Bewary: scam, phishing and fraud detection bronze

www.bewary.app

“Threat intelligence for AI agents: checks URLs, domains, phones, emails, wallets and IBANs for scams

https://www.bewary.app/.well-known/agent-card.json its card

🇩🇪 DE · Hetzner Online GmbH Checked 2d ago extendedAgentCard, pushNotifications, streaming

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 20 Jan 2027 as of our check on 11 Nov 2026.

Control of the hostname was checked; nothing about who operates it.

Key ECDSA P-256, signed ECDSA-SHA384, issued via YE2 under ISRG Root X2 — classical, as every publicly trusted certificate is today.

Names on this certificate (1)

bewary.app.
Connection: TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 11 Nov 2026. What this means
DANE / TLSA: Not verified
Discovery: Well-known document
This host also publishes an ARD catalog (/.well-known/ai-catalog.json) declaring 4 resources. The catalog's entries are the publisher's claims, not something agenttru.st verified.
AI use policy: Search: yesAI input: yesAI training: yes

What this site's robots.txt says about how AI may use its content. Recorded as the operator wrote it, not enforced — these are preferences about use, not access, and agenttru.st only reads the agent's own discovery documents.
AI-facing documents: Publishes /llms.txt — “Bewary API” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 4 Nov 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇩🇪 DE · Hetzner Online GmbH (AS24940)
Last checked: 2d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of www.bewary.app controls every word below.

Look up a domain

Domain age, lookalike-brand technique, abused TLD, blocklist status and a verdict. 1 credit.

scamfrauddomain

Examples it gives

{"type": "domain", "value": "usps-redeliver.top"}

Look up a link

Is this link safe to open? Resolves shorteners and redirects and checks where it really goes; on a shortener, says whether the shortener itself disabled, flagged or removed the link. 1 credit.

scamfraudurl

Examples it gives

{"type": "url", "value": "https://usps-redeliver.top/pay"}

Look up an IP address

Network owner, ASN, country, hosting type, reverse DNS. 1 credit.

scamfraudip

Examples it gives

{"type": "ip", "value": "45.155.205.233"}

Look up a phone number

Country, number type, blocklist status and a verdict for a phone number. 1 credit.

scamfraudphone

Examples it gives

{"type": "phone", "value": "+18774196664"}

Look up an SMS short code

Who operates this SMS short code, and is it legitimate, shared or a scam code? 1 credit.

scamfraudshortcode

Examples it gives

{"type": "shortcode", "value": "86006"}

Look up an email address

Mail server, disposable or free provider, role mailbox, and the sender domain's facts. 1 credit.

scamfraudemail

Examples it gives

{"type": "email", "value": "support@paypa1-billing.com"}

Look up a crypto wallet

Is this wallet on Bewary's scam list? 1 credit.

scamfraudwallet

Examples it gives

{"type": "wallet", "value": "bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh"}

Look up an IBAN

Is this IBAN valid (country length and structure, check digits), which bank does it belong to (name, BIC), and did a community report name it? Pass the country the payee claims to catch a mismatch. 1 credit.

scamfraudiban

Examples it gives

{"type": "iban", "value": "DE89370400440532013000"}

Look up a mobile app

Is this app live on the Apple App Store or Google Play, or did the store pull it? Name, developer, rating count and when we first and last saw it live. 1 credit.

scamfraudapp

Examples it gives

{"type": "app", "value": "apple:310633997"}

Look up a payment handle

Does this Cash App $Cashtag, PayPal.me name or Venmo username exist, is it active, and is it on Bewary's scam list? Existence and status only, never the person's name. 1 credit.

scamfraudpayment handle

Examples it gives

{"type": "payment_handle", "value": "$cashsupport"}

What its catalog declares

From the ARD catalog this host publishes at /.well-known/ai-catalog.json. The operator controls every entry; agenttru.st verified that the catalog exists and parses, and nothing about what the entries say.

Bewary: scam, phishing and fraud detection

mcp-server-card

https://bewary.app/.well-known/mcp/server-card.json

Bewary: scam, phishing and fraud detection

a2a-agent-card

https://bewary.app/.well-known/agent-card.json

Bewary: scam, phishing and fraud detection

agent-skills+md

Bewary is a scam detection API and MCP server for apps and AI agents. It looks up links, domains, IP addresses, phone numbers, SMS short codes, email addresses, crypto wallets, IBANs, mobile apps and payment handles, and its watches send an event when a watched domain, number, wallet or brand changes. The CLI runs as `npx bewary` with no install, with one command per MCP tool. Use when a user asks whether a link, number, address or account they received is a scam, and before an agent opens a link, calls or

https://bewary.app/.well-known/agent-skills/bewary/SKILL.md

Bewary API

vnd.oai.openapi

https://api.bewary.app/v1/openapi.json

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: Bewary — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Version: 1.16.0
Auth schemes: apiKey oauth
Card completeness: complete all eight fields required by a2a.proto v1.0

View all card details

Capabilities: extendedAgentCard pushNotifications streaming
Agent card: https://www.bewary.app/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.