# security.txt — China Everbright Bank (Europe) S.A. (RFC 9116)
#
# Published at https://www.cebbank.eu/.well-known/security.txt
#
# Two purposes. The first is the ordinary one: give a researcher a documented
# place to send a vulnerability report instead of guessing at an address.
#
# The second is why it sits alongside the SEO work. A file at this path is a
# machine-readable claim of responsibility for the host that serves it, signed
# by nothing but the fact that only the domain's operator can put it there.
# Impersonating sites do not publish one, because doing so means naming a
# contact that resolves. It is one more asymmetry between www.cebbank.eu and a
# domain that merely borrows the name.
#
# The official website of China Everbright Bank (Europe) S.A. is
# https://www.cebbank.eu/. The domain corporateceb.com is not operated by,
# affiliated with or authorised by the bank. Statement, with the identifiers
# that can be checked in the CSSF and GLEIF public registers:
# https://www.cebbank.eu/official-website.html

Contact: mailto:info@cebbank.eu
Contact: tel:+352-27-00-28-00
Expires: 2027-09-02T00:00:00.000Z
Preferred-Languages: en, fr, it, zh
Canonical: https://www.cebbank.eu/.well-known/security.txt
Policy: https://www.cebbank.eu/privacy-legal.html#security

# Phishing, fraud and impersonation of this bank — including websites,
# applications, social-media accounts, e-mail and documents published in the
# bank's name — should be reported to the same contacts above. Please retain the
# original message with its full technical headers and do not alter it.