How to tell if an email is really from SiteGround
Customers of hosting provider SiteGround are increasingly being targeted by spam emails that claim to come from the company.
These emails attempt to trick users into renewing their domain name or hosting package, while in reality, it is phishing or another form of fraud.
Background information on SiteGround
SiteGround is a globally used web hosting provider, active since 2004. It offers services such as web hosting, domain registration, and website management, and is known for fast hosting and good customer service. Due to its popularity, SiteGround has become a target for cybercriminals.
So, what’s happening?
There has been an increasing number of reports of phishing emails claiming to be from SiteGround. These emails pretend that a domain or hosting service is about to expire and ask for immediate payment via a link. While these emails use the SiteGround logo and professional language, the links lead to fake websites designed to steal personal information or payments. As a result, the emails seem legitimate, but customers can easily be deceived.
Scammers’ method
These scammers send emails that give the impression that a domain or hosting package is about to expire, urging the recipient to take immediate action through an included link. Despite using the SiteGround logo and professional language, the links direct users to fraudulent websites designed to steal sensitive information or payments.
What do the emails look like?
The emails resemble official SiteGround communication but are not legitimate. They often use the SiteGround logo and sometimes the company’s colors (green, black, orange). They are almost always written in English. Below are some examples of these scam emails:
In these scam emails, the sender’s name may appear as “SiteGround” and the company’s logo might be displayed, but a closer look reveals that the actual sender’s email address has no connection to SiteGround. This is often the first red flag indicating spam or a phishing attempt.
Additionally, these emails frequently contain spelling mistakes, and the content often doesn’t match the style or professionalism of official SiteGround communications.
For example, an orange button similar to those used by SiteGround may be present, and the email might attempt to load a logo at the top. In the “from” field, you might see “SiteGround Renewals.” However, the actual sender’s email address lacks any reference to SiteGround, which is a key indicator of a scam. A legitimate SiteGround email will always come from an address like @siteground.com or a regional variant such as @siteground.co.uk.
Other visual clues also point to spam, such as a lack of professionalism in the layout or the absence of the SiteGround logo altogether. Even when the email looks more polished, you can still identify it as a scam if the sender’s email address isn’t from SiteGround, or if the language is overly general, with no mention of specific domains or renewal dates.
The email above has a more professional appearance, giving it a more trustworthy impression. However, you can still recognize it as spam by looking at the “from” email address. Another indicator is the use of generic language; there is no mention of a specific domain name or a specific date.
How to recognize phishing emails?
The above examples don’t cover every possibility, but here are some key ways to identify phishing emails:
- Sender’s email address: Legitimate reminders from SiteGround are always sent from noreply@siteground.com.
- Personalized greetings: SiteGround emails will always start with “Hello” or “Hallo,” followed by the name you used when registering with them.
- Payment details: SiteGround never includes payment options in their emails. Payments are only handled after you log in to your dashboard.
If you still have doubts, log in directly to your SiteGround account via their official website or contact us.
What does SiteGround say?
SiteGround has also addressed this issue in their own article, emphasizing the importance of verifying any emails that ask for personal information such as login credentials or payment details. Phishing scams often disguise themselves as legitimate services, urging users to act quickly on expiring services through links that lead to fake websites designed to steal sensitive data.
To recognize phishing emails pretending to be from SiteGround, always check the sender’s email address (it should end in “@siteground.com”), look for your registered name in the greeting, and hover over any links to check if the URL is legitimate. If in doubt, manually log into your SiteGround account to check the status of your services.
If you’ve accidentally clicked on a suspicious link, change your password immediately, enable two-factor authentication, and update your payment details to secure your account.
Here’s an example of what a legitimate SiteGround email should look like:
