IPQualityScore

IPQualityScore is a fraud prevention and IP reputation intelligence platform that provides risk scoring, proxy/VPN detection, bot detection, geolocation, and behavioral analysis for IP addresses, email addresses, phone numbers, and URLs. It is widely used for fraud prevention and investigative enrichment.

For OSINT investigators, IPQualityScore's proxy and VPN detection capability is among its most valuable features. When investigating a suspect IP address, knowing whether it is a residential address, hosting company IP, known VPN service, Tor exit node, or datacenter proxy significantly affects attribution confidence and investigation strategy. IPQualityScore maintains databases of known VPN providers, proxy services, and Tor infrastructure, flagging these indicators in its risk assessment.

The fraud score (0-100) synthesizes multiple risk signals into a single actionable metric. IPs with high fraud scores — particularly those associated with recent fraudulent transactions or abuse reports — are prioritized in fraud investigation workflows. The score's component breakdown (proxy detection, recent abuse, bot behavior, geolocation mismatch) helps investigators understand which specific factors elevate the risk level.

For email fraud investigations, IPQualityScore's email validation API checks deliverability, domain reputation, disposable address detection, and account age indicators — providing comprehensive email risk assessment that complements standard email verification tools.

Phone number intelligence from IPQualityScore covers carrier identification, line type (mobile, VoIP, landline), validity, and risk associated with specific numbers — useful for fraud ring investigations where phone numbers are used as identity verification tools.

URL and domain scanning identifies phishing sites, malware distribution pages, and suspicious redirects in real time, making it useful for rapid triage of suspicious links encountered during investigations.

The free tier provides limited daily lookups with basic intelligence. API access supports integration into automated investigation workflows and fraud detection systems.

Record the queried indicator, fraud score, proxy/VPN status, abuse history, and query timestamp for all IPQualityScore lookups used in investigation documentation.