← Back to sign in

Acceptable Use Policy (AUP)

Effective Date: 27 September 2026

This AUP is part of, and incorporated by reference into, the

Terms of Service. Violating it is a material breach of the

Terms and can result in immediate suspension or termination of your

account without refund.

TL;DR

You may use the Service for any lawful purpose. You may not use it to harm others, to host criminal infrastructure, or to attack our platform or our upstream providers.

Strictly Prohibited

The following uses result in immediate suspension when detected, and termination on operator review:

Illegal Content and Activity

  • CSAM — Child Sexual Abuse Material in any form. We report to authorities (NCMEC in the US; the relevant national hotline elsewhere).
  • Terrorism — Content prohibited under the EU TCO Regulation 2021/784, the UK Terrorism Act, the US 18 U.S.C. § 2339, or any equivalent.
  • Fraud — Phishing, account-takeover, payment-card fraud, identity theft, "419" scams, romance scams, fake-invoice/business-email-compromise.
  • Unauthorized access — Penetrating, attempting to penetrate, or maintaining access to systems you do not own or have explicit written permission to test.
  • Malware C2 — Operating command-and-control endpoints for botnets, info-stealers, ransomware, or remote-access trojans.

Attacks on Others

  • DDoS / DoS — Operating, advertising, customer-of, or relaying for "booter" / "stresser" services. Direct attacks. Reflection / amplification.
  • Spam — Unsolicited bulk email, SMS, comments, account creation, DMs, or forum posts.
  • Credential stuffing / brute-force — Automated login attempts against services you do not own.
  • Scraping protected content at scale — Where the target site's published Terms expressly forbid automation and where your activity is likely to cause material harm.

Attacks on the Service

  • Port scanning the gateway or panel hosts — Beyond the SOCKS5 / HTTPS ports we publish. Scans are logged and trigger immediate suspension.
  • Attempting to extract upstream provider credentials — Reverse-engineering the SOCKS5 handshake, probing for VLESS UUIDs, traffic-correlation attacks on our pool.
  • Identifying our infrastructure operators or hosts — Beyond what the Service intentionally reveals. We isolate origin IPs behind Cloudflare deliberately.
  • Bypassing rate limits or quotas — Multiple accounts to evade per-account caps; spinning up sub-accounts solely to multiply throughput beyond plan limits.
  • Reselling without permission — Pay-per-use and subscription plans are for end-user use. Operating a sub-reselling business on top of the Service requires a written agreement.

Plain-Bad Behaviour

  • Doxxing or harassment — Distributing private information of an individual without consent.
  • Copyright infringement at scale — Distributing pirated copyrighted works such that the infringing distribution is the primary use of the account.
  • CSAM-adjacent legal grey areas — Including but not limited to non-consensual intimate imagery (NCII) of adults.

How We Detect Violations

  • Banned-target list — Targets we have identified (operator-curated, with placeholders flagged needs_legal_review) trigger critical-severity signals on the F9.6 abuse-detection scanner. Critical signals auto-suspend the account.
  • Error-rate anomalies — > 50% errors over 15 min suggests scraping a hostile target or probing.
  • Single-target bursts — > 80% of sessions to one host suggests scraping or DoS prep.
  • Third-party reports — Abuse complaints from upstream providers, registrars, or law enforcement.
  • Operator review — A human operator can suspend any account that, in their reasonable judgement, is causing harm.

Reporting Abuse

If you believe an account on the Service is being used for one of the prohibited activities above, contact us via the customer portal (if you're a customer) or via [email protected]. Include URLs / IPs / timestamps where possible.

We treat abuse reports seriously and aim to triage within 24 hours.

Appeals

If you believe your account was suspended in error, open a ticket via the customer portal. Provide context about your use case. A human operator will review.