Security & Abuse Policy
How we protect the developer ecosystem, maintain 99.99% uptime, and enforce zero tolerance against malicious abuse.
1. Platform & Authentication Security
Our authentication and dashboard infrastructure utilizes defense-in-depth engineering to ensure user data and DNS configurations are safeguarded:
- Password Protection: Passwords are cryptographically salted and hashed with
bcryptbefore persistent database storage. - Session Tokens: JWT tokens are stored exclusively in
httpOnly,Secure, andSameSite=Laxcookies to prevent Cross-Site Scripting (XSS) and CSRF token theft. - Brute-Force Rate Limiting: Automated IP and account-level rate limiters throttle login and registration attempts, locking accounts after repeated failures.
- OTP Email Verification: All account signups require 6-digit one-time code verification to ensure verified email ownership.
2. Anycast DNS & DDoS Mitigation
Our authoritative DNS servers are distributed across global edge nodes with automated Anycast routing and multi-gigabit DDoS mitigation to ensure low latency and high availability for developer domains worldwide.
3. Zero-Tolerance Abuse Enforcement
We actively monitor and scan subdomains to prevent malicious activities. Immediate revocation and domain blacklisting apply to any subdomain involved in:
🚫 Phishing & Brand Spoofing
Deceptive login portals mimicking Google, banks, social networks, or cryptocurrency wallets.
🚫 Malware & Ransomware
Hosting executable payloads, exploit kits, spyware, or keyloggers.
🚫 Command & Control / Botnets
Pointing subdomains to unauthorized C2 infrastructure or DDoS networks.
🚫 Trademark Impersonation
Squatting or registering names of registered companies without authorization.
4. How to Report Malicious Subdomains
If you discover any is-a-coder.in subdomain violating these safety rules, please report it immediately. Our security team reviews and acts on reports within 4–12 hours:
abuse@is-a-coder.in
Please include the full subdomain URL, evidence/screenshots, and target IP or host in your report.