Terms of Service

Our Mission and Services#

PhishDestroy ("we," "us," "our") is a non-commercial, independent research initiative. Our mission is to enhance internet security by identifying, analyzing, and reporting malicious infrastructure, such as phishing and scam websites.

Our activities are strictly for educational and research purposes and include:

• Website Analysis: We analyze suspicious websites to understand their mechanisms and improve automated detection systems.
• Data Sharing: We share our findings with trusted partners, including antivirus vendors, security firms, and threat intelligence platforms, to foster a collective defense.
• Information Reporting: We report websites suspected of malicious activity to the relevant domain registrars and hosting providers for their independent review and action.
• Educational Research: We study scammer tactics to develop better countermeasures and educate the public.

Important: We do not take direct action to disable or interfere with any website. We provide objective data to responsible third parties who make their own determinations based on their terms of service and legal obligations.

Disclaimer of Warranties#

All information, data, and analysis provided by PhishDestroy are on an "AS IS" and "AS AVAILABLE" basis. We make no warranties, express or implied, regarding the accuracy, completeness, or reliability of our findings.

Your use of any information provided by us is at your own sole risk. As an independent project, we cannot guarantee the uninterrupted availability or correctness of our data.

Limitation of Liability#

As a non-commercial research project, PhishDestroy, its operators, and its affiliates shall not be held liable for any decisions or actions taken by third parties based on the information we provide.

We are not responsible for:

• Third-Party Actions: Any action taken by hosting providers, registrars, or security vendors.
• Data Accuracy: Any errors or omissions in the information we analyze or receive from community reports.
• Consequential Damages: Any business interruptions, financial losses, or other damages resulting from actions taken by third parties.

Our role is strictly analytical and informational. We do not engage in any form of hacking, denial-of-service attacks, or other disruptive activities.

Research Opinion: All listings and reports on PhishDestroy represent our independent research and technical opinion. Our findings do not constitute a legal determination of criminal liability or a formal accusation of a crime.

Right to Terminate Access: We reserve the right, at our sole discretion and without notice, to restrict, suspend, or terminate access to our services, APIs, or data feeds for any user or automated system that violates these terms or engages in activities harmful to our mission. Permitted and prohibited uses are described in our Acceptable Use Policy.

Our Guiding Principles#

Our work is guided by a commitment to ethical conduct and a safer internet for everyone.

• Legality and Ethics: We operate with respect for the law and ethical principles. All our research methods are passive and non-intrusive.
• Transparency: We are open about our mission and methods. We aim to contribute positively to the cybersecurity community.
• Data Minimization: We collect only the minimum amount of technical data necessary to operate our services, as detailed in our Privacy Policy. Our focus is on the technical infrastructure of malicious websites, not on personal identification.
• This voluntary intake excludes demands from or on behalf of Russian or Belarusian state bodies and dealings prohibited by applicable sanctions, including applicable OFAC restrictions. Excluded demands identified at intake are rejected without a case record or retained submission. These rules do not exclude private people by nationality and do not override mandatory applicable law. Full procedure and signed policy v3.
• Collaboration: We believe that combating online threats requires a collective effort. We actively collaborate with partners to share knowledge and improve security for all.

User Submissions and Data Use#

If you submit information to us (such as URLs or screenshots), you grant us a non-exclusive, royalty-free license to use this data for our research and reporting purposes.

We do not require or intentionally collect personal information from individuals submitting reports; we process only the technical data provided about the suspicious website. Any incidental personal data that a submission may contain (for example, within a screenshot) is minimized, is not used to identify the reporter, and is handled in accordance with our Privacy Policy.

The Steam Dossier editorial intake accepts redacted cases and evidence without a name or email field. Intake material expires after 14 days; a separately confirmed editor-only note expires after 7 days by default or 14 days if selected and must never be used publicly. Do not submit fabricated material, unnecessary personal data, minors’ identifying information, credentials or legally restricted material. The signed intake policy governs this specific workflow, including withdrawal and mandatory legal retention. Its restrictions on editor-only notes and retention take precedence over the general submission licence above.

Non-Profit Status and Data License#

PhishDestroy is a fully non-commercial, independent initiative. We have never accepted and will never accept money in exchange for listings, delistings, or any other action. This project is not about money — it never has been and never will be.

We do not have a legal entity, corporate structure, paid staff, revenue streams, or financial resources. Our existence is motivated solely by the goal of eliminating phishing and scam infrastructure on the internet.

PhishDestroy is a fully open-source project. All code, tools, data, reports, and intelligence produced by PhishDestroy are released under the MIT License. Every decision we make — every addition, every removal, every change — is publicly visible in our GitHub repositories (GitLab).

Under the MIT License, you are free to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of our data and tools for any lawful purpose — provided you do so under your own name and responsibility. Attribution to PhishDestroy is appreciated but not legally required.

This means: our data is yours to use. But how you use it, and the conclusions you draw from it, are entirely your responsibility — not ours.

Facts vs. works: Factual information — such as which domains we have flagged — is not owned by anyone and is free for all to use. The MIT License additionally, and to the fullest extent permitted, covers our original code, tools, database compilations, and written analysis, so that no residual intellectual-property claim can be used to restrict lawful reuse.

