I'd recommend talking to Gandalf about getting the panel moved to a subdomain in Argo, even if it stays on the current host. That way it would make it harder for people to phish users since anything outside of the community's own domain would be an obviously-fake URL.
As for the situation itself, I hope whoever that is doing it gets caught and removed from the community forever. The fact that they would waste their time to damage a community they obviously have interest in is absolutely ridiculous.