Offshore, in Panama · One verified email, no ID · We act on Panamanian court orders, not on complaints alone · Paid in crypto
Language: English
Search a domain

Optional · +$29 per year and per domain

Domain protection: your domain, registered in our company name

Four protections on top of the standard registration. The registrant record and the public WHOIS show a company in Panama, not you. You keep full control, and the abuse rules stay the same.

Last updated: · 14 min read

Quick answer

What is Domain protection at Isthmus Domains?

Domain protection costs $29 per year and per domain, on top of the domain price, as of 19 October 2026. DomaineGoat LLC becomes the registrant of record, the transfer lock is on, we keep only your email, and a person reads every complaint before any action. Isthmus Domains is an offshore domain registrar in Panama: register any domain with no KYC and pay in crypto.

Domain protection: key facts

Price+$29/year per domain, on top of the domain price
Registrant of recordDomaineGoat LLC, incorporated in Panama
BeneficiaryYou: full control of DNS, nameservers and renewal
Transfer lockOn by default; every transfer or DNS change is confirmed from your account
Your dataMinimal: DomaineGoat LLC holds only your email. Released only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case
ComplaintsEvery complaint read by a person before any action on the domain (only with Domain protection)
Extensions54 extensions
Sold with Domain protection only.de, .uk, .nl, .cc, .to, .ch, .pl, .be, .at, .cz, .nz, .fi
On a transfer in$29 covers the year the transfer adds; the time already paid at your current registrar is billed pro rata from your balance
Back to your own nameOn request, free of charge
Transfer codefree, requested from the client area

What are the four protections?

Domain protection adds exactly four things to a standard registration. Nothing else is promised.

1. Registered in our company name

The registrant record and WHOIS show DomaineGoat LLC, never you. You stay the beneficiary and can take the domain back in your own name, free of charge.

2. Transfer lock on by default

Every transfer or DNS change must be confirmed from your account. Access to your email alone is not enough to move the domain.

3. Your data kept to the minimum

DomaineGoat LLC holds only your email. The registrant record sent to our registrar partner and to the registry carries the company's details, not yours.

4. Every complaint read by a person

A person reads each complaint before any action on the domain, and you are told when the law allows it. This review exists only with Domain protection. Phishing, malware and child sexual abuse material are still handled at once.

What does each protection mean in practice?

Registered in our company name. With a standard registration, you are the registrant of record: the registrant record is yours, built from the email you verify. Registries that hold registrant data, such as .org (PIR) or .io (Identity Digital), receive it, even when public WHOIS hides it. With Domain protection, the registrant is DomaineGoat LLC, so they hold our company's details, not yours. The .com and .net registries (Verisign) are thin: they receive no registrant contact data either way, so on a .com the option changes what our registrar partner holds and what RDAP shows.

Transfer lock on by default. The domain carries a lock that blocks transfers to another registrar. To move it, or to change its DNS, you confirm the action from your account. This protects the domain if someone gains access to your email.

Your data kept to the minimum. DomaineGoat LLC holds only your email, plus the orders and records needed to manage the domain. The registrant record sent to our registrar partner and to the registry carries the company's details, not your email. DomaineGoat LLC releases the data it holds only when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP case.

Every complaint read by a person. A person reads the complaint and checks it against our policy before any action on the domain, and you are told when the law allows it. Phishing, malware and child sexual abuse material are still handled at once. Without Domain protection, complaints follow the abuse policy: an acknowledgement with a reference number, no action on a complaint alone about copyright, defamation, politics or from a competitor, and action within 24 hours of a well-documented report on phishing, malware, botnets or fraud. The reading by a person and the notice to you come with the option.

Standard registration vs Domain protection

Standard registrationWith Domain protection
PriceThe domain price only, e.g. $11.99/year for a .comDomain price + $29 a year
Registrant of recordYouDomaineGoat LLC
What the registry receivesThe registrant record built from your verified email (registries such as .org or .io); the .com and .net registries receive no contact dataOur company's details as registrant
Public WHOIS / RDAPYour email hidden where the extension allows privacy; what stays public depends on each registryDomaineGoat LLC, never you
Transfer lockManaged by youOn by default; transfers and DNS changes confirmed from your account
Complaint handlingThe abuse policy: no action on a complaint alone about copyright, defamation, politics or from a competitor; phishing, malware, botnets and fraud acted on within 24 hours of a well-documented reportA person reads every complaint before any action on the domain, and you are told when the law allows it
Release of your dataOnly when Panamanian law requires it (a Panamanian court or prosecutor's order), or in a UDRP caseSame rule; the registry and our registrar partner hold the company's details, not yours
What DomaineGoat LLC holdsYour verified email and your ordersYour verified email and your orders; the registrant record carries the company's details, not yours
UDRP trademark complaint (generic extensions)Filed against youFiled against DomaineGoat LLC; we tell you, and you can defend
Control of DNS, nameservers, renewalYouYou
On a transfer inThe transfer price of the extension+$29 for the year the transfer adds; time already paid elsewhere billed pro rata
ExtensionsEvery extension we sell, except those below54 extensions; the only way to buy .de, .uk, .nl, .cc, .to, .ch, .pl, .be, .at, .cz, .nz, .fi

Who sees what

Five parties can see data about a domain. Here is what each one sees, with and without Domain protection.

