https://medium.com/@LevelNetwork/protection-based-on-levelnet-and-the-dynamic-whitelist-b86119917639
"Installed antivirus product: Response Exchange Principles
The client software analyzes the response of antivirus products on users’ devices. Results of the antivirus behavior analysis are sent on the LevelNet network for further processing as well as for deciding the level of a particular threat or threats. The data is transferred between the client nodes and out to the network servers. If for any reason, the LevelNet system perceives response results as a potential or real threat, all users receive information about this software package. This information is distributed between various nodes of the LevelNet network." (с)

Как LevelNet будет определять - реальная это угроза или алерт фейковый?