Sign In
System Defense & Threat Mitigation Standards

Anti-Abuse Verification &
Threat Prevention Policy

Web Extractor Pro enforces rigorous identity validation and autonomous anomaly heuristics to prevent malicious crawling, disposable multi-account generation, credit churning, and spam harvesting.

Effective Date: January 15, 2024 • Scope: All Free Trial and Commercial Accounts • Policy Ref: SEC-AA-2026.09
πŸ›‘οΈ

Zero-Tolerance Abuse Doctrine

Any attempt to exploit crawler infrastructure for Denial of Service (DoS), vulnerability scanning, predatory email bombardment, or fraudulent registration circumvention results in immediate, permanent account termination, IP gateway blacklisting, and potential reporting to relevant national law enforcement agencies.

01. Corporate Identity Verification & Vetting Gateway

To preserve target web host bandwidth, protect domain sender reputations, and prevent throwaway burner accounts, Web Extractor Pro requires corporate identity verification:

  • Exclusion of Consumer Webmail: Email addresses registered under free consumer or disposable domains (including Gmail, Yahoo, Hotmail, Outlook, iCloud, Mail.com, Proton.me, GuerrillaMail, 10MinuteMail, and Mailinator) are strictly rejected by the activation gateway.
  • Cryptographic Inbox Confirmation: To eliminate fake domain submission and identity spoofing, on-screen verification bypass is strictly disabled. A single-use 256-bit cryptographically secure token is dispatched via transactional SMTP. The user must open their verified corporate mailbox and click the invitation token link to complete registration.
  • Corporate Domain Correspondence: Registrants must provide their operating commercial website domain. We evaluate domain age, MX DNS records, and corporate legitimacy prior to elevating crawling limits.

02. Duplicate Trial Prevention & Rate Limiting Rules

The 300 Free Trial Credits package is provisioned strictly as a one-time evaluation sandbox. The system enforces strict rate limits:

Single-Redemption Restriction

Each corporate email and company domain is restricted to exactly one free trial grant. Once redeemed, re-registering the same email will be blocked immediately before any email dispatch.

Exhausted Trial Upgrade Mandate

Trial accounts that have consumed their 300 credits do not receive automated recurring replenishment. Users must submit an upgrade application to transition to a paid commercial subscription.

10-Minute Dispatch Throttling

Pending invitation tokens are rate-limited to prevent mail gateway flooding. If an activation email was recently dispatched, subsequent requests within 10 minutes are rejected.

03. Strictly Prohibited Operational Uses

Subscribers agree under contractual penalty never to use or configure Web Extractor Pro for any of the following prohibited behaviors:

  • Denial of Service (DoS/DDoS): Flooding target servers with hyper-concurrent request loads exceeding standard HTTP response capacity.
  • Credential Harvesting & Exploitation: Targeting administrative login endpoints (e.g. /wp-admin, /cpanel) or attempting SQL injection, directory traversal, or vulnerability probing.
  • Individual Consumer Harassment: Harvesting private individuals' home contact information, stalking, cyberbullying, or predatory outreach.
  • Government & Defense Crawling: Targeting military, national defense, intelligence, critical national infrastructure (power, water, nuclear), or judicial records networks.
  • Malicious Phishing Preparation: Harvesting corporate org-chart vectors specifically to orchestrate spear-phishing or Business Email Compromise (BEC) attacks.

04. Autonomous Circuit Breakers & Real-Time Metering

The Web Extractor Pro engine operates autonomous guardrails that intercept anomalous patterns in real time:

Depth Ceiling: Level 2 (Trial) / Level 8 (Enterprise)
Concurrency Limit: 1 (Trial) / 10 (Custom Enterprise)
RPM Throttle: 30 RPM (Trial) / 300 RPM (Max Enterprise)
Error Rate Trip: > 15% HTTP 429/503 halts session

If our telemetry detects abnormal error patterns or attempts to hammer a target host, the crawler enters emergency backoff and freezes the session.

05. Enforcement, Account Suspension & Credit Forfeiture

When an account is flagged for abuse:

  1. Immediate Suspension: Active API keys and user authentication sessions are revoked immediately. Pending crawls are cancelled.
  2. Credit Forfeiture: Accounts suspended for intentional spamming or malicious scanning forfeit all recurring and top-up credit balances without eligibility for refund.
  3. Permanent Blacklist: The offending corporate domain, registrant email, and associated IP ranges are added to our permanent system exclusion list.

06. Abuse Reporting & Webmaster Escalations

If you are a webmaster, cybersecurity analyst, or hosting provider and believe an IP or crawler operating Web Extractor Pro has violated acceptable use standards, please submit an urgent incident report:

Abuse Desk: abuse@webextracto.com
Immediate Remedy: We will implement an emergency domain crawl block upon verification of ownership.