Responsible Disclosure
For security researchers who know how to behave (unlike scammers).
For Security Researchers#
We welcome responsible security research. It's refreshing to deal with ethical hackers after spending all day fighting the other kind.
Our Commitment#
PhishDestroy is committed to working with security researchers to protect our users and systems. We believe in coordinated disclosure and appreciate the security community's efforts to keep the internet safe.
Reporting Guidelines#
If you believe you have found a security vulnerability in our systems, please email us at abuse@phishdestroy.io. Provide clear steps to reproduce the issue, allow us reasonable time to investigate, and do not exploit the vulnerability or access data that doesn't belong to you.
Safe Harbor#
We will not pursue legal action against security researchers who act in good faith, report vulnerabilities through proper channels, do not disrupt our services, and follow responsible disclosure practices.
Scope#
We are interested in vulnerabilities in our websites, APIs, and data processing systems. Please do not report issues in third-party services (Cloudflare, GitHub, Telegram), social engineering attacks, or denial of service attacks.
Recognition#
We believe in giving credit where it's due. With your permission, we will acknowledge your contribution publicly on our security researcher hall of fame.
Contact#
- Email: abuse@phishdestroy.io
- PGP key: /.well-known/pgp-key.txt
- security.txt: /.well-known/security.txt