What Bewary holds, by country
Every figure is read from GET /v1/datasets on each visit and cached for 5 minutes.
Coverage
Counts from GET /v1/datasets on . Free, no key needed.
- Phishing and malware feedsRead hourly. Of the 634,651 domains re-checked so far, 231,708 still resolve. 861,791links, domains and IPs
- Crypto wallet reportsAddresses named in scam reports. 3,182wallets
- US sanctions listThe US Treasury's OFAC list of sanctioned crypto addresses. 507wallet addresses
- Platform takedownsPages a hosting or form platform took down itself, each listed as the exact link. 679links
- IBAN formatsISO 13616: registry country, length, BBAN structure and check digits. 89countries
- Brand registryDomain lookups flag lookalikes of these brands. 45brands
Also behind every answerRDAP registration · DNS history · Certificate transparency logs · Web archive · IP networks · App Store and Google Play · Cash App, PayPal and Venmo profiles · Email providers
| Country | Scam domains | Scam phone numbers | Banks for IBAN checks | SMS short codes |
|---|---|---|---|---|
| PolandCERT Polska | 125,222 | – | – | – |
| Taiwan165 anti-fraud line | 115,572 | – | – | – |
| GermanyFederal Network Agency, Deutsche Bundesbank | – | 10,013 | 3,466 | – |
| United StatesFTC, FCC | – | 4,323 | – | 23 |
| ItalyBanca d'Italia | – | – | 1,201 | – |
| AustriaOesterreichische Nationalbank | – | – | 874 | – |
| SloveniaBanka Slovenije | – | – | 821 | – |
| BelgiumNational Bank of Belgium | – | – | 782 | – |
| FranceEuropean Central Bank | – | – | 504 | – |
| SpainBanco de España | – | – | 424 | – |
| CzechiaCzech National Bank | – | – | 47 | – |
| SlovakiaNárodná banka Slovenska | – | – | 38 | – |
| CroatiaCroatian National Bank | – | – | 21 | – |
Bank names and BICs come from each central bank's public list, free of charge from its publisher. The Federal Network Agency's list also names numbers from 139 other countries.
No national scam list from United Kingdom, Australia, Canada, India, Brazil, France, Spain, Italy, Netherlands, Japan is in Bewary's data yet.
Phone numbers by their own country
A national list names numbers aimed at its own country. Here each one is counted under the country it is from, so the German regulator's list spans 140 countries.
German regulator number actions
10,013- Germany
- 7,50375%
- Kyrgyzstan
- 1982%
- Comoros
- 1962%
- Kosovo
- 1682%
- Israel
- 1632%
- Tunisia
- 1181%
- Madagascar
- 1041%
- Zimbabwe
- 961%
US phone complaints
4,323- United States
- 4,20897%
- Canada
- 1113%
- Puerto Rico
- 10%
Every dataset
Scam lists
| Dataset | Covers | Geography | Active entries | Updated |
|---|---|---|---|---|
Phishing and malware feedsthreat_feeds | links, domains, IPs | Worldwide | 861,791 | |
German regulator number actionsphone_reports_de | phone numbers | Germany | 10,013 | |
US phone complaintsphone_complaints | phone numbers | United States | 4,323 | |
Crypto wallet reportswallet_reports | wallets | Worldwide | 3,182 | |
Hosting and form platform takedownsplatform_pages | links, domains | Worldwide | 679 |
Reference data
| Dataset | What it gives an answer | Covers | Geography |
|---|---|---|---|
Domain registration recordsregistration | Registration date, expiry date and registrar | domains, emails | Worldwide |
DNS recordsdns | Addresses, name servers, mail servers and change history | domains, emails | Worldwide |
Certificate transparency logscertificates | New TLS certificates as they are published | domains | Worldwide |
Web archive historyweb_archive | First and last web archive capture dates | domains | Worldwide |
Brand registrybrand_registry | 45 brands checked for lookalike domains | domains | Worldwide |
IP network recordsip_network | Network owner, ASN, registry country and hosting type | IPs | Worldwide |
Phone numbering plansphone_numbering | Country and number type | phone numbers | Worldwide |
US number assignmentsus_numbering | Original carrier of a US number | phone numbers | United States |
US short code directoryshortcodes | 23 short codes with their senders | short codes | United States |
Email provider recordsemail_providers | Disposable address, free provider or role mailbox | emails | Worldwide |
Breach recordsbreaches | Known data breaches | emails | Worldwide |
US sanctions listsanctions | 507 wallet addresses OFAC sanctions | wallets | Worldwide |
IBAN formatsiban_registry | 89 countries: length, structure and check digits | IBANs | Worldwide |
National bank code listsbank_codes | 8,178 banks and their BICs in 10 countries, free of charge from each publisher | IBANs | Worldwide |
App store listingsapp_stores | Live or removed status, app name and developer | apps | Worldwide |
Link shortener statesshort_links | Whether the shortener disabled a link or shows a warning | links | Worldwide |
Payment profile statespayment_profiles | Whether a Cash App, PayPal or Venmo handle exists and is active | payment handles | Worldwide |
The same data from the API
Free, no key. Each answer names the dataset behind every signal.
curl https://api.bewary.app/v1/datasets{ "datasets": [ { "id": "threat_feeds", "name": "Phishing and malware feeds", "coverage": "WW", "kind": "scam_list", "entity_types": [ "url", "domain", "ip" ], "active_entries": 861791, "refreshed_at": "2026-11-02T00:17:24Z", "target_countries": { "PL": 125222, "TW": 115572 }, "entity_countries": null, "checked_entries": 634651, "live_entries": 231708, "quarantined_entries": null } ]}An entry stays active while a list still names it. Counts are read from the API on each visit and cached for five minutes. A list’s country comes from who publishes it. Nothing is guessed from the entry itself.