Data coverage

The data behind every check.

17 datasets across five check families, actively maintained and kept current — so every screen runs against up-to-date data without you doing anything. Here's what each one detects, in plain English.

🌐

IP intelligence

Dataset	What it detects
IP geolocation	Country, region, city, coordinates and time zone for any IPv4 or IPv6 address.
Network ownership	The operator (ASN) an address routes through, and the organisation behind it.
Datacenter & cloud ranges	Separates hosting and cloud infrastructure from real consumer connections — the tell behind bots and scripted traffic.
Tor exit nodes	Addresses currently exiting the Tor anonymity network — the network behind the "dark web".
VPN exit ranges	Known commercial VPN egress addresses — deliberate origin masking, flagged distinctly from raw datacenter traffic.
CDN edge networks	Recognises content-delivery edges — including the common integration mistake of forwarding your CDN's IP instead of your visitor's.
Hostile networks	Address space identified as hijacked or criminal-controlled infrastructure — a strong risk signal.

✉️

Dataset	What it detects
Disposable inbox domains	Throwaway and temporary email providers — including subdomain variants that try to slip past exact matching.
Top-level domain registry	Every currently valid TLD, plus abuse-risk tiers for the ones favoured in throwaway signups.
Domain-boundary rules	Understands where a domain's registration actually begins, so lookalike and subdomain tricks can't disguise a flagged domain.
Free-mail providers	Consumer mail services (informational — free mail isn't itself suspicious).
Mail-server configuration	Whether the domain is set up to receive mail at all, and whether it publishes sender-authentication records (SPF / DMARC) — a mail service that isn't set up correctly is a risk signal.

📱

Phone

Dataset	What it detects
Global numbering plans	Validity, line type, region and carrier metadata for phone numbers in every country.
Reported scam numbers	Numbers appearing in recent consumer scam and unwanted-call complaints — a deliberately light-weight signal, since caller IDs are often spoofed.

🏳️

Country

Dataset	What it detects
Sanctioned & embargoed countries	Comprehensively sanctioned destinations, checked against both the shipping address and the connecting IP's location.
Jurisdiction risk tiers	Monitored and high-risk jurisdictions from international regulatory guidance.

🪪

Name screening

Dataset	What it detects
Sanctions watchlists	Sanctioned people and companies, including their known aliases — matched ignoring case, punctuation and word order. A match is review-worthy, never a verdict.

Every dataset feeds the same stable, documented fields — see the full checks reference, or try them live with the free tools, no key required.

Results are derived from publicly available databases and are provided as-is. We are not responsible for their accuracy — don't treat them as fact; use them to inform your own judgement.