nestIP
Features
One JSON body per address. The fields below are what the engine calculates today, not a roadmap.
Score 0–100
Weights add, then cap at 100. Defaults: Tor 70, bogon 60, blocklist 50, residential-proxy suspect 45, VPN 40, datacenter 40, proxy 35. Change them with SCORE_WEIGHT_* environment variables.
Five risk bands
minimal under 20, low from 20, medium from 40, high from 60, critical from 80. The band labels the score. It is not a fraud verdict.
Vietnamese networks
An internal ASN table labels mobile, fixed residential, hosting, education, or government when the ASN matches. A Vietnamese prefix can set the country to VN.
Hosting without a CIDR hit
If no datacenter range matches, a well-known hosting ASN (Google, AWS, Cloudflare, and the other providers compiled into the table) is still marked hosting.
Batch and limits
Look up one IP or a batch. Keys have a monthly quota, a daily quota on the free plan, and both a per-key and a per-IP rate limit. Over the limit, the API returns 429 and Retry-After.
Freshness
data_freshness lists each file: present, missing, or the mtime. A score computed before ASN data exists is not cached.