Reporting a vulnerability
Email admin@administrator.ru with “Rank.Ru — security” in the subject. Include the affected URL, reproducible steps, expected and actual behaviour and possible impact. Provide a minimal example without personal data, secrets or complete third-party files.
Research boundaries
Do not perform denial-of-service attacks, credential guessing, social engineering or change or delete others’ data. Stop upon accidental access, avoid disclosure and notify the operator. This page does not authorise access to private resources or promise a reward. Assessed third-party websites are outside the Rank.Ru research scope.
Forgery & fraud
Verify certificates at rank.ru/cert/domain: the domain, number, date and status must match. Rank.Ru does not require payment to view reports or request assessed website passwords. Report fake badges, messages or extortion attempts with a link and a screenshot containing no sensitive information.