cPanel Password Expiry Scam
For those not in the know cPanel is one of the main management tools used by those hosting websites. It permits a webmaster to host multiple domains and websites within a single hosting package, configure domain redirects, e-mail accounts and much much more. To hear that your cPanel might be inoperative if you don't immediately renew your password is a matter of concern. But pause, is this a genuine e-mail from cPanel?
If you give your cPanel login details to a "bad actor" anything could happen to your websites and e-mails accounts. Your websites might be displaying alternative material promoting scams and your e-mail accounts used for the distribution of scam e-mails.
Let's look more closely at the e-mail received.
E-Mail received:
Date: 05/03/2025, 17:57
From: cPanel Support help@campusvoice.org
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** Action Required [e-mail address redacted]
Notes
"Red Flags" sender e-mail address: help@campusvoice.org. This e-mail address whose domain was only registered a few days before the e-mail was received appears to have nothing to do with the cPanel company and more to do with university campuses.
The "Keep my password" button appears to link to a website address at https://flowto.it/eEngYVC03X?fc=0#[text redacted]. This address appears to have no connection to cPanel.
Recommendation:
Just delete the e-mail.
Another email received related to cPanel, again a phishing scam
Date: No date
From: Roundcube Notice noreply@[own domain name redacted]
To: [Name and E-Mail address redacted]
Subject: ***SPAM*** [Email address redatced]: Server Scheduled Maintenance
Notes
Appears to be sent from your own domain name. Is the email a Roundcube Notice or Server Scheduled Maintenance but you are expected to click on a link to:
https://www.medium.com/m/global-identity-2?redirectUrl=https://ipfs.io/ipfs/bafkreiaubyxdlou6exmuxwmvwll3g3x4e6p6zyxy4gko4auriqlhpjwnqm#[email address redacted] a redirect to an unrealistic website.
Recommendation:
Just delete the e-mail.
Further Reading
cPanel - Official website
cPanel - Wikepedia
Phishing email employing cPanel branding claims your password has expired
cPanel is being impersonated by scammers – Be Aware of notices> Alert WARNING Expired Password
How to recognize fake "Webmail System Maintenance" emails
Michael Fowler
Other articles by Michael Fowler:
Ebay Fake Transaction Scam - Michael Fowler
You receive a notification that someone has purchased an expensive watch on ebay using your Paypal account. You know it is not you, what should you do?...
more >>
IMF Compensation Scam - Michael Fowler
If the International Monetary Fund contact you offering you compensation for being scammed then it is itself a scam. The IMF does not contact people in this way and their officials do not email using Gmail accounts...
more >>
Fake Beneficiary Scam - Michael Fowler
Pretend to be the next of kin of a deceased corrupt political figure and a fortune awaits you...
more >>
Terminally Ill Benefactor Scam - Michael Fowler
I am Agnes Schulze, a Munich, Germany resident, and a widow. At 51 years old, I have dedicated my life to humanitarian efforts. Regrettably, I am currently battling breast cancer, and my health is declining rapidly... more >>
* The more data the VOXI plan has the higher your reward. When you have made two consecutive payments to VOXI,
you'll receive your choice of reward (either an Amazon.co.uk Gift Card, Just Eat Gift Card or Cash via PayPal).
Vodafone t/a VOXI is responsible for paying the reward.
