Originally Posted by BillyZilly

Yeah, Nice mention. To note: Some trackers block your IP from access if you try attempting multiple time with false information.

Take TemplateShare scripts as example. If you failed attempt (more than it allows) to login, the site will balcklist/block/ban your IP from access.

Other scripts do that for a temporary time.

The best option to use a password manager and use 2FA if possible. Most of the modern sites now support email-based and some new sites support authenticator app-based 2FA. The latest version of the Unit3D script also added app-based 2FA.

thank you to do clarify and submission
I am amazed when I got email from nexus based tracker, no need to mention name, sent me the FULL DETAIL about login, I mean, IP address, browser and physical location, actually this email was on spam and policy said "it deleted after 30 days" I am telling you about my happenings.