Attackers send convincing emails claiming to be from your hosting provider, hoping you will type your password into a fake login page.
COMMON PRETEXTS
"Your account will be suspended in 24 hours, confirm your details now." "Your domain is about to expire, renew immediately." (often for a domain you do not even own) "Unusual login detected, verify your identity." "Invoice attached" with a document that asks you to enable macros. "Your mailbox is full, click here to upgrade."
HOW TO CHECK
Look at the actual sender address, not the display name. Hover over links before clicking and read the real destination. A link that says zillionkinghost.com but points elsewhere is the giveaway. Look for urgency and threats. Genuine notices give you time. We will never ask for your password by email. Not ever, for any reason. Check the Client Area directly instead of clicking. Log in by typing the address yourself and look for the notice there. If it is real, it will be in your account.
IF YOU CLICKED AND ENTERED CREDENTIALS
Change the password immediately, enable 2FA, then open a ticket so we can check the account for unauthorised changes.
Forward suspicious emails to our support so we can warn other customers.
