1. About Threat Registry
Threat Registry is a threat-intelligence and community reporting service used to collect, review and publish information about scams, phishing, malware, account compromise, data breaches, vulnerabilities and related digital threats.
2. Using the service
You must use Threat Registry lawfully. You must not knowingly submit false allegations, impersonate another person, harass users, interfere with the service, distribute malware, expose live credentials, or submit content that you do not have the right to provide.
3. Reports and evidence
Reports submitted through Report an incident or File a report may be reviewed by Threat Registry staff and may be linked to an existing incident. Community reports may initially be labelled UNCONFIRMED while they are reviewed.
Uploaded evidence is treated as private case material and is not intended to be published through the public community feed. Do not submit passwords, session tokens, two-factor authentication codes, payment-card data, executable malware or other live secrets.
4. Threat intelligence and accuracy
Threat intelligence can change quickly. A listing, alert, community report, CVE import, automated detection or other record does not guarantee that information is complete, current or independently verified. Status labels should be interpreted in the context shown by the service.
5. Automated and external intelligence
Threat Registry may process information from public vulnerability databases and other intelligence sources. Automatically discovered material may be placed into a staff approval queue before publication. Information originating from third-party sources remains subject to the terms and attribution requirements of the original source.
6. Discord bot and integrations
The Threat Registry Discord bot and other integrations may deliver alerts, incident updates, intelligence notifications and related service features to connected communities. Discord server administrators are responsible for authorising the bot, granting appropriate permissions and configuring where information is delivered.
You must not use the bot, API or integrations to circumvent access controls, spam users, scrape restricted information, or misuse Threat Registry data.
7. Accounts
You are responsible for activity performed through your account and for keeping authentication details secure. Access may be restricted or removed where reasonably necessary to protect Threat Registry, its users or third parties.
8. Moderation
Threat Registry may review, correct, restrict, reject, archive or remove submissions where reasonably necessary, including material that is duplicate, misleading, unsafe, unlawful, abusive or irrelevant to the service.
9. Availability and reliance
The service is provided on an as-available basis. Features, integrations and data sources may change or become unavailable. Threat Registry is an intelligence resource and is not a substitute for professional legal, security, financial or emergency advice.
10. Operation and hosting
Threat Registry is operated from the United Kingdom. Primary service infrastructure is hosted in Germany within the European Economic Area.
11. Changes to these terms
These terms may be updated as Threat Registry develops. The current version will be published on this page.