userdata_upgrade script adds the "Autodomain" aliases to cPanel userdata

Symptoms

The domains hosted on the server have all had Alias domains added similar to the following:

domain.tld.cpanel.site
domain.tld.cprapid.com

Description

cPanel version 124 introduced the "Autodomain" feature, which adds a domain alias per-VirtualHost that is associated with the "cprapid.com"/"cpanel.site" hostname tied to your server.  These are added to the Apache configuration automatically, and are not intended to be "real" Alias domains that are managed by your users.  The intention of this "Autodomain" is to provide a ready-to-use domain name to begin building your website while propagation occurs, or when a domain is still pointed to a different host.

When the "userdata_upgrade" script is called, these "Autodomain" aliases are added to the cPanel userdata for all domains hosted on the server which makes these visible to all accounts, adds them to AutoSSL coverage, and counts against a user's Alias Domain limit.

We've opened an internal case for our development team to investigate this further. For reference, the case number is CPANEL-46965. Follow this article to receive an email notification when a solution is published in the product. 

Workaround

The "userdata_upgrade" is only called when certain action is taken on the server, such as when the Apache ports are changed or the EA-NGINX service is installed on the server. There is no method to prevent this from occurring when these tasks are performed.

If the server has been impacted by this, the following one-liner will iterate over all users and remove these aliases:

while read -r line; do line=$(echo "$line" | grep -E "cprapid.com|cpanel.site"); [ ! -z "$line" ] && cpapi2 --user=$(echo $line | cut -d':' -f2 | tr -d ' ') Park unpark domain=$(echo $line | cut -d':' -f1); done < /etc/userdomains