Acceptable use

Malaf hands out free hosting with no card and no wait, which is exactly what someone building a phishing page wants. These rules exist so the service stays useful for the people who publish plans, reports, and real sites. If you are doing ordinary work, none of this will ever affect you.

Harm to other people

• Material that sexually exploits or endangers a child. This is reported to the authorities and the account is closed permanently.
• Threats, harassment, stalking, or publishing someone's private information without their consent.
• Content that promotes violence against people or celebrates it.

Deception

• Pages that imitate another company, bank, or person to collect passwords, payment details, or personal data.
• Malware, ransomware, droppers, or a link in a chain that delivers them.
• Fake stores, fake giveaways, investment schemes, and anything else built to take money under false pretences.

Rights of others

• Content you do not have the right to publish, including copyright and trademark infringement.
• Leaked credentials, stolen databases, or private keys.

Load and cost

• Using Malaf as a general purpose proxy, a CDN for a site hosted somewhere else, a video platform, or a file drop for bulk distribution.
• Cryptocurrency mining, or scripts that run work in a visitor's browser.
• Getting around the limits with many accounts, rotating addresses, or automated sign-ups.
• Traffic that degrades the service for other people, including denial of service attempts against Malaf or from Malaf against anyone else.

Anything illegal where you are, or where the service is operated, is also not allowed even if it is not in this list.

Looking for weaknesses in Malaf itself is welcome, inside the rules on the security page. Using Malaf to attack somebody else is not. Do not scan, brute force, or flood systems that are not yours from anything you publish here.

Send the report to hi@jehaad.com with the word abuse in the subject. Include:

• The full link, so the exact address can be found.
• What is wrong with it, in a sentence or two.
• A screenshot, if the page changes depending on who opens it.

Reports are read by one person. Anything that is actively harming people, such as phishing or malware, is looked at the same day. Everything else within a few days.

The response fits the problem.

• A note. For something that looks accidental, you get told what to fix.
• Content removed. The address stops working. The rest of your workspace is untouched.
• Workspace suspended. For repeated breaches, or one serious one.
• Closed permanently. For material that harms children, for malware campaigns, and for deliberate attacks on the service.

Where it is reasonable you hear about it first. For active harm the content comes down first and the explanation follows.

Reply to the message you received, or write to hi@jehaad.com with the address and what you believe was misread. A person reviews it. If the call was wrong, the content goes back up and you get told why it was taken down in the first place.

If something on Malaf copies your work, send a notice to hi@jehaad.com containing:

1. The work being copied, and where it can be seen.
2. The Malaf link that carries the copy.
3. Your name and contact details.
4. A statement that you believe in good faith that the use is not authorised, and that the information you have given is accurate.

Valid notices are acted on quickly and the publisher is told what was removed and who asked. If you are that publisher and you believe the notice was wrong, reply with your reasons and the material can be restored.