---
title: "Report abuse"
description: "How to report a site hosted on dply for phishing, malware, spam, copyright infringement or other abuse, and what happens next."
---

If a site hosted on dply is being used for phishing, malware, spam, copyright infringement or any other abuse, report it to the dply team. This page explains what to send and what happens after you report.

## Is the site on dply?

Sites on dply are served through Cloudflare. A site at an `on-dply.live` address (for example `my-app.on-dply.live`), a realtime endpoint at `realtime.dply.io`, or a custom domain whose DNS points at a dply project, is hosted by dply. If you aren't sure, include the URL anyway and we will check.

A site that only uses Cloudflare for DNS or proxying, and not dply, should be reported to Cloudflare directly.

## Send a report

Email [hello@dply.io](mailto:hello@dply.io) with "Abuse" in the subject line. Include:

- **The full URL** of the abusive content, not only the domain.
- **The kind of abuse**: phishing, malware, spam, copyright or trademark infringement, harassment, or something else.
- **Evidence**: screenshots, the email or message that linked to the site, or file hashes for malware.
- **When you saw it**, with a time zone.
- **For copyright or trademark claims**: the work you own, where the infringing copy is, and a statement that you are the owner or authorized to act for the owner.
- **How to reach you**, in case we need more detail.

To report a vulnerability in dply itself, email [security@dply.io](mailto:security@dply.io) instead. See [Compliance & security](/docs/compliance).

> [!WARNING]
> Don't send malware as an attachment. Send the URL or a file hash instead.

## Copyright notices (DMCA)

Send copyright notices to dply's designated agent at [dmca@dply.io](mailto:dmca@dply.io). A notice needs the elements in 17 U.S.C. § 512(c)(3): your signature, the work you own, the full URL of the infringing copy, your contact details, a good-faith statement that the use isn't authorized, and a statement under penalty of perjury that the notice is accurate and you're the owner or authorized to act for them. The site's owner can send a counter-notice to the same address. Accounts that infringe repeatedly are closed. See [Acceptable Use Policy](/acceptable-use#copyright).

## What happens next

1. We confirm the site is hosted on dply and review the report.
2. If the site breaks the rules, we disable it, and suspend the organization when the abuse is serious or repeated.
3. We tell the site's owner what was reported, unless doing so would put someone at risk or hamper an investigation.
4. We reply to you once the report is resolved.

Phishing and malware reports are handled first.

## If your site was disabled

If your site was disabled after a report and you believe it was a mistake, reply to the email you received, or contact [Support](/docs/support) with the site's URL.

## Related

- [Support](/docs/support)
- [Compliance & security](/docs/compliance)