Legal

Acceptable Use Policy

Last updated August 2026. This policy is binding on every account.

Ajaira.site is playful. This page is not. A free subdomain service survives only if it never becomes a delivery system for harm, so these rules are enforced strictly, quickly, and without negotiation in the clear cases.

Short version. Do not use an Ajaira subdomain to deceive, defraud, infect, harass or impersonate anyone. If you do, it comes down — usually within hours, without warning, and the account goes with it if we think it was deliberate.

1. Zero tolerance — immediate suspension, no warning

A subdomain is suspended the moment we confirm any of the following, and its DNS records are deleted so the hostname stops resolving worldwide:

Phishing and credential theft. Fake sign-in pages; imitation of banks, mobile-money services (bKash, Nagad, Rocket), payment processors, government portals, universities, couriers, or any real organisation; pages that harvest passwords, OTPs, PINs, card numbers, NID numbers or seed phrases.
Malware and malicious code. Hosting, linking to, staging or distributing viruses, trojans, ransomware, stealers, cryptominers or exploit kits; command-and-control infrastructure; malicious browser extensions or APKs.
Child sexual abuse material. Reported to law enforcement immediately, with full logs, in every jurisdiction that applies. No appeal.
Fraud and financial scams. Fake shops, investment and crypto schemes, advance-fee fraud, fake giveaways, forged receipts or documents, romance scams.
Attacks on others. DDoS staging or amplification, botnet control, port scanning, brute-force infrastructure, credential-stuffing tooling.
Trading on someone else's name. A subdomain that copies or closely imitates an existing trademark, brand, company or product name — nagad-app, daraz-support, bkash-login — is suspended on sight, whether or not the content is deceptive and whether or not you meant harm by it. We do not run an arbitration process and we do not wait for the rights holder to complain: the name comes down and you can appeal afterwards. Using your own company's name is fine, and we will restore it if you can show it is yours.
Content that incites violence against a person or an identifiable group.

2. Also prohibited — warning, then suspension

Spam. Bulk unsolicited email, SMS or messaging, and any hostname that supports it — landing pages, redirectors, tracking domains, SPF/DKIM records for a spam sender.
Deceptive redirects and cloaking. Showing one thing to a crawler or reviewer and another to a visitor; forced redirects; drive-by downloads.
Impersonation. Presenting yourself as a person, company or institution you are not, including deliberately confusable hostnames intended to be mistaken for a brand.
Harassment. Targeting a private individual; doxxing; publishing someone's personal data without consent; non-consensual intimate imagery.
Illegal content or trade under Bangladeshi law or the law where our infrastructure operates — including unlicensed pharmaceuticals, weapons, stolen data and counterfeit goods.
Large-scale infringement. Piracy indexes, stream-ripping services, or hosting others' copyrighted work at scale.
Platform abuse. Multiple accounts to evade limits, scripted mass-claiming of names, reselling or auctioning subdomains, squatting on names you have no intention of using, or evading a prior suspension.
Reselling access. Offering Ajaira subdomains as your own product or service, with or without charge, requires a partner agreement. That includes wrapping the API, sharing or sublicensing a partner token, and automating sign-ups on behalf of other people. Partner tokens are issued to a named account that stays accountable for everything provisioned under it.
Circumventing our controls. Defeating rate limits, the captcha, the reserved-name list or the record limits is itself a violation.

3. Explicitly fine

Personal sites, portfolios, CVs, university and class projects.
Project demos, staging environments, APIs, webhook endpoints.
VPS and server hostnames, verification records, mail routing.
Blogs, jokes, half-finished experiments, and things with no purpose whatsoever.
Security research and CTF infrastructure you are authorised to run, provided it targets only systems you own or have written permission to test.

“এটা দিয়ে কী করবো জানি না” — এটা সম্পূর্ণ বৈধ কারণ।

4. How reports are handled

Anyone can report. Use the abuse form — no account needed. You get a reference and a link to follow the thread and reply.
Triage. Phishing, malware and illegal-content reports are opened at urgent priority automatically. Everything else is queued.
Review by a person. Every report is read by a human, not a filter.
Action. Section 1 violations are suspended on confirmation. Section 2 violations get a notice to the account email and a deadline to fix the problem, typically 72 hours.
Escalation. Repeat or deliberate violations cost the whole account, not just the subdomain. Criminal matters are referred to the relevant authorities with logs.

We aim to act on confirmed phishing and malware within hours of a report. We are a small project and do not promise a response time, but we do promise that every report is read.

5. What suspension means

The subdomain's DNS records are deleted, so the hostname stops resolving everywhere as caches expire. You keep access to your account and your other subdomains unless the account itself is suspended. Suspended subdomains cannot be edited, appear in the showcase, or be released back to the pool by you.

6. Appeals

If you believe a suspension was a mistake, write to abuse@ajaira.site from the email address on the account, quoting the hostname and any ticket reference. Explain what the site actually is. We do reverse decisions when we get them wrong — a mistaken suspension of a legitimate project is a failure on our part, and we would rather hear about it than not.

Appeals against a section 1 suspension for CSAM are not accepted.

7. Law enforcement and legal requests

We respond to valid legal process from competent authorities. We retain audit logs, IP addresses and abuse reports after an account is deleted specifically so that repeat abuse can be investigated. Where the law allows it, we will tell an account holder that their data has been requested.

8. Our discretion

We may suspend or remove any subdomain that threatens the stability, reputation or legality of the platform, or where a hosting provider, registrar or registry requires us to act — including situations this policy does not specifically anticipate. That discretion exists so the service can survive, not so it can be used arbitrarily, and we will explain our reasoning if you ask.

9. Reporting

Abuse form for everything. For active phishing against a bank or a live malware download, email abuse@ajaira.site directly and put URGENT in the subject. Include the exact hostname, what you observed, and when.