Legal & Network Policy

Acceptable Use & Abuse Policy

Last updated: October 2026. What is and isn't allowed on HostCraft infrastructure, how to report abuse, and how quickly we act on reports.

Report abuse: Send evidence (timestamps, IPs, logs, full headers) to abuse@hostcraft.xyz. Every report gets a ticket reference. We acknowledge all reports within 24 hours and take action on verified abuse within 48 hours — faster for active attacks.

1. Prohibited Activities

The following are strictly prohibited on all HostCraft services (VPS, RDP, game servers, and web hosting). Violations may result in immediate suspension or termination without warning:

  • Fraud & financial abuse: card testing, carding, stolen payment credentials, account takeover tooling, fake identity or KYC document services, money mule operations.
  • Spam & unsolicited messaging: bulk unsolicited email, open mail relays, purchased mailing lists, comment/forum spam bots, SMS or messaging-platform spam.
  • Phishing & social engineering: credential-harvesting pages, brand impersonation, fake login or wallet-drain pages, scam infrastructure of any kind.
  • Malware & exploits: hosting, distributing, or linking to malware, botnets, C2 servers, ransomware, exploit kits, rootkits, or crypters.
  • Network attacks: originating or amplifying DDoS/DoS attacks, port scanning, brute-force attempts, or vulnerability scanning against systems you do not own or have written permission to test.
  • Illegal content: content that is unlawful in Pakistan or in the jurisdiction where the server is located — including child sexual abuse material (CSAM), which is reported to the relevant authorities immediately.
  • IP & copyright abuse: hosting or distributing pirated software, media, or content in violation of our Copyright Complaints procedure, or operating services designed primarily for infringement.
  • Resource abuse: cryptocurrency mining on plans where it degrades shared infrastructure, deliberate circumvention of resource limits, or reselling access to your service without written permission.

2. How We Enforce

  • Verified abuse: service suspended; customer notified with the evidence summary and given 24 hours to respond before termination, except where the activity must stop immediately (active attacks, CSAM, court orders).
  • Repeat violations: accounts with repeated confirmed abuse are terminated permanently.
  • Compromised services: if your server is compromised and used for abuse, we suspend outbound connectivity, notify you, and work with you to secure and restore it.

3. Reporting Abuse

To report abuse originating from HostCraft infrastructure:

  • Email abuse@hostcraft.xyz with the source IP address, timestamps (with timezone), and supporting evidence (logs, packet captures, full email headers, URLs).
  • You will receive a ticket reference within 24 hours.
  • Verified reports are actioned within 48 hours; active DDoS, malware distribution, and CSAM are handled on an emergency basis.
  • False or bad-faith reports may be disregarded; knowingly filing a false abuse report is itself a policy violation.

4. Law Enforcement & Third Parties

We cooperate with lawful requests from courts and law-enforcement bodies. Where a complaint does not clearly violate this policy or applicable law, we may ask the reporter for additional evidence before acting. Customer data is only disclosed per our Privacy Policy.

5. Changes to This Policy

We may update this policy as services evolve. Material changes are posted on this page with an updated date. Continued use of the service after changes take effect constitutes acceptance.