WhoStandard registrationWith Domain protection
The registry (e.g. PIR for .org, Identity Digital for .io; the .com and .net registries hold no contact data)The registrant record built from your verified email, kept under the registry's own lawDomaineGoat LLC and its address in Panama
Our ICANN-accredited registrar partner, shown in RDAPThe registrant record built from your verified email, under ICANN rulesDomaineGoat LLC's details as registrant
The public WHOIS / RDAP lookupRegistrar, dates, status, nameservers; personal data redacted where allowedRegistrar, dates, status, nameservers, and DomaineGoat LLC as registrant
Isthmus Domains (us)The verified email of each domain, your ordersThe verified email of each domain and your orders; your email stays with us
YouEverything, with full controlEverything, with full control as beneficiary

A UDRP provider receives the registrant record: yours for a standard registration, that of DomaineGoat LLC with Domain protection.

What stays yours?

The domain stays yours to use and to leave with. DomaineGoat LLC is the registrant of record, and you are the beneficiary.

  • Full control: DNS records, nameservers and renewals are managed from your account, as with any domain.
  • A free transfer code: free, requested from the client area. You can move the domain to another registrar.
  • Back to your own name: on request, we hand the domain over to your own name, free of charge.

These rules are written in the terms of service, in the clause on Domain protection.

What Domain protection does not do

It keeps you out of the registrant record. It does not give a domain immunity. The abuse rules are the same for every domain, protected or not; the option adds a reading by a person before any action.

  • Strict exceptions still apply: phishing (including pharming), malware, botnets, child sexual abuse material and fraud that takes money from victims lead to suspension within 24 hours of a well-documented report (CSAM: immediately, with a report to the competent hotline or authority).
  • Panamanian law still decides: a Panamanian court or prosecutor's order, or a foreign judgment recognised in Panama, is applied, and it can include the release of the email we hold.
  • UDRP decisions are applied: a trademark panel can order a transfer. We tell you about the complaint so you can defend yourself.
  • Your hosting and payment are separate: the option does not hide the server that hosts your site. A crypto payment stays visible on its public blockchain.

The full complaint process is on complaints and court orders.

How much does Domain protection cost?

$29 per year and per domain, on top of the domain price. It renews each year with the domain. Some examples as of 19 October 2026:

  • .com: $11.99/year for the domain + $29 for Domain protection.
  • .io: $34.49/year the first year, then $52.99/year, + $29 each year.
  • .ai: $85.49/year, sold 2 years at a time, + $29 for each year.
  • .de, sold with Domain protection only: $36.99/year in total, of which $7.99 is the domain.
  • .uk, sold with Domain protection only: $38.49/year in total, of which $9.49 is the domain.

All prices are on the pricing page, paid from your crypto balance.

Which extensions can have Domain protection?

Domain protection is available on 54 extensions: .com, .net, .org, .io, .ai, .co, .app, .dev, .xyz, .info, .me, .de, .uk, .online, .shop, .store, .site, .tech, .nl, .biz, .tv, .cc, .gg, .to, .ch, .pl, .be, .at, .cloud, .vip, .club, .live, .pro, .blog, .art, .design, .agency, .studio, .digital, .world, .life, .space, .website, .fun, .page, .link, .network, .email, .media, .news, .software, .cz, .nz, .fi.

12 of them are sold with Domain protection only: .de, .uk, .nl, .cc, .to, .ch, .pl, .be, .at, .cz, .nz, .fi. Their registries want a name and a postal address in the record, and some publish or check them under national rules. Registering them in our company name means the registry receives the details of DomaineGoat LLC, not yours. Each one has its rules on the extensions page.

How is it different from free WHOIS privacy?

WHOIS privacy hides your email from the public; Domain protection takes you out of the registrant record itself.

With free WHOIS privacy, you are the registrant. Registries that hold registrant data, such as .org (PIR) or .io (Identity Digital), keep the registrant record under their own law, and the public record hides your email where the extension allows it. With Domain protection, the registrant is DomaineGoat LLC: the registrant record carries the company's details, and the public record shows our company. On a .com or a .net, Verisign receives no contact data in either case.

WHOIS privacy is enough for most domains. Domain protection is for people who also want a transfer lock, a reading by a person of every complaint, and no personal record at the registrar or the registry. Our guide shows how to check what WHOIS shows in each case.

Domain protection vs Njalla's model

Njalla, a privacy domain service based in Costa Rica, also registers domains in its own name. Here is how the two compare, from its public pages.

