Is the webshop safe? The first check is known threats
Shopeye checks whether the web address is already listed on threat feeds for phishing, malware, or other known digital threats. A match is the strongest signal in the assessment and can outweigh almost every positive detail about the shop.
That is because a polished website, a phone number, or good reviews do not cancel a concrete listing as dangerous.
What does Shopeye check?
Shopeye runs the shop’s address through relevant threat-data sources and looks for known listings. The check is about the URL and domain — not about reading your browsing history or judging you as a user.
A result can broadly be:
- No known listing found: Not a warning signal, and not proof that the shop is safe.
- Known phishing or malware threat: A critical warning signal.
- Could not be checked: The check is not treated as a red flag, but the assessment is based on less information.
Why is a clean threat list not enough?
New fake shops can be active before they are discovered and added to a list. “Not found” only means Shopeye did not find a known listing at the time of analysis.
Shopeye therefore combines the threat check with other information:
The overall picture matters more than one missing warning sign.
If the page is not a webshop
If Shopeye judges that the page is not a webshop, most shop checks stop. A known phishing or malware match can still be relevant, because a dangerous address does not become safe just because the page has no shopping cart.
What should you do after a critical warning?
Do not enter card details, MitID details, or passwords. Close the page and go to the company’s official website by typing the address yourself or finding it through a source you trust.
If you have already paid or shared information, contact your bank or card issuer quickly. Sikkerdigital also has up-to-date guidance on what to do if you have been scammed.
Can a legitimate webshop be flagged?
Automatic systems and external data sources can be wrong or delayed. Shopeye therefore shows a risk assessment — not a legal decision. If a result looks wrong, check the web address carefully and contact the shop through independently found contact details.
In short
A match on a known threat list is a very strong warning. A missing match is only one small part of the assessment and can never stand alone as a safety stamp.
Also read all the signals Shopeye checks.