You may
Look up domains you own, manage, are considering buying, or have a legitimate reason to investigate; monitor your own domains; use results in your own reports with attribution; and list domains you are entitled to sell.
You may not
Use the tools to prepare or carry out an attack, to scan or probe systems you are not authorised to test, or to target individuals. Collect personal data from lookup results, or combine results to profile a person. Send automated or bulk requests beyond the published limits, run scrapers against result pages, or try to get around rate limits, for example by rotating addresses. Interfere with the service, test its security without our written permission, or access another person’s account or data. Post unlawful, infringing, deceptive or abusive content in listings, offers, notes visible to others or reports. Use the marketplace for money laundering, fraud, or the sale of domains obtained unlawfully.
Responsible disclosure
If you believe you have found a security problem, write to the contact address with enough detail to reproduce it and give us reasonable time to fix it before you publish. We will not take action against good-faith research that respects this policy and does not access other people’s data.
Enforcement
We may limit request rates, block addresses that overload the service, remove content, and suspend or close accounts that break this policy. Where the law requires, we cooperate with competent authorities.