Responsible Disclosure
For security researchers who know how to behave (unlike scammers).
For Security Researchers#
We welcome responsible security research. It's refreshing to deal with ethical hackers after spending all day fighting the other kind.
Our Commitment#
PhishDestroy is committed to working with security researchers to protect our users and systems. We believe in coordinated disclosure and appreciate the security community's efforts to keep the internet safe.
Reporting Guidelines#
If you believe you have found a security vulnerability in our systems, please email us at abuse@phishdestroy.io. Provide clear steps to reproduce the issue, allow us reasonable time to investigate, and do not exploit the vulnerability or access data that doesn't belong to you.
Safe Harbor#
We will not pursue legal action against security researchers who act in good faith, report vulnerabilities through proper channels, do not disrupt our services, and follow responsible disclosure practices.
Scope#
We are interested in vulnerabilities in our websites, APIs, and data processing systems. Please do not report issues in third-party services (Cloudflare, GitHub, Telegram), social engineering attacks, or denial of service attacks.
Recognition#
We believe in giving credit where it's due. With your permission, we will acknowledge your contribution publicly on our security researcher hall of fame.
Contact#
- Email: abuse@phishdestroy.io
- PGP key: /.well-known/pgp-key.txt
- security.txt: /.well-known/security.txt
Policies & legal documents
Alle officiële beleidsregels, algemene voorwaarden en juridische documenten voor het PhishDestroy‑project. Wij opereren transparant als een non‑profit, open‑source initiatief onder de MIT‑licentie.
Terms governing use of our services.
Hoe wij uw persoonsgegevens verzamelen, gebruiken en beschermen.
Regels voor het gebruik van onze diensten, API, tools en threat reporting.
Procedures voor auteursrechtelijke verwijderingsverzoeken en tegenmeldingsprocedure.
MIT-licentie, open‑source‑toewijding en merkrichtlijnen.
Gegevensbeschermingsrechten voor EU‑inwoners onder de GDPR.
Minimale cookies uitsluitend voor analytics en beveiliging. Geen advertenties of profilering.
Aansprakelijkheidsbeperkingen en garantie‑uitsluitingen.
How to report and understand security issues.
Hoe beveiligingskwetsbaarheden in onze systemen te melden.
Current pageHow threat reports and operations are handled.
Why abuse reports are delivered by email.