Acceptable Use Policy

Prohibited uses of domains registered with doma.in, abuse reporting requirements and the measures we may take.

Last Updated

This policy applies to every domain registered with doma.in, to all of its subdomains and to every service reachable through them, regardless of who operates them. It is part of the Terms of Service. The domain holder is responsible for these domains and services, including subdomains made available to others.

1. Prohibited Uses

You must not use a domain for any of the following purposes, or allow others to do so:

  • VPN and internet proxy services. Operating, selling, reselling or promoting VPN or internet proxy services for others, whether paid or free. This includes service websites, customer portals, subscription and configuration distribution, authentication endpoints and connection nodes. This restriction is a condition of our service and applies even where the activity is lawful.
  • Phishing and credential theft. Impersonating a person or organization to obtain passwords, verification codes, payment details or other confidential information, including through fake sign-in pages or payment requests.
  • Spam. Sending unsolicited bulk email or messages, or promoting a service through them. This includes using the domain in sender addresses, message links, landing pages or redirects.
  • Malware. Hosting, distributing or linking to software intended to damage devices, steal information or gain unauthorized control, including ransomware and spyware.
  • Botnets and network attacks. Directing compromised devices, conducting denial-of-service attacks, or offering attack services. Using a domain to gain unauthorized access to systems or accounts is also prohibited.
  • Fraud. Operating fraudulent shops, investment schemes or payment services, selling stolen accounts or financial information, or otherwise deceiving people to obtain money or data.
  • Child sexual abuse and exploitation. Hosting, distributing, promoting or providing access to material depicting the sexual abuse or exploitation of minors, including generated or altered depictions. Soliciting such material or using a domain to facilitate the sexual exploitation of minors is also prohibited.
  • Violent extremism and terrorism. Promoting or inciting politically, ideologically or religiously motivated violence, including attacks on civilians or the violent overthrow of a government. This includes propaganda supporting such acts, recruitment, fundraising, training and coordination for groups that carry them out.
  • Threats, harassment and incitement to hatred. Threatening violence, organizing targeted harassment, publishing private information to intimidate or endanger someone, or inciting hatred or violence against people because of characteristics such as race, nationality, religion, sex, sexual orientation or disability.
  • Unlawful content and transactions. Publishing unlawful content or using a domain to arrange unlawful transactions or activities.
  • Infringement. Infringing copyright, trademarks or other rights, including distributing unauthorized copies or selling counterfeit goods.
  • Impersonation. Falsely claiming to be, represent or be affiliated with the registry, Show Corporation, or another person or organization.
  • Concealing abuse. Using redirects or rapidly changing DNS records to disguise prohibited services or their location.
  • Evasion of enforcement. Using another domain, subdomain or account to continue a prohibited use after we have suspended or restricted it.

These restrictions apply to the domain’s use for websites, email, APIs and network connections, as well as redirects and links used to provide or promote a prohibited service. Hosting the content or service with another provider does not remove the domain holder’s responsibility.

2. Reporting Abuse

Please email [email protected] with the following information:

  • the domain name or names;
  • a description of the issue and the full URLs; for email reports, include the complete message and headers;
  • the date, time and time zone of your observation;
  • your contact details so we can request further information.

For malware reports, please provide a link, file hash or sandbox report without attaching the malware. For child sexual abuse material, provide the URL and relevant details without downloading, copying or attaching the material.

We do not pass your name or email address to the domain holder unless you agree. Please send law enforcement requests to [email protected].

3. Review and Enforcement

We review reports and the available evidence. In clear cases of serious abuse, including phishing, malware, child sexual abuse material, ongoing network attacks or incitement to violence, we act immediately without prior notice to the holder. We report child sexual abuse material to the appropriate authorities.

In other cases, we may ask the holder to explain the use or remedy the breach within a specified period. If the holder does not respond, fails to remedy the breach or repeats it, we may suspend or delete the domain or disable the account.

Depending on what we find, we may:

  • put the domain on hold (serverHold), so that its delegation is withdrawn and it stops resolving;
  • lock the domain against changes, renewal or deletion while the case is open;
  • delete the domain;
  • disable the account, so that it can no longer place orders or change its domains.

A holder who believes a decision was made in error may request a review by emailing [email protected].

4. Fees

Fees paid for a domain that is suspended or deleted under this policy are not refunded.

5. Contact

  • Show Corporation
  • 838 Walker Road, Suite 21-2, Dover, Delaware 19904, United States
  • Phone: +1 (302) 520-2333
  • Abuse: [email protected]

This policy is published in Simplified Chinese, Traditional Chinese and English. If the language versions differ, the English version prevails.