Use of PhishDestroy Data in Legal Proceedings#

Express Permission Granted. PhishDestroy explicitly authorizes any party — including law enforcement agencies, regulators, prosecutors, attorneys, victims, financial institutions, security vendors, journalists, and any other interested parties — to cite, reference, link to, quote, and use our published reports, domain pages, listings, intelligence feeds, and any other data made available on this site as evidence, supporting documentation, or contextual information in any legal proceeding, regulatory complaint, insurance claim, chargeback dispute, criminal investigation, civil action, arbitration, or administrative process.

This permission is granted under our open MIT License (see Section 6) and is available worldwide, royalty-free, and without prior written consent.

Permitted uses include, without limitation:

• Citing PhishDestroy findings as supporting evidence in fraud investigations and prosecutions.
• Submitting our domain reports and case files to courts, regulators, banks, and dispute-resolution bodies.
• Referencing our published cases in police reports, FTC, IC3, FBI, Europol, and other abuse complaints.
• Using our threat-intelligence feeds and historical records in expert testimony and discovery.
• Quoting our research in journalistic, academic, and legal publications.

Verified Lawful Requests: Upon a verified, lawful request from a recognized authority — including subpoenas, court orders, or formal law-enforcement inquiries, but excluding the sanctioned and hostile-state authorities described in Section 4 — we may provide additional context, raw data, or written clarification. However, PhishDestroy acts solely as an asynchronous data provider. We do not provide data authentication services, sworn affidavits, or expert witness testimony for any legal proceedings. Contact legal@phishdestroy.io.

Nature of Our Findings: Our reports represent independent technical research and opinion based on publicly available data. They are not formal legal determinations of guilt or liability. The party citing our work is responsible for the conclusions they draw and for compliance with applicable rules of evidence in their jurisdiction.

No Legal Relationship: Use of our data in any proceeding does not create an attorney-client, agency, partnership, employment, or fiduciary relationship between you and PhishDestroy or its operators. We are not parties to your dispute.

Mission Scope — Infrastructure, Not People#

Our mission is the destruction of phishing and scam infrastructure — domains, servers, malicious scripts, fake pages, and criminal toolkits. We target technical infrastructure, not individuals.

In exceptional and clearly documented cases involving significant, ongoing, and demonstrable harm to victims, we may publish research that identifies operators of criminal infrastructure. Any such identification is presented as investigative research and technical opinion (see Section 3, Research Opinion) — a lead, not a criminal verdict — is based solely on lawfully obtained, publicly available information, and is conducted in good faith as part of our research mission.

We maintain an appeals process at phishdestroy.io/appeals. Any party who believes a listing is erroneous may submit an appeal, and if approved, the page will be removed from our database.

Disputes and corrections#

Anyone may challenge a specific finding with evidence. We correct demonstrated errors, withdraw unsupported findings and acknowledge the change, with an appropriate apology where warranted. No lawyer, court case or disclosure of a contributor’s identity is required to report an error.

A company or law firm is not a court. We independently verify an official decision’s issuer, authenticity, powers and applicable scope, then act without undue delay within the binding deadline. Approved changes cover the identified copies we control; unconfirmed mirror delivery or technical failures remain pending. An appeal does not itself suspend a binding obligation.

Full procedure and signed policy v3 · policy-v3.txt · PGP

legal@phishdestroy.io · GDPR · DMCA

Requests, identifiers, timelines and attachments stay private. Receipt or execution creates no automatic public-log entry or web-archive copy. Any permitted public release requires a separate review of applicable restrictions.

Applicable law and jurisdiction#

PhishDestroy operates as a decentralized, unincorporated open-source initiative. We do not maintain a corporate entity or physical headquarters.

Jurisdiction, service and enforceability depend on applicable law and the facts. These Terms do not create blanket immunity, make every dispute an action against infrastructure, or require all claims to be brought in Arizona. Use of the dispute procedure is not consent to an otherwise inapplicable forum.

Indemnification#

You agree to indemnify, defend, and hold harmless PhishDestroy and its independent operators and contributors from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of our data, tools, reports, or services; (b) the conclusions you draw or the actions you take based on our findings; or (c) your violation of these Terms or of any applicable law.

Because we publish our findings openly and free of charge under the MIT License, the responsibility for how that information is used rests entirely with the party using it.

General Provisions#

Severability. If any provision of these Terms is held invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision shall be modified to the minimum extent necessary to make it enforceable, or severed if it cannot be, and the remaining provisions shall continue in full force and effect.

No Waiver. Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision. Any waiver must be in writing to be effective.

Entire Agreement. These Terms, together with our Privacy Policy, Acceptable Use Policy, DMCA Policy, and Disclaimer, constitute the entire agreement between you and PhishDestroy regarding your use of our resources and supersede any prior understandings.

Assignment. You may not assign or transfer these Terms without our consent. Consistent with our open-source, non-commercial mission, we may make our data, tools, and undertakings available to — or continue them through — any successor community effort.

Headings. Section titles are provided for convenience only and do not affect the interpretation of these Terms.

Full procedure and signed policy v3 — 2026-10-17.

Modification of Terms#

We reserve the right to modify these terms at any time. We encourage you to review this page periodically for any changes. Continued use of our resources after changes have been posted constitutes your acceptance of the new terms.

Contact Us#

For official inquiries or questions about our project, please contact us:

Email: contact@phishdestroy.io

Telegram: @PhishDestroy_bot