How we make UnHackMe Safety Reports
Every UnHackMe Safety Report comes from Greatis Software IntelDB, our database of threats and safe sites. A verdict is never a guess: each report lists the facts behind it, the date of the last check, and who made the decision.
IntelDB keeps safe sites as well as dangerous ones, because knowing that a site is clean is as useful as knowing that it is not.
Where our information comes from
| Source | What it tells us |
|---|---|
| UnHackMe Security Team | Our specialists study threats by hand, including the ones they remove from users' computers. |
| UnHackMe detections | How often UnHackMe finds a threat on users' computers ("known in the wild"). We only show ranges, such as "found on 100+ PCs", never data about a single user. |
| UnHackMe signatures | Whether the site matches a rule our team wrote for a known threat. |
| Automated research | Programs that look for new sites built the same way as known threats. |
| Domain records | When the domain was registered, and whether it still works. Very new domains are a common warning sign. |
| Protective DNS services | Whether public security DNS services already block the site. We check several of them and show each result. |
How a verdict is decided
1. Sources
- UnHackMe Security Team
- UnHackMe detections
- UnHackMe signatures
- Automated research
- Domain records
- Protective DNS services
2. Signals
- Negative: point to danger
- Positive: point to safety
Weighed by who confirmed them: our team, signatures and research, or machine learning.
3. Verdict
- Dangerous
- Suspicious
- No known threats
What the verdicts mean
The site is part of a known threat: it spreads malware, notification spam, scams or other harmful content. Do not open it.
The site shows warning signs, but the evidence is not strong enough to call it dangerous. Be careful.
We found nothing harmful. This is not a guarantee: the site can change at any time.
When we do not have enough information, the report says so instead of guessing.
Confidence, risk and threat names
Risk from 0 to 100: two examples
AdwareTypewhat the threat isPushSpamCategoryhow it worksFakeAdGuardNamewhich family it belongs toHow reports stay up to date
Threats change quickly. We check sites again regularly, and every report shows the date of its last check and a timeline of what changed. When a verdict changes, the report changes too.
What we do not do
- We do not track the people who read our reports: no IP addresses are stored, and report buttons are counted only as totals.
- We do not publish full web addresses that may contain personal data, and we never submit them to public scanners.
- Links to other companies' scanners open their sites; we send them nothing.
Read more in our Privacy Policy.
If you think a verdict is wrong
We can make mistakes, and we fix them. If you own a site or think a verdict is wrong, click Report an incorrect verdict in the report's "Why" section, or or contact our Support Center. Tell us the site's address and why you think the verdict should change. Our team checks every request by hand.
Limits of our reports
Many reports are made automatically, and even reports checked by our team can be wrong or out of date. They describe what we know at the date of the last check. They are not legal advice and are not a guarantee that a site is safe or unsafe.