We discovered a critical security issue affecting your systems and attempted to contact you through secure and private means,
including an internal-only access point:
private disclosure channel.
Despite our best efforts and deadline extensions, no acknowledgment was received.
Instead of engaging in dialogue, responses included silent patching attempts and takedown reports against the researcher.
Ignored Contact Timeline
April 15, 2025: Initial vulnerability report sent to MAD Colour’s official contact email.
The message included proof of our previous work with other companies, complete with email screenshots showing previous reports.
Instead of replying, they reported our business email.
April 16, 2025: A private and secure internal chat link was provided for their team to review the issue discreetly.
No response.
April 17, 2025: We uploaded archived evidence to
Internet Archive.
MAD Colour attempted to file takedown requests to remove the record instead of addressing the issue.
April 18–20, 2025: They silently relocated the vulnerable site without fixing the root issue.
Still no communication received.
April 21, 2025: A final warning was issued, and all previous attempts were documented.
There was still no response from MAD Colour Ltd.
Every step was handled professionally, in good faith, and privately. Their only action? Avoidance, takedown requests, and silence.
Ongoing Risk Remains
⚠️ Please be aware that website relocation or infrastructure changes alone will not resolve this issue.
The underlying vulnerability remains exploitable until addressed correctly.
Why This Page Exists
This page exists as a timestamped, documented statement of non-responsiveness.
It is not intended as a threat, but as a final record of efforts made to resolve this matter professionally and discreetly.
If you are seeing this message, your system or hosting may still be linked to MAD Colour Ltd’s infrastructure.
If you wish to avoid reputational spillover, we encourage you to ask MAD Colour to resolve this responsibly.