cPanel Password Expiry Scam
For those not in the know cPanel is one of the main management tools used by those hosting websites. It permits a webmaster to host multiple domains and websites within a single hosting package, configure domain redirects, e-mail accounts and much much more. To hear that your cPanel might be inoperative if you don't immediately renew your password is a matter of concern. But pause, is this a genuine e-mail from cPanel?
If you give your cPanel login details to a "bad actor" anything could happen to your websites and e-mails accounts. Your websites might be displaying alternative material promoting scams and your e-mail accounts used for the distribution of scam e-mails.
Let's look more closely at the e-mail received.
Date: 05/03/2025, 17:57
From: cPanel Support help@campusvoice.org
To: [Name and E-Mail address redacted]
Subject: Action Required [e-mail address redacted]
Notes
"Red Flags" sender e-mail address: help@campusvoice.org. This e-mail address whose domain was only registered a few days before the e-mail was received appears to have nothing to do with the cPanel company and more to do with university campuses.
The "Keep my password" button appears to link to a website address at https://flowto.it/eEngYVC03X?fc=0#[text redacted]. This address appears to have no connection to cPanel.
Recommendation:
Just delete the e-mail.
Another email received related to cPanel, again a phishing scam
Date: No date
From: Roundcube Notice noreply@[own domain name redacted]
To: [Name and E-Mail address redacted]
Subject: [Email address redatced]: Server Scheduled Maintenance
Notes
Appears to be sent from your own domain name. Is the email a Roundcube Notice or Server Scheduled Maintenance but you are expected to click on a link to:
https://www.medium.com/m/global-identity-2?redirectUrl=https://ipfs.io/ipfs/bafkreiaubyxdlou6exmuxwmvwll3g3x4e6p6zyxy4gko4auriqlhpjwnqm#[email address redacted] a redirect to an unrealistic website.
Recommendation:
Just delete the e-mail.
Further Reading
cPanel - Official website
cPanel - Wikepedia
Phishing email employing cPanel branding claims your password has expired
cPanel is being impersonated by scammers – Be Aware of notices> Alert WARNING Expired Password
How to recognize fake "Webmail System Maintenance" emails
Michael Fowler
Other articles by Michael Fowler:
Ebay Fake Transaction Scam - Michael Fowler
You receive a notification that someone has purchased an expensive watch on ebay using your Paypal account. You know it is not you, what should you do?...
more >>
IMF Compensation Scam - Michael Fowler
If the International Monetary Fund contact you offering you compensation for being scammed then it is itself a scam. The IMF does not contact people in this way and their officials do not email using Gmail accounts...
more >>
Fake Beneficiary Scam - Michael Fowler
Pretend to be the next of kin of a deceased corrupt political figure and a fortune awaits you...
more >>
Terminally Ill Benefactor Scam - Michael Fowler
I am Agnes Schulze, a Munich, Germany resident, and a widow. At 51 years old, I have dedicated my life to humanitarian efforts. Regrettably, I am currently battling breast cancer, and my health is declining rapidly... more >>