Online Threat Alerts (OTA) - Alerting you to scams and frauds.

cPanel Domain and Hosting Service Interruption Phishing Email Messages

cPanel Domain and Hosting Service Interruption Phishing Email Messages

Webmasters who are recipients of email messages like the one below, which claim that their website domain names and hosting accounts have exceeded their disk space usage and file uploading, should not click on the links in the same email messages. This is because the phishing e-mail messages are being sent by cybercriminals/scammers, to frighten and trick the webmasters into visiting phishing websites that will steal their website hosting accounts credentials, by claiming their hosting services will be interrupted. Once the cyber thieves have stolen their potential victims’ hosting account credentials (usernames and passwords), they will gain access to their accounts, hijack them and use them fraudulently.

A Sample of the cPanel Domain and Hosting Service Interruption Phishing Email Message

Subject: Your website domain name and hosting
Tue 15/11/2016 07:33
From: CPANEL/WHM HOSTING

Our records indicate that your website domain name and hosting have exceeded your Disk Space Usage and file Uploading.

To avoid service interruption click here to update your portal

The x3 cPanel theme will be phased out November 30th, click here to upgrade to the new paper lantern experience

Copyright© 2016 cPanel, Inc.

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below.
Post a commentPost comment or view the ones below.    +
Was this article helpful?

Comment sectionComments / Answers

To protect your privacy, please remove sensitive or identifiable information from your post. Your IP address will be used to display your estimated location in your post.

Comments 1

Nov 15, 2016 at 6:02 PM by
cPanel Domain and Hosting Service Interruption Phishing Email Messages
an anonymous user from: Toronto, Ontario, Canada

Yes I received at least three different versions of this and the source of one of them was in base 64.

Delete

waiting

CommentsPost Comment / Answer