Skip to content
apexly
How it worksWhy ApexlyComparePricingDocs
Log inGet API key
Last updated 18 October 2026

Acceptable use and abuse

Apexly serves domains for many businesses, so a single bad actor can hurt everyone. We screen every domain, act quickly on reports, and take down confirmed phishing within 24 hours.

On this pageReport abuseWhat is not allowedHow we screenWhat happens after a reportIf your domain was heldLaw enforcement

Report abuse

Use the report form at app.apexly.dev/abuse, or email support@apexly.dev with the subject "Abuse report".

Include:

  • the full URL or hostname, and what you saw there;
  • when you saw it (with time zone) and, if you have them, screenshots or email headers;
  • how we can reach you if we need more detail.

Reports through the form are acknowledged automatically.

What is not allowed

  • Phishing and credential theft, including pages that imitate banks, wallets, payment providers or well-known software.
  • Impersonation: hostnames or content made to pass for another organisation or person.
  • Malware, unwanted software and drive-by downloads.
  • Spam and pages that exist only to support spam.
  • Illegal content, including content that infringes others' rights. Child sexual abuse material is reported to the authorities and the account closed.
  • Attacks on the service: overloading it, probing other customers' data, bypassing limits, or registering hostnames you have no right to use.

How we screen

  • Every new domain and origin is checked against Google Safe Browsing.
  • Hostnames that closely resemble protected brands (banks, wallets, major software) are held for review before any certificate is issued.
  • Unusual bursts of new domains pause certificate issuance until reviewed.
  • A held domain is not served and no certificate is requested for it. An operator reviews holds within one business day.

What happens after a report

  1. We acknowledge the report and check the domain.
  2. If we confirm phishing or malware, we stop serving the domain within 24 hours and withhold its certificate; usually much faster.
  3. We tell the account owner what was found and what they must do, unless that would help the abuser or the law forbids it.
  4. Repeated or serious abuse closes the account.

If your domain was held

Holds are sometimes false positives, for example a legitimate careers site whose name looks like a brand. Reply to the email you received, or write to support@apexly.dev with the hostname and why it is legitimate. We review and release legitimate domains within one business day.

Law enforcement

Requests from law enforcement or courts should be sent to support@apexly.dev. We respond to valid legal process and preserve relevant records when asked.

apexly
DocsStatusChangelogHow it worksWhy ApexlyComparePricingAbusePrivacyTerms