Checked 8 and 19 October 2026 (date per row)
Isthmus Domains with Domain protectionNjalla
Registrant of recordDomaineGoat LLC (Panama)Njalla's own company (per its terms)
Company countryPanamaCosta Rica (njalla.srl), after a move from Nevis in late 2024
Price of a .com$11.99/year + $29€15/year, in its name by default
Crypto acceptedBTC, USDT, USDC, ETH, SOL, LTCBTC, XMR, LTC, ETH
Monero✗✓
Free hand-back to your own nameYes, on requestCheck its terms
Checked on19 October 20268 October 2026

Njalla prices from njal.la/pricing, read on 8 October 2026. Njalla's .com in its name costs less than a .com with our Domain protection. Our plain .com ($11.99/year) costs less than Njalla's €15.

Njalla or Isthmus Domains: which one fits?

If you want the smallest bill for a domain held in a company's name, and you pay in Monero, Njalla fits better. Its .com is €15 a year as of 8 October 2026, less than our .com with Domain protection.

If you want to choose for each domain between your own name and a company name, Isthmus Domains fits better. The plain .com costs $11.99/year with free WHOIS privacy, and you add the option only where you need it. Our rules on complaints, court orders and data are written for Panama. The full side-by-side view is on Njalla vs Isthmus Domains.

How do I add or remove Domain protection?

Tick Domain protection when you order, or add it later from your account. It is paid from your balance at $29 a year. On a transfer in, $29 covers the year the transfer adds, and the time already paid at your current registrar is billed pro rata from your balance once the transfer is done.

To stop it, ask for the domain to be handed over to your own name, free of charge. The registrant record then shows you, with WHOIS privacy where the registry allows it. For the 12 extensions sold with Domain protection only, the hand-back depends on the registry's own rules for a registrant in your name.

Domain protection: FAQ

If the domain is in your company's name, is it still mine?

Yes. DomaineGoat LLC is the registrant of record, and you are the beneficiary. You control DNS, nameservers and renewals from your account. You can get the transfer code for free and move the domain, or ask for it to be put in your own name at no cost. The terms of service set this out in writing.

Does Domain protection stop every takedown?

No. It sells discretion towards the registrar and the registry, not immunity. Phishing, malware, botnets, child sexual abuse material and fraud that takes money from victims lead to suspension on a well-documented report. A Panamanian court order is applied. What it adds is a reading by a person of every complaint before any action on the domain, and a notice to you when the law allows it; that review is not part of a standard registration.

What happens in a UDRP trademark dispute?

The complaint is filed against the registrant of record, DomaineGoat LLC. We tell you, the beneficiary, so you can answer the complaint and defend yourself. The domain is locked within 2 business days of a request from a UDRP provider, as for every generic extension; country codes follow their registry's own dispute policy. The panel's decision is then applied. See UDRP disputes.

How much does Domain protection cost on a .com?

A .com costs $11.99/year, and Domain protection adds $29 a year, so you pay both each year. The option is per domain: you can protect one name and keep your other domains as standard registrations. Prices as of 19 October 2026.

Why are .de and .uk sold only with Domain protection?

Because their registries want a name and a postal address for the registrant, under their national rules. We do not ask for yours, so the domain is registered in the name of DomaineGoat LLC. The price shown, for example $36.99/year for a .de, already includes Domain protection.

Can someone transfer my domain if they get into my email?

Not easily. With Domain protection, the transfer lock is on by default, and every transfer or DNS change must be confirmed from your account. Access to your email alone is not enough. Use a strong password and keep your account login private. We never ask for your password, your account number or your domain transfer (EPP) codes by email or chat.

Will you tell me if someone complains about my domain?

Yes, when the law allows it. A person reads every complaint about a protected domain before any action, and you are told about it. For phishing, malware and child sexual abuse material, we act at once, and the notice can come after the action. Without the option, complaints follow the abuse policy.

What does Domain protection change on a .com?

Verisign, the .com registry, is a thin registry: it receives no registrant contact data, with or without the option, and its RDAP shows the registrar, the nameservers and the dates. On a .com, Domain protection changes the registrant record held by our ICANN-accredited registrar partner, and what RDAP shows: DomaineGoat LLC instead of you. It also turns the transfer lock on and adds a reading by a person of every complaint.

Can I add Domain protection to a domain I transfer in?

Yes. Tick it on the transfer order: $29 covers the year the transfer adds, and the time already paid at your current registrar is billed pro rata ($29 a year) from your balance once the transfer is done. The transfer itself costs the transfer price of the extension, for example $11.99/year for a .com. The registrant of record then changes to DomaineGoat LLC, and the transfer lock goes on.

Sources (6)
  1. Njalla pricing njal.la/pricing — Njalla (checked 2026-10-08)
  2. Njalla has silently changed: a word of caution — independent blog (14 September 2025)
  3. Updated UDRP Rules — WIPO (checked 2026-10-19)
  4. Registration Data Policy now in effect — ICANN (21 August 2025)
  5. Global amendment to the RAA and Base gTLD Registry Agreement (DNS abuse) — ICANN (5 April 2024)
  6. ICANN Lookup (RDAP) — ICANN (checked 2026-10-19)

Protect a domain in our company name

Search a name and tick Domain protection at checkout, or add it later from your account.

.com $11.99/year · no KYC · crypto

Search a domain