Terms
Permitted use, reliance limits, Provider Catalogue reuse, public-signal boundaries, sharing rules, affiliation limits, accuracy, freshness and service availability for ThreatScope Check.
ThreatScope Check is an independent public-interest project owned and stewarded by Bryan Chetcuti.
The Vigo Group may provide operational infrastructure and service support under a replaceable arrangement. This operational role does not make ThreatScope Check a Vigo Group product or confer authority over its methodology or findings.
ThreatScope Check provides public, point-in-time domain-layer observations for informational and triage purposes. Results are not a security audit, penetration test, compliance assessment, legal opinion, numeric rating, certification, or assurance claim about a domain.
Read the method page for how evidence and limits should be interpreted.
ThreatScope Check is intended for reasonable, good-faith review of public domain-layer signals. It must not be used as part of offensive activity against systems or people.
You must not use the live checking service to support abuse, harassment, unlawful activity, credential theft, phishing, unauthorised access, automated enumeration at scale, service disruption, or attempts to bypass rate limits or protective controls.
Reasonable automated retrieval of published Provider Catalogue release artefacts is permitted. That permission does not extend to high-volume automated use of the live domain-checking service or attempts to bypass protective controls.
ThreatScope Check permits the versioned Provider Catalogue release artefacts published under /provider-catalogue/releases/ to be retrieved, copied, cached, vendored or mirrored for lawful use in another application, internal tool or research workflow.
Consumers should preserve the catalogue version and release provenance so it remains clear which release informed a result. When identifying the source publicly, describe it as the ThreatScope Check Provider Catalogue and do not imply endorsement, partnership or a commercial relationship with ThreatScope Check or with a named provider.
This permission applies to the released Provider Catalogue artefacts made available through that public path. It does not grant rights in third-party documentation linked as evidence, provider names or trade marks, or other ThreatScope Check site or repository content except where separately permitted.
Provider associations are role-bound interpretations of public infrastructure evidence. They do not by themselves prove ownership, a supplier or customer relationship, active use, endorsement or a complete service chain. Downstream consumers are responsible for preserving those limits when presenting or acting on catalogue-derived associations.
You may submit relevant provider references, corrections and supporting publicly accessible evidence through Contact & feedback. Only submit material you are entitled to share, and do not include confidential information, credentials, private keys or material that could expose another person's private information.
Submissions are research inputs, not approved provider associations. ThreatScope Check may review, retain relevant technical evidence, follow links to public sources and cite verified public references in a future governed Catalogue release. There is no guarantee of a response, acceptance or publication, and a submission does not grant access to the protected Provider Registry.
ThreatScope Check may apply rate limits, restrict requests or suspend functionality where reasonably required to protect the service, its infrastructure, users or third-party systems.
Versioned Provider Catalogue release artefacts are immutable. Consumers should pin, cache or mirror the release they use rather than repeatedly fetching the same files. Reasonable automated retrieval is supported; excessive or abusive request patterns may be limited.
ThreatScope Check is provided as a public utility on a reasonable-efforts basis. Availability, performance and result completeness are not guaranteed.
ThreatScope Check reads public domain-layer information. You do not need to own or control a domain to view public signals about it, but you are responsible for using the service and interpreting results lawfully, responsibly and in context.
Results must not be used to harass, pressure, misrepresent, shame, or make unsupported claims about a person, organisation or domain operator.
You may share ThreatScope Check results, provided they are not altered, misrepresented, presented as certification, or used to imply conclusions the service does not support.
Results should be read with the accompanying evidence, method notes and limitations. A result is a point-in-time observation, not a finding of fault or endorsement.
Unless expressly stated, ThreatScope Check is not operated by, endorsed by, or affiliated with any registry, registrar, DNS provider, mail provider, security vendor, standards body, or government agency. Operational services supplied by the Vigo Group do not create product ownership, methodological authority or endorsement.
ThreatScope Check results may be incomplete, unavailable, delayed, stale, or affected by DNS propagation, third-party service behaviour, network conditions, rate limits, timeouts, implementation limits, or changes made by the domain operator after the check was run.
A result reflects what ThreatScope Check was able to observe at the time of the check. It should not be treated as a complete or permanent statement about a domain.
Related: Privacy notice and Contact & feedback.
