Annex No. 4 to the Public Contract (Offer) for Equipment Placement (Colocation) Services

RULES FOR USING THE INTERNET

McLaut

CherkasyVersion effective 01 November 2026

Translation from Ukrainian. The Ukrainian version prevails.

These Rules are Annex No. 4 to the Public Contract (Offer) for Equipment Placement (Colocation) Services of LLC "McLaut-Service" and of TOV "MEDHOSTER.COM" published at https://mclaut.cloud. Sections 1–5 reproduce the McLaut Rules for Using the Internet; Sections 6–7 contain additional rules for colocation services. Terms defined in the Offer have the same meaning in these Rules; in Sections 1–5, the "user" is the Customer and any person using its Equipment.

General Provisions

The Internet is a global association of computer networks and information resources belonging to a great many different people and organisations. This association is decentralised, and no single binding set of rules (laws) for using the Internet has been established. There are, however, generally accepted norms of conduct on the Internet, intended to ensure that the activity of each user does not interfere with the work of other users.

The fundamental principle of these norms is as follows: THE RULES FOR USING ANY INTERNET RESOURCE ARE SET BY THE OWNERS OF THAT RESOURCE AND BY THEM ALONE (here and below, "resource" means any set of software and hardware that forms a single whole in one sense or another. An Internet resource may be, for example, a mailbox, a personal computer, a virtual or physical server, a local area network, a communication channel, etc.).

Practice shows that most Internet users expect other users to observe generally accepted network norms, because breaching them causes serious difficulties in the Network, both technical and human.

1. RESTRICTIONS ON INFORMATION NOISE (SPAM)

The development of the Network has made information overload one of the main problems for users. The network community has therefore developed special rules to protect users from unnecessary / unsolicited information (spam). In particular, the following are not permitted:

1.1. Mass distribution of messages by e-mail and other means of personal information exchange (including instant messaging services such as SMS, IRC, etc.) other than on the explicit and unambiguous initiative of the recipients.

The open publication of an e-mail address or of another personal messaging address cannot serve as grounds for including the address in any mass mailing list.

An address obtained in any way (through a web form, a subscription robot, etc.) may be included in a mailing list only if there is a proper technical procedure for confirming the subscription which guarantees that the address does not enter the list other than at the will of its owner.

The subscription confirmation procedure must rule out the possibility of an address being added to the recipient list of any mailing (one-off or regular) on the initiative of third parties (that is, persons who are not the owners of the address).

Any recipient must be able to leave the mailing list immediately and without difficulty as soon as they wish to do so. The possibility of leaving the list does not in itself justify adding addresses to the list without the will of their owners.

1.2. Sending e-mails and other messages containing attached files and/or of significant size without the prior permission of the addressee.

1.3. Sending (other than on the direct initiative of the recipient):

a) e-mails and other messages (including single ones) of an advertising, commercial or campaigning nature;

b) letters and messages containing rude and offensive expressions and proposals;

c) messages asking for the message to be forwarded to other available users (chain letters);

d) messages using impersonal ("role") addresses other than for their direct purpose as established by the owner of the addresses and/or by standards.

1.4. Posting messages in any electronic conference that do not match the topic of that conference (off-topic). Here and below, a conference means Usenet newsgroups and other conferences, forums and mailing lists.

1.5. Posting messages of an advertising, commercial or campaigning nature in any conference, except where such messages are explicitly permitted by the rules of that conference or their posting was agreed in advance with its owners or administrators.

1.6. Posting an article containing attached files in any conference, except where attachments are explicitly permitted by the rules of that conference or such posting was agreed in advance with the owners or administrators of the conference.

1.7. Sending information to recipients who have previously explicitly stated that they do not wish to receive this information, information of this category or information from this sender.

1.8. Using one's own or provided information resources (mailboxes, e-mail addresses, WWW pages, etc.) as contact details when carrying out any of the actions described above, regardless of the place in the Network from which these actions were carried out.

1.9. Activities providing technical support for sending spam (spam support services), such as:

a) targeted scanning of the content of information resources in order to collect e-mail addresses and addresses of other messaging services;

b) distribution of software for sending spam;

c) creation, verification, maintenance or distribution of databases of e-mail addresses or addresses of other messaging services (except where the owners of all addresses included in such a database have explicitly consented to the inclusion of their addresses in that specific database; the open publication of an address cannot be regarded as such consent).

2. PROHIBITION OF UNAUTHORISED ACCESS AND NETWORK ATTACKS

Attempts at unauthorised access to Network resources, network attacks and network hacking, and participation in them, are not permitted, except where an attack on a network resource is carried out with the explicit permission of the owner or administrator of that resource. In particular, the following are prohibited:

2.1. Actions aimed at disrupting the normal functioning of elements of the Network (computers, other equipment or software) that do not belong to the user.

