Spotting fake security threats aimed at panel owners

Panel owners are attractive targets: they hold balances, provider keys and customer data. Many attacks don't break anything — they simply trick the owner into handing over access.

The common tricks

• Fake suspension notices. An email claims your hosting, domain or payment account will be closed unless you "verify" through a link.
• Fake malware warnings. A pop-up or message says your site is infected and tells you to run a command or install a "fix".
• Fake support agents. Someone contacts you on a messenger, claims to be from your platform, and asks for your password or a login code.
• Fake "verify you are human" screens that ask you to paste a command into your computer. No real CAPTCHA ever asks you to do that.

The rules that stop almost all of them

1. Never type a password after clicking a link in a message. Open the site yourself, by typing its address.
2. Nobody legitimate needs your password or your 2FA code. Not your host, not your platform, not your payment provider.
3. Never run commands you were told to paste. That is how a fake alert becomes a real compromise.
4. Check the sender's actual address, not just the display name.

When in doubt

Contact the company through a channel you already trust — their official website or dashboard — and ask. A real problem will still be real in ten minutes; a scam relies on you rushing.