TERMS OF USE
Effective date: 07.10.2026
1. Introduction and scope
1.1. These Terms of Use set out the conduct that is prohibited or restricted when using the website iwihost.net and the Services provided by HOST TELECOM LTD., a company incorporated in the United Kingdom, under the brand IWIHOST ("we", "us", "the Company"). They form part of the Agreement under the Terms of Service, and terms not defined here have the meaning given in the Terms of Service.
1.2. These Terms of Use apply to you and to each End User. You are responsible for compliance by End Users as set out in clause 5.1 of the Terms of Service.
1.3. The lists below are illustrative and do not limit the generality of these Terms of Use. We determine, acting in good faith, whether conduct falls within these Terms of Use, irrespective of whether it is expressly described. In case of inconsistency, the Terms of Service prevail.
1.4. Breach of these Terms of Use entitles us to take any measure under section 12 of the Terms of Service and the measures described in this document.
2. Lawful use and permitted use
2.1. You must use the Services only for lawful purposes. You must not use our infrastructure for activity that breaches applicable law or the rights of third parties, including copyright, trademark, personal data rights and other protected rights.
2.2. Subject to these Terms of Use and the Terms of Service, you may use a VPS or VDS for lawful purposes, including websites, web applications, APIs, databases, development and testing, game servers, corporate applications, your own services and storage of your own data. We do not restrict the software you install unless its use breaches these Terms of Use or the Terms of Service.
3. Spam and unsolicited communications
3.1. You must not use the Services for:
(a) sending unsolicited email (spam), including opt-in and opt-out mail programs and mail that directly or indirectly refers to a domain contained in an Account;
(b) spamvertising and mass unsolicited messaging via messengers, SMS or website contact forms;
(c) running unconfirmed mailing lists, including subscribing email addresses without the explicit and verifiable permission of the address owner or failing to keep the subscription confirmation of each address owner on file for the duration of the mailing list;
(d) purchasing, selling or using third-party or compromised email lists, or cultivating or collecting email addresses without prior notice to the owner;
(e) commercial email marketing in breach of applicable anti-spam and electronic marketing laws, or sending bulk mail from "disposable domain names" with whois privacy protection;
(f) advertising, transmitting or making available any software, program, product or service designed to facilitate unsolicited bulk email, pinging, flooding, mail spam, text spam or unsolicited bulk text messages;
(g) managing accounts on behalf of, or reselling any Services to, persons or firms listed in the Spamhaus Register of Known Spam Operations (ROKSO) database.
4. Phishing, fraud and carding
4.1. You must not use the Services for:
(a) phishing, fake login or authorisation pages, theft of logins and passwords, and social engineering aimed at stealing data;
(b) fake payment pages and the imitation of banks, payment systems or public authorities;
(c) fraudulent sites, theft and fraud, and redirects to resources of that kind;
(d) carding and everything related to it, including storing, selling or unlawfully obtaining stolen bank or payment data and card fraud;
(e) any other fraudulent or unlawful financial scheme.
5. Malware and botnets
5.1. You must not host, distribute or control, or redirect to sites that contain:
(a) viruses, Trojans, worms, time bombs, cancelbots, ransomware, RATs, stealers, loaders, droppers, exploit kits, spyware, malicious scripts or any other malicious software;
(b) botnets, command-and-control servers, bot clients or infrastructure used to manage infected devices.
6. Attacks and unauthorised access
6.1. You must not use the Services for:
(a) DDoS, DoS, UDP or TCP flood, amplification attacks, participation in botnets, or attacks on network infrastructure or third-party servers;
(b) stress tests of third-party infrastructure without the owner's permission (testing your own systems is permitted if it has no adverse effect on our infrastructure or on third parties);
(c) brute-force attacks, credential stuffing and password guessing;
(d) exploiting vulnerabilities in third-party systems, servers or databases, or obtaining unauthorised access to them;
(e) logging in to any server or account you are not authorised to access, accessing data or taking action to obtain services not intended for you, or stealing credentials;
(f) tampering with, modifying or breaching security or authentication measures without authorisation;
(g) interfering with, intercepting or expropriating any system, data or information, or interfering with service to any user, host or network, including by overloading or crashing any system;
(h) malicious actions against government and other organisations and executive authorities.
7. Scanning and security testing
7.1. Scanning of your own servers and infrastructure is permitted. Probing, scanning or testing the vulnerability of third-party systems, subsystems or networks is permitted only with the owner's authorisation.
7.2. You must not use a server for mass scanning of the Internet or of third-party networks if this creates a threat to infrastructure or results in abuse complaints.
8. Infringement of rights and counterfeit goods
8.1. You must not use the Services for:
(a) the unlawful distribution of software, games, films, series, music, books, databases, licences, activation keys, cracks, keygens or other material in which third parties hold rights;
(b) the sale, storage or promotion of counterfeit goods, forged documents, certificates or licences, or other goods or material that infringe third-party rights;
(c) replica sites or stores selling copies of watches, bags, clothes and similar goods.
9. Illegal content
9.1. You must not place or distribute material prohibited by applicable law. In particular, the following are prohibited:
(a) child sexual abuse material, including child pornography and content with models who appear to be under 18, incest and pornography involving animals;
(b) terrorist material and unlawful extremist content;
(c) material relating to unlawful trade, including online pharmacies selling illegal pharmaceuticals;
(d) fraudulent material and unlawfully obtained personal data;
(e) any other material prohibited by law.
10. Personal data
10.1. You must not use the Services for:
(a) doxxing and the publication of personal data of third parties without lawful basis, including passport data, bank data and logins and passwords;
(b) selling stolen databases;
(c) distributing confidential information obtained unlawfully.
