Fraudulent messages can impersonate cPanel, a hosting provider or an email service to obtain account credentials. A campaign reported in 2018 used fake confirmation and update requests. The underlying technique is familiar: persuade the recipient to sign in on a page that resembles the service they normally use.
Check the request before signing in
A logo, polished layout or sender display name does not authenticate an email. Mistakes can raise suspicion, but their absence does not prove that a message is legitimate. A fraudulent website can also use an HTTPS connection.
For an unexpected request, open your client area from a bookmark or an address you already know. This lets you check the situation through the service itself without following the received link. Pay particular attention to urgent requests for payment, password confirmation or mailbox reactivation.
Useful precautions
- Examine the actual domain in a link, rather than relying on its displayed text.
- Never reply to an email with your password or a sign-in code.
- Avoid opening an unexpected attachment to “unlock” an account.
- If in doubt, contact support through a channel you already know.
If you entered your credentials
Reach the real service through a known address and promptly change the affected password. If you reused that password elsewhere, those accounts also need attention. Report the situation to support so that access and the checks appropriate to the service can be reviewed.
Keep the original message for investigation and avoid sharing it publicly: it may contain information specific to your account. The Nuagerie client area keeps your support exchanges together.
The official cPanel article about this campaign provides historical context. Our practical advice remains to verify an unusual request before acting on it.
Get a second look before a request becomes a problem
For a business, a suspicious hosting message can interrupt ordinary work even before anyone clicks it. Nuagerie can help customers compare the request with their service and support context, so an unexpected renewal, mailbox warning or account notice can be examined through a known channel.
In your support request, include the message’s subject, displayed sender and date, and say whether a link was opened or information was entered. Those details help us direct the response to the actual situation. If colleagues received the same message, ask them to hold off on acting while it is reviewed rather than forwarding the message around as a new instruction.
