Quick answer
What is not allowed on a Wardmint domain?
Wardmint exists to defend brands, so it bans registering look-alikes of a brand you do not own. It also bans phishing, wallet drainers, fake airdrops, impersonation, malware, botnets, fraud that takes money from victims, and child sexual abuse material. These rules apply to every domain, whether or not it has Domain protection.
1. Registering names that imitate a brand you do not own
You may register your own brand's variants: other extensions, typos, hyphenated forms and look-alikes of your name. You may not register a name that imitates the name, token, product or website of a person or project that is not you or your client, whatever you plan to do with it. That is typosquatting. It includes misspellings, omitted or doubled letters, added words such as "login" or "claim", extension swaps and characters that look alike from other scripts.
If you register a name that is close to another project's brand, you must be able to show that you own the brand or act for its owner when we ask.
2. Phishing, drainers and fake airdrops
You may not use a domain to collect credentials, seed phrases or wallet approvals by deceit. This covers fake login and wallet-connect pages, pages that ask a user to sign a malicious transaction, drainer kits, fake airdrops and claim pages, fake support desks and cloned websites of a project or an exchange.
3. Impersonation and fraud
You may not impersonate a person, a team, a company or a project. You may not run a scam that takes money from victims, such as a fake investment platform, a fake token sale or a fake giveaway.
4. Malware and botnets
You may not use a domain to distribute malware, to control infected machines or to host command-and-control servers. You may not run pharming, which sends users to a fake site by tampering with DNS.
5. Child sexual abuse material
Child sexual abuse material is banned absolutely. It is handled immediately, with a report to the competent hotline or authority.
6. Spam and email abuse
You may not send unsolicited bulk email from a domain, or use a domain to forge the sender address of another party. The no-email DNS template that Wardmint provides exists to stop that kind of use of an idle domain.
7. What we do when a rule is broken
Phishing, malware, botnets and fraud that takes money from victims lead to action within 24 hours of a well-documented report. The action can be suspension of the domain or of its DNS.
A copyright, defamation, political or competitor complaint leads to no action on the complaint alone; it takes a decision that binds us. A UDRP provider's request locks the domain within 2 business days of a request from a UDRP provider. The reporting process is on the abuse page.
8. Domain protection does not change the rules
A domain with Domain protection follows the same rules and timings. The only difference is that a person reads each complaint before any action.
9. Changes
We may update this policy. The version date at the top shows the current text, and the terms of service explain how changes apply.