Responsible Disclosure
For security researchers who know how to behave (unlike scammers).
For Security Researchers#
We welcome responsible security research. It's refreshing to deal with ethical hackers after spending all day fighting the other kind.
Our Commitment#
PhishDestroy is committed to working with security researchers to protect our users and systems. We believe in coordinated disclosure and appreciate the security community's efforts to keep the internet safe.
Reporting Guidelines#
If you believe you have found a security vulnerability in our systems, please email us at abuse@phishdestroy.io. Provide clear steps to reproduce the issue, allow us reasonable time to investigate, and do not exploit the vulnerability or access data that doesn't belong to you.
Safe Harbor#
We will not pursue legal action against security researchers who act in good faith, report vulnerabilities through proper channels, do not disrupt our services, and follow responsible disclosure practices.
Scope#
We are interested in vulnerabilities in our websites, APIs, and data processing systems. Please do not report issues in third-party services (Cloudflare, GitHub, Telegram), social engineering attacks, or denial of service attacks.
Recognition#
We believe in giving credit where it's due. With your permission, we will acknowledge your contribution publicly on our security researcher hall of fame.
Contact#
- Email: abuse@phishdestroy.io
- PGP key: /.well-known/pgp-key.txt
- security.txt: /.well-known/security.txt
Policies & legal documents
Wszystkie oficjalne polityki, warunki i dokumenty prawne projektu PhishDestroy. Działamy przejrzyście jako organizacja non-profit, inicjatywa open-source na licencji MIT.
Terms governing use of our services.
Jak gromadzimy, wykorzystujemy i chronimy Twoje dane osobowe.
Zasady korzystania z naszych usług, API, narzędzi i raportowania zagrożeń.
Procedury usuwania treści z tytułu naruszenia praw autorskich oraz proces kontrpowiadomienia.
Licencja MIT, zobowiązanie do otwartego oprogramowania i wytyczne dotyczące marki.
Prawa ochrony danych osobowych obywateli UE wynikające z RODO.
Minimalne pliki cookie wyłącznie do analizy i bezpieczeństwa. Brak reklam i profilowania.
Ograniczenia odpowiedzialności oraz zastrzeżenia dotyczące gwarancji.
How to report and understand security issues.
Jak zgłaszać luki bezpieczeństwa w naszych systemach.
Current pageHow threat reports and operations are handled.
Why abuse reports are delivered by email.