89.58.41.156
This address is a published Tor exit node. Signals below are live, from the same pipeline the API serves.
90
block
Risk score out of 100 · review at 40, block at 80
Signals
vpnproxiedtor ✓dchanon ✓
Signal names are the API's own (vpn, proxied, tor, dch, anon). A datacenter match contributes 40 points, a VPN or proxy tunnel 60, and a Tor exit floors the score at 90.
Network
| ASN | AS197540 |
|---|---|
| Organisation | Tor exit node |
| Country | DE |
This address is on the Tor Project's own published exit list. Tor traffic is not fraud by default — journalists, researchers, and privacy-conscious users rely on it — but it is worth a second factor before an irreversible action.
What this verdict means
A score is a starting point, not a decision. Reading a page from a flagged address is unremarkable; redeeming a promotion or completing a checkout from one deserves scrutiny in proportion to what the action costs. The action-risk approach covers how to wire that up.
Run this check in your own signup or checkout.
One REST call, sub-40ms server-side p95. Free tier, 1,000 requests/hour.
Get a free API key →
One REST call, sub-40ms server-side p95. Free tier, 1,000 requests/hour.