Be cautious with urgent requests, lookalike domains and unexpected instructions. Do not send VPS passwords, AI keys or Telegram tokens in a support message.
Open the site or dashboard directly rather than following an unexpected link. If a request looks wrong, use the contact page to check it. A familiar logo is not proof that a message is authentic.