Responsible Disclosure
For security researchers who know how to behave (unlike scammers).
For Security Researchers#
We welcome responsible security research. It's refreshing to deal with ethical hackers after spending all day fighting the other kind.
Our Commitment#
PhishDestroy is committed to working with security researchers to protect our users and systems. We believe in coordinated disclosure and appreciate the security community's efforts to keep the internet safe.
Reporting Guidelines#
If you believe you have found a security vulnerability in our systems, please email us at abuse@phishdestroy.io. Provide clear steps to reproduce the issue, allow us reasonable time to investigate, and do not exploit the vulnerability or access data that doesn't belong to you.
Safe Harbor#
We will not pursue legal action against security researchers who act in good faith, report vulnerabilities through proper channels, do not disrupt our services, and follow responsible disclosure practices.
Scope#
We are interested in vulnerabilities in our websites, APIs, and data processing systems. Please do not report issues in third-party services (Cloudflare, GitHub, Telegram), social engineering attacks, or denial of service attacks.
Recognition#
We believe in giving credit where it's due. With your permission, we will acknowledge your contribution publicly on our security researcher hall of fame.
Contact#
- Email: abuse@phishdestroy.io
- PGP key: /.well-known/pgp-key.txt
- security.txt: /.well-known/security.txt
Policies & legal documents
Lahat ng opisyal na patakaran, mga tuntunin, at mga legal na dokumento para sa proyekto na PhishDestroy. Gumagawa kami nang may transparency bilang isang non-profit, open-source na inisyatito sa ilalim ng MIT License.
Terms governing use of our services.
Paano namin nakolekta, ginagamit, at pinoprotektahan ang iyong personal na impormasyon.
Mga tuntunin sa paggamit ng aming mga serbisyo, API, mga kasangkapan, at pag-uulat ng mga banta.
Mga proseso ng pagtanggal ng copyright at proseso ng counter-notification.
MIT License, pangako sa open-source, at mga gabay sa branding.
Mga karapatan sa proteksyon ng datos para sa mga residente ng EU alinsunod sa GDPR.
Minimal na cookies para sa analytics at seguridad lamang. Walang mga ad o profiling.
Mga limitasyon sa pagkakalabastagan at mga pahiwatig ng pagwawakas ng garantiya.
How to report and understand security issues.
Paano mag-ulat ng mga kahinaan sa seguridad sa aming mga sistema.
Current pageHow threat reports and operations are handled.
Why abuse reports are delivered by email.