Terms of Use

PhishCore is a phishing detection platform built as a final year project at Politeknik Brunei. By creating an account or using PhishCore, you agree to these terms. If you do not agree, please do not use the service.

1. What PhishCore does

PhishCore checks links, emails, phone numbers and screenshots for signs of phishing and gives each one a risk score and a verdict (Safe, Suspicious, Phishing or Needs review). It also offers scan history, analytics, a public threat feed, an AI chat adviser and learning games.

2. Results are guidance, not a guarantee

• Results are produced automatically and can be wrong. A "Safe" result does not guarantee that something is safe, and a "Phishing" result does not prove that it is malicious.
• Always use your own judgement. Do not rely on PhishCore alone before you click, pay, share a password or act on a message.
• If you believe you have been scammed, contact your bank and the relevant Brunei authorities straight away.

3. Your account

• Give accurate details and keep your password private. You are responsible for activity on your account.
• You can change your details or delete your account at any time from Settings.
• We may suspend or remove accounts that break these terms or put the service at risk.

4. Acceptable use

Please do not:

• submit content you have no right to share, or anything unlawful;
• try to break, overload or probe the service, bypass its limits, or scrape it beyond the public feed;
• use PhishCore to harass anyone, or to test attacks against sites you do not own or have permission to test;
• submit false reports on purpose to harm a person or a business.

5. What you submit, and public reports

• You keep ownership of what you submit. You allow PhishCore to process it to produce results and to run the service.
• Scans judged Suspicious or Phishing can appear on the public Threat Reports page and in the downloadable feed. These show the reported link, the date, a status and a username, not your name or email.
• Share links for a scan are created only by you, and you can turn them off again.

6. Third-party services

To check a submission, PhishCore may send it to outside services such as Google Safe Browsing, VirusTotal, an OCR service and, when switched on, an AI provider. Their own terms apply to how they handle that data. The Privacy Policy lists what is shared.

7. Availability

PhishCore is a student project provided as it is, without promises of uptime. Features may change, pause or be removed, and daily limits may apply to keep the service fair and within the limits of free outside services.

8. Limits of responsibility

To the extent the law allows, PhishCore and its creators are not responsible for losses that come from relying on a result, from a missed threat, from a wrongly flagged site, or from the service being unavailable.

9. Changes and contact

We may update these terms and will change the date above when we do. Continuing to use PhishCore after a change means you accept it. Questions can be sent to phishcorebn@gmail.com.