# Acceptable use policy

> Isthmus Domains acceptable use policy: phishing, malware, botnets, CSAM and fraud lead to suspension; other disputes need a Panamanian court or the UDRP.

- URL: https://isthmusdomains.com/acceptable-use/
- Last updated: 2026-10-19
- Publisher: Isthmus Domains (https://isthmusdomains.com)

What you may not do with a domain registered through Isthmus Domains, split into two groups: the strict exceptions that lead to suspension, and the disputes that a court or the UDRP must decide.

**Quick answer — What is not allowed with a domain from Isthmus Domains?**

Under this policy of 19 October 2026, 5 uses lead to suspension on a well-documented report: phishing, malware, botnets, child sexual abuse material and fraud on victims. Any other dispute needs a Panamanian court decision or the UDRP. Isthmus Domains is an offshore domain registrar in Panama: register any domain with no KYC and pay in crypto.

## 1. Scope

This policy applies to every domain registered, renewed or transferred through Isthmus Domains, with or without [Domain protection](https://isthmusdomains.com/domain-protection/), and to every account. It is part of the [terms of service](https://isthmusdomains.com/legal/terms/). The operator is DomaineGoat LLC, incorporated in Panama.

Domains are registered through our ICANN-accredited registrar partner. Every domain follows ICANN rules. The registry of each extension also has its own policy, which applies on top of this one.

## 2. Group A: strict exceptions that lead to suspension

A domain used for one of the following is suspended within 24 hours of a well-documented report:

- **Phishing**, including pharming: pages or DNS records that trick people into giving passwords, card numbers or wallet keys.
- **Malware**: serving or controlling software that infects, encrypts or spies on devices.
- **Botnets**: command-and-control domains and the domains a botnet generates to find its servers.
- **Child sexual abuse material (CSAM)**: any such material, handled immediately, with a report to the competent hotline or authority.
- **Fraud that takes money from victims**: fake shops, investment and crypto scams, wallet drainers, impersonation of a bank or brand, and the sale of stolen data.

Spam falls in this group only when it carries one of these abuses. Reports go to abuse@isthmusdomains.com; see [abuse reports](https://isthmusdomains.com/abuse/).

## 3. Group B: matters decided by a court or the UDRP

We take no action on a complaint alone in the following matters. A decision from a Panamanian court is needed, and a foreign judgment must first be recognised by the Fourth Chamber of Panama's Supreme Court:

- copyright and other intellectual property claims, except trademarks under the UDRP;
- defamation and claims about the truth of content;
- political content and criticism of public figures or governments;
- complaints from competitors;
- trademark claims made outside the UDRP;
- questions about sanctions;
- content about drugs or weapons;
- content that a court abroad ordered removed.

Trademark disputes that meet the UDRP go to an approved provider, and we apply the panel's decision. See [UDRP disputes](https://isthmusdomains.com/udrp/).

## The two groups side by side

|  | Group A: strict exceptions | Group B: other matters |
| --- | --- | --- |
| Examples | Phishing, malware, botnets, CSAM, fraud on victims | Copyright, defamation, politics, competitors, trademarks, sanctions, drugs and weapons content |
| What triggers action | A well-documented report to abuse@isthmusdomains.com | A Panamanian court decision, or a UDRP panel decision for trademarks |
| Timing | within 24 hours of a well-documented report; CSAM immediately, with a report to the competent hotline or authority | After the decision; first reply to the sender within 2 business days |
| Result | Suspension of the domain | What the decision orders |

## 4. Your own duties

You are responsible for the content and use of your domain, and for following the law of the countries where you live and publish. A registrar in Panama does not change the law that applies to you. Offshore does not mean above the law.

You must keep a working email on each domain, because the registrant email is verified after registration, as ICANN rules require (within 15 days). Under the 2013 Registrar Accreditation Agreement, wilfully giving false contact data, or failing to answer a request to confirm it, is a breach that can lead to suspension or cancellation.

You must also follow the rules of the registry of your extension, for example HTTPS for .app and .dev.

## 5. How we enforce this policy

We check whether the report is one of the strict exceptions (phishing, malware, botnets, CSAM, fraud against victims). For Group A, the domain is suspended once the evidence shows the abuse. With Domain protection only, a person reads every complaint before any action on the domain, and the beneficiary is told when the law allows it. For Group B, we write back to the sender with the route to follow and leave the domain as it is.

A suspended domain can be restored when the abuse has stopped and the cause is fixed, for example after a hacked site is cleaned. Repeated abuse can lead to the closure of the account. Unused balance follows the [terms](https://isthmusdomains.com/legal/terms/): Unused balance stays on your account and never expires, and it pays for new domains, renewals and transfers. When a purchase costs less than the minimum top-up, the part added only to reach the minimum is refundable on request to support within 30 days of the payment, in USDT or USDC, as long as it has not been spent. The rest of the balance is not paid back, except where the law requires it.

## 6. Changes to this policy

We may update this policy when ICANN rules, registry rules or Panamanian law change. The date at the top of the page shows the version in force. Prices are not part of this policy; they are on the [pricing page](https://isthmusdomains.com/pricing/). Questions: support@isthmusdomains.com. This is not legal advice about your own use of a domain.

## Sources

1. [2013 Registrar Accreditation Agreement (Whois Accuracy Program; registrant obligations, §3.7.7)](https://www.icann.org/resources/pages/approved-with-specs-2013-09-17-en) — ICANN (checked 2026-10-19)
2. [2024 Global Amendments: DNS abuse](https://www.icann.org/resources/pages/global-amendment-2024-en) — ICANN (checked 2026-10-19)
3. [Updated UDRP Rules](https://www.wipo.int/en/web/amc/domain-name-disputes/resources/updated_udrp_rules) — WIPO Arbitration and Mediation Center (checked 2026-10-19)

---

Isthmus Domains: Isthmus Domains is an offshore domain registrar in Panama: register any domain with no KYC and pay in crypto. A .com costs $11.99/year; Domain protection adds $29 a year.