Mecrotis
PlatformHow it worksChangelogDocs
Log inGet started

Getting started

  • Quickstart
  • Your first tour

Security

  • Securing your account
  • Sessions and devices

Billing

  • Plans and credits
  • Redeem codes

Workspace

  • Organizations and roles
  • Appearance and themes
  • Notifications

Trust and safety

  • Reporting vulnerabilities
  • Recognizing phishing

Account

  • Email and password
  • Export and deletion
  • Troubleshooting

All guides

Recognizing phishing

How we communicate — and how to spot someone pretending to be us.

3 min reads · Content updated with each release

Attackers rarely break software; they break people. Here is exactly how we communicate, so anything outside these rules should raise your suspicion.

We will NEVER

  • Ask for your password, one-time code, recovery code, or recovery link — in email, chat, or support tickets.
  • Ask you to 'verify your account' by clicking a link in an unexpected message.
  • Send attachments you did not ask for.
  • Pressure you with urgency ('your account will be deleted in 24 hours').

Every legitimate link

Starts with our exact domain: monster5stars.dev. Check the address bar — not the display text — before clicking. Look-alike domains (monster5stars-dev.com, secure-monster.net) are not us.

If you receive something suspicious

Do not click, do not reply. Forward it to security@monster5stars.dev and delete it. If you already clicked, change your password and revoke unknown sessions from Account & Security immediately.

Use case

Verify a message is really from us

Goal
Never act on a forged message.
Scenario
An email claims your account needs urgent attention.

Steps

  1. 1Check the sender's full address, not the display name.
  2. 2Hover every link and confirm the domain in the browser's status area.
  3. 3When in doubt, ignore the message and open the product directly by typing the address yourself.
  4. 4Report the message to the security contact.

Outcome

Phishing attempts fail against you regardless of how convincing they look.

On this page

  • We will NEVER
  • Every legitimate link
  • Verify a message is really from us
PreviousReporting vulnerabilitiesHow to responsibly disclose security issues and what we commit to in return.NextEmail and passwordChange your email safely, rotate your password, and switch between Google and password sign-in.
Mecrotis

SOON!

PrivacyTermsCookiesChangelogDocsSupport
© 2026 Mecrotisv0.16.17