cPanel Domain Deactivation Scam
The scammers rely on a misconception of what cPanel is and what it does. cPanel is not a webhosting or email hosting service that can decide to deactivate domains or dormant accounts. cPanel is a software interface that facilitates activities within an established web/email hosting account. Any modifications of your cPanel configuration including any email accounts should take place by logging into your cPanel account using the credentials supplied when you set up your website/email hosting account and not by clicking on random links in an email you have received.
Let's look more closely at the e-mail received.
E-Mail received:
Date: 05/03/2025, 17:57
From: [Domain name redacted] Support
To: [Name and E-Mail address redacted]
Subject: Action Required: Notice of Domain Deactivation
Notes
"Red Flags" sender e-mail address: no-reply@cpanel.net is the genuine cpanel domain address that the scammers have spoofed
The "Verify i am not a robot" button appears to link to a website address at https://adclick.g.doubleclick.net/pcs/click?sqi=SPXoR7c4t35lLEpZ_YMvCKWCEAE&urlfix=1&adurl=https://ipfs.io/ipfs/bafkreiawhanyj3zcqow4hq
7zmqvkt3m3dkeeioweaphvrphmdc5uoudosi#[email address redacted]
This address appears to have no connection to cPanel.
Typo, I won't say what it is. Scammers monitor this website.
Recommendation:
Just delete the e-mail.
Further Reading
cPanel - Official website
cPanel - Wikepedia
Strange email sent about domain
How to identify fake "cPanel - Inactive Account Scheduled For Purge" emails
Michael Fowler
Other articles by Michael Fowler:
Hargreaves Lansdown Update Profile Scam - Michael Fowler
I would have hoped that if an individual was financially savvy to have a Harsgreave Landsdown and invest in stocks, shares and other financial instruments through the company that they would recognise this phishing attempt from scammers... more >>
Message Restriction Activity Phishing Scam - Michael Fowler
I was impressed by the choice of the green colour for the heading text, a change from the orange colour used in cPanel scams. A minimalist message with an ominous though perhaps not too ominous Message Restriction Activity. What is that but an opportunity to access your email account and use it for untoward purposes... more >>
Cloud Storage Payment Declined Phishing Scam - Michael Fowler
A "catch-all" phishing scam not mentioning any specific cloud storage platform but urging you to submit bank account payment details to their fake page. They claim to be emailing from a Cloud storage and yet the email address gives the name Cloud-Stockage such sloppiness would not be present if this was a genuine payment declined email for an online account.. more >>