{"uid":"cap_EInkShuQmMCNNDqfWg_1-","slug":"api-strale-io-93056f85","name":"IP Risk Score & Fraud Detection","description":"Assess fraud risk for an IP address. Detects VPNs, proxies, Tor exit nodes, hosting/datacenter IPs. Returns risk score and risk factors.","url":"https://api.strale.io/x402/ip-risk-score?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","HEAD","DELETE"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"IP address (IPv4 or IPv6)"}}}},"additionalProperties":false}}},"responseSchema":null,"example":{"request":{"ip":"8.8.8.8"},"response":{"ip":"8.8.8.8","asn":"15169","isp":"Google LLC","org":"Google Public DNS","city":"Ashburn","_meta":{"payment":{"method":"x402","price_usd":0.0324,"settlement_id":"0x341b7c1bea7025a1436cd522267b8316a193ad9e302d923f8e3dcdfd49d74ebe"},"capability":"ip-risk-score","latency_ms":6,"provenance":{"source":"ip-api.com+strale-risk","fetched_at":"2026-06-13T04:22:45.696Z"}},"is_tor":false,"is_vpn":false,"threats":["public_dns_resolver"],"is_proxy":false,"is_mobile":false,"risk_level":"low","risk_score":5,"country_code":"US","is_datacenter":true,"is_residential":false}},"exampleRequest":{"ip":"8.8.8.8"},"tags":["x402"],"displayCostAmount":"0.0324","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":1,"rating":{"score":"0.92","successRate":"1.00","reviews":1,"stars":"4.7","state":"rated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.0324/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0324","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.0324","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_mBBoAgDJsL8lxRvdi-8Bq","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.0324","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Assesses fraud risk for an IP address by detecting VPNs, proxies, Tor exit nodes, and datacenter IPs, returning a risk score and risk factors.","exampleAgentPrompt":"Can you check whether the IP address 104.28.42.1 is suspicious — is it a VPN, proxy, Tor exit node, or datacenter IP, and what's the overall fraud risk score?","exampleUseCases":null,"resultDescription":"Returns a numerical fraud risk score and a set of risk factors indicating whether the IP is associated with a VPN, proxy, Tor exit node, or hosting/datacenter infrastructure.","failureModes":["Invalid or malformed IP address returns a validation error","IPv6 addresses may not be fully supported by all detection databases","Private or reserved IP ranges may return incomplete results","Network timeout or service unavailability returns a 5xx error","Missing required 'ip' query parameter returns a 400 error"],"whenToPreferThis":"Use this endpoint when you need to assess the fraud or abuse risk of a specific IP address during user signup, login, or transaction flows — especially when you need to detect anonymization techniques like VPNs, proxies, or Tor. Prefer this over generic geolocation APIs when the primary goal is fraud risk rather than location.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":2,"lastUsedAt":"2026-06-12T15:27:58.507Z","lastSuccessfullyRanAt":"2026-06-12T15:27:58.507Z","lastHealthCheckAt":"2026-10-10T18:43:40.881Z","isFirstParty":false,"canonicalSlug":"api-strale-io-93056f85"}