxxxxxx.com.au from our server has been approved and initiated,
Due to ignorance of last verification warning.

Removal will occur exactly at our server programmed time and hour

We recommend that you find the attachment file that is attached to this email and Cancel Removal
for your Domain : xxxxxxxxx.com.au

Delete


by an anonymous user from: Colindale, England, United Kingdom

I got this today, first one told me it was changing policy. Then the second the final notice.
All I can say is they're lamers, who need to get a job?

Delete


by an anonymous user from: Long Beach, California, United States

I received the same message. Thanks to the members of this thread for looking out.

Delete


by info

Here is another scam:

"From: cPanel
Subject: Suspension : Removal of***.dev from our server
Date: 17. April 2019 at 19:25:37 CEST
To: info-***.dev************

Website De-activation : "***.dev".

De-activation Programmed

Final Notice for Domain : ***.dev
Removal of ***.dev from our server has been approved and initiated,
Due to ignorance of last verification warning.

Removal will occur exactly at our server programmed time and hour

We recommend that you find the attachment file that is attached to this email and Cancel Removal
for your Domain : ***.dev"

Delete



by info

Here is another scam sent to us:

"Removal of onlinethreatalerts.com from our server
Website De-activation : "onlinethreatalerts.com".


De-activation Programmed
Final Notice for Domain : onlinethreatalerts.com
Removal of onlinethreatalerts.com from our server has been approved and initiated,
Due to ignorance of last verification warning.

Removal will occur exactly at our server programmed time and hour

We recommend that you find the attachment file that is attached to this email and Cancel Removal
for your Domain : onlinethreatalerts.com"

Delete


by an anonymous user from: London, England, United Kingdom

I am getting loads of these

Delete


waiting