2.2. Actions aimed at obtaining unauthorised access to a Network resource (a computer, other equipment or an information resource), the subsequent use of such access, and the destruction or modification of software or data that do not belong to the user, without the agreement of the owners or administrators of that information resource. Unauthorised access means any access in a manner other than that provided for by the owner of the resource.

2.3. Transmitting meaningless or useless information to computers or equipment of the Network that creates a parasitic load on these computers or equipment and on intermediate sections of the network, in volumes exceeding the minimum necessary to check the connectivity of networks and the availability of their individual elements.

2.4. Targeted scanning of network nodes in order to discover the internal structure of networks, lists of open ports, etc., other than to the minimum extent necessary for routine technical measures that are not intended to breach clauses 2.1 and 2.2 of this document.

3. COMPLIANCE WITH RULES SET BY RESOURCE OWNERS

The owner of any information or technical resource of the Network may set its own rules for using that resource.

The rules for using resources, or references to them, are published by the owners or administrators of these resources at the point of connection to such resources and are binding on all users of these resources.

The rules must be easily accessible and written with the different levels of users' knowledge in mind.

The rules for using a resource set by its owner must not violate the rights of the owners of other resources or lead to abuse of other resources.

The user must comply with the rules for using a resource or immediately stop using it.

Where the rules set by the owner of a resource contradict any clauses of this document, the rules set by the owner apply to that resource, provided this does not lead to violations with respect to other resources.

Where the owner of a group of resources has explicitly set rules for only some of the resources, the rules set out in this document apply to the others.

4. PROHIBITION OF FALSIFICATION

A significant part of the Network's resources does not require user identification and allows anonymous use. In some cases, however, the user is required to provide information identifying the user and the means of access to the Network that the user uses. In doing so, the user must not:

4.1. Use the identification data (names, addresses, telephone numbers, etc.) of third parties, except where those persons have authorised the user to do so.

4.2. Falsify its IP address or addresses used in other network protocols when transmitting data to the Network.

4.3. Use non-existent return addresses when sending e-mails and other messages.

4.4. Be careless about the confidentiality of its own identification details (in particular, passwords and other authorised access codes), which may lead to resources being used by third parties on behalf of the user.

5. CONFIGURATION OF OWN RESOURCES

When working on the Internet, the user becomes a full participant in it, which creates a potential opportunity for resources belonging to the user to be used by third parties. The user must therefore take appropriate measures to configure its resources so as to prevent their abuse by third parties and, if such abuse is detected, take prompt measures to stop it.

Examples of potentially problematic configuration of network resources are:

• open e-mail relays (open SMTP relays);
• news servers (conferences, groups) open to unauthorised publication;
• means that allow third parties to hide the source of a connection without authorisation (open proxy servers, etc.);
• publicly accessible broadcast addresses of local networks that allow smurf-type attacks to be carried out;
• electronic mailing lists with an insufficiently reliable subscription confirmation mechanism or without the possibility to unsubscribe;
• websites and other similar resources that send correspondence to third parties on an anonymous or insufficiently authenticated request.

6. ADDITIONAL RULES FOR COLOCATION SERVICES

6.1. The Customer uses only IP addresses provided by the Contractor and does not announce third-party IP addresses or networks through the Contractor's network without the Contractor's written consent (clause 5.2.3 of the Offer).

6.2. It is prohibited to place on the Equipment information that violates the legislation of Ukraine or the rights of third parties, promotes violence, terrorism or separatism, or incites hatred, and to use the Services for spam, cryptocurrency mining, network attacks or other unlawful activity (clause 5.2.5 of the Offer).

6.3. Traffic transit software (proxy, VPN, etc.) may be used on a server provided that incoming foreign or local traffic does not exceed 30% of the corresponding outgoing traffic. If it does, the Contractor may suspend the Services until explanations are provided and the breach is remedied (clause 5.3.2 of the Offer).

6.4. The Customer keeps its Equipment secure: it installs software updates promptly, uses strong passwords and does not leave publicly accessible services that can be used for attacks, in particular open DNS resolvers, NTP, SNMP and memcached servers, open mail relays and proxy servers.

6.5. The Contractor forwards to the Customer third-party complaints concerning the Customer's IP addresses. The Customer immediately stops any ongoing activity that harms other networks and informs the Contractor of the measures taken within 2 (two) working days.

7. CONSEQUENCES OF BREACH

7.1. If these Rules are breached, the Contractor may suspend the Services in whole or in part under clause 5.3.2 of the Offer, including by blocking an individual IP address, until the breach is remedied. In the cases provided for in clause 9.3 of the Offer, the Contractor may terminate the Contract.

7.2. The Customer compensates the Contractor for losses caused by a breach of these Rules, in particular the costs of removing the Contractor's IP addresses from blacklists.

7.3. The Contractor may amend these Rules in accordance with clause 9.2 of the Offer.