Download websites that use DirectAdmin

About DirectAdmin

A hosting control panel is chosen by the hosting company, and every customer on the server inherits the decision. Nobody shopping for a website picks DirectAdmin, and few site owners could name the panel their provider runs. Detection of a panel is therefore not a fact about the site owner at all. What it identifies is the infrastructure underneath, which is exactly why the data rewards aggregation.

The product has been sold since 2003 by JBMC Software under a Proprietary licence, a long commercial life for infrastructure software in a category that has repeatedly changed hands, changed pricing models and shed alternatives along the way. Panels compete on server overhead, licence cost per account and the patience of support staff, and providers that standardise on one rarely revisit the choice, because migrating thousands of accounts between panels means rebuilding mail, database and DNS configuration for every one of them.

Panel detections cluster for that reason. A single provider standardises, and its whole fleet inherits the marker, so the results arrive in blocks that map to hosts, resellers and data centres rather than to independent decisions by site owners. Reading a panel list as a ranking of preferences among webmasters would misread the mechanism entirely. Reading it as a map of which providers serve which parts of the web is the use the data actually supports.

The version fields are where the record gets interesting and where the caveat has to be loudest. We record 1.55.0 as the version stamp on the installs that let one be read at all. A control panel is normally configured to be quiet about itself, since a login page reachable from the open internet is an obvious target, so a readable version string means a particular surface was exposed rather than that a fleet runs uniformly. The spread of versions in our data describes what leaked, not what is installed, and a provider that patches promptly and hides the banner looks identical to one that does neither.

That distinction splits the audience cleanly. For a security researcher the exposure itself is the finding, because an identifiable panel build answering on the public internet is a different risk profile from one bound to an internal address or behind a firewall rule. For a commercial reader the same rows answer a different question: which providers standardise on the panel, how large each footprint is, which countries and top level domains they concentrate in, and which of them are worth a migration pitch or an integration.

As of October 2026 the number of sites we match to DirectAdmin is 1, and the figure is a floor rather than a total. Panels hide, hosts disable default markers, and a site served through a content delivery network can reveal nothing about its origin. Looking up one domain answers whether that site sits behind the panel. An export answers where the panel population lives, how it is distributed across providers and countries, and how the shape of it moves from one release of the data to the next.