Acceptable Use Policy (AUP) | SpiralBig

Standards governing legitimate cyber threat intelligence use of SpiralBig domain registration data.

Acceptable Use Policy

Effective Date: January 1, 2026 | Last Revised: September 15, 2026

This Acceptable Use Policy ("AUP") defines the binding terms and rules governing your use of SpiralBig's raw WHOIS datasets, newly registered domain files, historical archives, and API infrastructure. Compliance with this policy is strictly enforced to protect public registry integrity, prevent unlawful cyber activity, and safeguard our platform.

1. Mission and Ethical Principles

SpiralBig compiles and normalizes global domain registration data to empower cybersecurity defenders, forensic investigators, corporate brand protectors, domain investors, and legitimate B2B researchers. We enforce zero tolerance for malicious exploitation of domain intelligence feeds.

2. Prohibited Uses

You agree not to use the Service, feeds, or data for any of the following restricted activities:

A. Unsolicited Commercial Email (Spamming)

Using registrant email addresses or telephone numbers extracted from WHOIS feeds for unsolicited mass marketing, bulk email blasts, automated cold robocalls, or SMS spam in violation of the U.S. CAN-SPAM Act, the Canadian Anti-Spam Legislation (CASL), the EU ePrivacy Directive, or India's Telecom Commercial Communications Customer Preference Regulations (TCCCPR).

B. Cyberattack Staging & Malicious Reconnaissance

Conducting automated vulnerability scanning, credential stuffing, spear-phishing campaign preparation, ransomware infrastructure reconnaissance, or facilitating Advanced Persistent Threat (APT) operations against identified domain registrants or host systems.

C. Unlawful Harassment & Doxxing

Publishing, broadcasting, or weaponizing unredacted personal registrant records for the intent of doxxing, stalking, intimidation, extortion, identity theft, or harassment of private individuals.

D. Service Abuse & Infrastructure Attacks

Launching Denial-of-Service (DoS/DDoS) attacks against SpiralBig servers, attempting SQL injection or remote code execution exploits, sharing API access credentials across non-authorized parties, or circumventing query limits via bot networks or distributed rotating proxies.

3. Approved & Encouraged Use Cases

SpiralBig actively supports and encourages the following positive applications:

SOC Threat Hunting: Correlating newly registered typosquatting domains with targeted spear-phishing indicators of compromise (IOCs).
Trademark Enforcement: Identifying infringement, brand abuse, counterfeit sales portals, and filing UDRP administrative complaints.
Law Enforcement Investigations: Tracing historical registrar transitions, nameserver changes, and ownership trails for criminal fraud forensics.
B2B Enterprise Outreach: Identifying newly formed companies that have registered new web domains to offer legitimate web hosting, software engineering, and corporate design services with opt-out mechanisms.
DNS Health Monitoring: Monitoring dangling DNS pointers, hijacked nameservers, and sub-domain takeover risks.

4. Enforcement and Account Termination

SpiralBig monitors platform telemetry and investigates all abuse reports. If a customer is found to be in violation of this AUP, SpiralBig reserves the right, at its sole discretion, to issue formal warnings, throttle API access, revoke dataset download privileges, or immediately terminate the offending account without refund. SpiralBig fully cooperates with certified law enforcement agencies investigating malicious cyberactivity.

5. Reporting Violations

To report suspected violations of this Acceptable Use Policy, please forward relevant headers, logs, and evidence to abuse@spiralbig.com.