11. Cryptocurrency
11.1. Lawful operations with cryptocurrencies are permitted. The following are prohibited:
(a) mining using resources of another person, installing miners without the knowledge of the system owner, and cryptojacking;
(b) using compromised servers for mining;
(c) fraudulent cryptocurrency projects;
(d) the unlawful storage or distribution of stolen cryptocurrency data.
12. Software licences
12.1. You must not use unlicensed or unauthorised software on the Services, including unlicensed Microsoft software. Licence activation and licence compliance are your responsibility, as set out in clause 7.1 of the Terms of Service.
13. IP addresses and network
13.1. IP addresses are provided solely for use with the relevant Service. You must not:
(a) add or use IP addresses that were not assigned to you or that belong to another person;
(b) engage in IP spoofing or attempt to conceal the source of unlawful activity;
(c) use IP addresses for actions that breach these Terms of Use;
(d) engage in activity that may lead to the blacklisting of IP addresses (including SpamHaus, StopForumSpam, SpamCop, Blocklist, antivirus databases and any other blacklists).
14. Resources
14.1. You must not deliberately create load aimed at disrupting our infrastructure, degrading the operation of other servers, overloading network equipment or the disk subsystem, exhausting shared resources or circumventing technical limits.
14.2. Intensive use of CPU, RAM, disk or network within your plan is not in itself a breach, provided it has no adverse effect on our infrastructure or other customers.
14.3. If a server creates problems for other users, including powerful DDoS attacks or excessive load on the network channel or disk subsystem, we may limit the load, suspend the server or offer a plan better suited to your needs.
15. Advertising and claims
15.1. You must not advertise, promote or make claims, on your website, to your own customers or in promotional materials, about services hosted on our infrastructure relating to:
(a) DDoS mitigation or any related service, including proxy protection, denial of service protection or mitigation, or DDoS or DoS services;
(b) any illegal or unlawful activity;
(c) any services designed to deceive, defraud, defame, coerce or entice others to engage in illegal activities.
16. VPN and proxy
16.1. A personal VPN or proxy for your own purposes is permitted. Personal use means use by you, your family members, a small number of acquaintances or other private purposes not connected with the mass commercial provision of VPN access.
16.2. A commercial VPN or proxy service, and the provision of VPN or proxy access to third parties beyond such personal use, requires our prior approval through the ticket system.
16.3. Without prior approval you must not:
(a) resell VPN or proxy access, or provide VPN access to third parties for payment;
(b) create a public VPN service or a commercial proxy service;
(c) use a VPS or VDS as a node of a large VPN or proxy network;
(d) host a large number of VPN users on one or more servers, or create infrastructure intended for mass issuing of VPN or proxy accesses.
16.4. We may approve a commercial VPN or proxy project individually and set requirements, including on the number of users, network load, IP addresses, number of servers, traffic, type of VPN or proxy, technical architecture, minimum resources, limits on network activity and number of connections, special tariffs and additional security requirements.
16.5. Regardless of approval, a VPN or proxy must not be used for spam, fraud, DDoS, brute-force attacks, scanning of third-party networks, circumvention of security systems, unauthorised access, malware, carding or any other prohibited conduct.
16.6. We may restrict or terminate a VPN or proxy service that generates a significant number of abuse complaints, results in the blocking of IP addresses, threatens our network or is used in breach of these Terms of Use.
17. Security of your server
17.1. You are responsible for the security of your VPS or VDS. In particular you must use reliable passwords, install updates promptly, use a firewall, restrict unnecessary network ports, protect SSH and RDP, control the applications you install, remedy vulnerabilities promptly and make backups of important data.
17.2. You must keep confidential your passwords, SSH keys, API keys, tokens and other access data and, if you suspect that your Account has been compromised, take immediate measures to protect it.
17.3. If your server is compromised and used for malicious activity, we may temporarily restrict network access to it.
18. Abuse complaints
18.1. We may receive complaints from server and website owners, network operators, data centres, rights holders, CERT and CSIRT teams, anti-spam services, authorities and other persons affected by the activity of your Services. Complaints may be submitted as set out in section 15 of the Terms of Service.
18.2. Receipt of a complaint does not by itself mean that you are in breach. We may examine the complaint and request further information from you.
18.3. Depending on the nature of the complaint we may request an explanation, require you to remedy the violation within a deadline we set, temporarily restrict the Service, suspend the server or terminate the Service.
19. Serious violations and repeated violations
19.1. We may suspend or terminate a Service immediately and without prior notice on detecting any of the following, or any other violation that we reasonably consider critical:
(a) an active DDoS or DoS attack, a botnet, phishing, ransomware, malware, mass spam or carding;
(b) an attempt to breach our infrastructure or unauthorised access to third-party systems;
(c) child sexual abuse material or other unlawful content;
(d) fraud or other unlawful activity;
(e) a serious threat to security.
19.2. Repeated violations may lead to a warning, restriction of the Services, blocking of individual network functions, suspension of the VPS or VDS or permanent termination.
19.3. After notice you must within a reasonable time take the measures necessary to stop the prohibited activity. Depending on the violation we may require you to remove malicious software, close a vulnerability, change passwords, reinstall the server, stop a particular type of network activity, remove prohibited content or provide an explanation.
19.4. Costs and losses caused by your breach, including costs of handling abuse complaints and IP address delisting, are recoverable under clause 12.4 of the Terms of Service.
19.5. We may report suspected unlawful activity to law enforcement authorities and disclose information as set out in clause 5.3 of the Privacy Policy.
20. General
20.1. The Terms of Service apply to these Terms of Use.
21. Contact
21.1. HOST TELECOM LTD., a company incorporated in the United Kingdom, operating the website iwihost.net under the brand IWIHOST.
General enquiries: through the ticket system on the Platform or at support@iwihost.net.