"cPanel Removal and Deactivation" Phishing Scams

Webmasters who are recipients of the "cPanel Removal and Deactivation" email below, which claims that their web hosting will be deactivated and removed from their hosting provider's server, should delete the email and should not follow the instructions in it. This is because the phishing e-mail message is being sent by cybercriminals/scammers, to frighten and trick the webmasters into visiting phishing websites that will steal their website hosting accounts credentials, by claiming their hosting services will be interrupted. Once the cyber thieves have stolen their potential victims’ hosting account credentials (usernames and passwords), they will gain access to their accounts, hijack them and use them fraudulently.

cPanel Removal and Deactivation Phishing Scams

The "cPanel Removal and Deactivation" Phishing Scam

From: cPanel on more-group.eu <accounts@cpanel.net>

Subject: De-activation

cPanel

De-activation Programmed

Final Notice for Domain :

Removal of from our server has been approved and initiated,

Due to ignorance of last verification warning.

Removal will occur exactly at our server programmed time and hour

We recommend that you chose any of the below for your Domain :

Continue Removal or Cancel Removal

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search Search engine.

Note: Some of the information in samples on this website may have been impersonated or spoofed.
Was this article helpful?  +
Share this with others:

Comments, Questions, Answers, or Reviews

Comments (Total: 7)

To protect your privacy, please do not post or remove sensitive information in or from your comments, questions, or reviews. NB: We will use your IP address to display your approximate location to other users when you make a post. That location is not enough to find you.

Your comment, answer, or review will be set as anonymous because you are not signed in. An anonymous comment, answer, or review cannot be edited or deleted, therefore, review it carefully before posting. Sign-in.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

  • March 1, 2021 at 12:45 PM by an anonymous user from: Greater Manchester, Irlam, England, United Kingdom

    Got a similar one today, same email address as above;

    You’re receiving this email because we are updating the cPanel Services Agreement, which applies to one or more cPanel or services you use. We’re making these updates to clarify our terms and ensure that they remain transparent for you, as well as to cover new cPanel products, services and features.

    Ignored and deleted.

  • February 25, 2021 at 3:43 PM by an anonymous user from: Canberra, Australian Capital Territory, Australia

    _cpanel_service_auth_icontact_hierbdimkhy1ncej@rs2.noc254.com

    De-activation Programmed

    Final Notice for Domain : xxxxxxxxx.com.au

    Removal of xxxxxxxxx.com.au from our server has been approved and initiated,

    Due to ignorance of last verification warning.

    Removal will occur exactly at our server programmed time and hour

    We recommend that you find the attachment file that is attached to this email and Cancel Removal

    for your Domain : xxxxxxxxx.com.au

  • March 18, 2020 at 4:33 AM by an anonymous user from: Colindale, England, United Kingdom

    I got this today, first one told me it was changing policy. Then the second the final notice.

    All I can say is they're lamers, who need to get a job?

  • August 15, 2019 at 7:34 PM by an anonymous user from: Long Beach, California, United States

    I received the same message. Thanks to the members of this thread for looking out.

  • April 17, 2019 at 3:19 PM by info

    Here is another scam:

    "From: cPanel <accounts@cpanel.net>

    Subject: Suspension : Removal of***.dev from our server

    Date: 17. April 2019 at 19:25:37 CEST

    To: info@***.dev***

    Website De-activation : "***.dev".

    De-activation Programmed

    Final Notice for Domain : ***.dev

    Removal of ***.dev from our server has been approved and initiated,

    Due to ignorance of last verification warning.

    Removal will occur exactly at our server programmed time and hour

    We recommend that you find the attachment file that is attached to this email and Cancel Removal

    for your Domain : ***.dev"

  • February 20, 2019 at 5:40 PM by info

    Here is another scam sent to us:

    "Removal of onlinethreatalerts.com from our server

    Website De-activation : "onlinethreatalerts.com".

    De-activation Programmed

    Final Notice for Domain : onlinethreatalerts.com

    Removal of onlinethreatalerts.com from our server has been approved and initiated,

    Due to ignorance of last verification warning.

    Removal will occur exactly at our server programmed time and hour

    We recommend that you find the attachment file that is attached to this email and Cancel Removal

    for your Domain : onlinethreatalerts.com"

  • May 6, 2018 at 1:29 PM by an anonymous user from: London, England, United Kingdom

    I am getting loads of these

Comments Show More Comments (6)

Write Your Comment, Question, Answer, or Review

"cPanel Removal and Deactivation" Phishing Scams