Checks reference
Every field the API returns.
Check families plus full geolocation and a composite. Field names are a stable contract. There is no is_fraud field — the score is advisory, and you adjudicate.
🌐
IP
Country + ASN, Tor-exit detection, and datacenter/cloud classification.
| Field | Type | Description |
|---|---|---|
| country | string | Country the address is registered to (compare vs. shipping). |
| asn | number | Autonomous System Number the address routes through. |
| is_tor | bool | Address is a known Tor exit node. |
| is_datacenter | bool | Address belongs to a datacenter/hosting ASN. |
| is_cloud | bool | Address is on a major public-cloud ASN. |
| is_vpn | bool | Address is a known commercial VPN exit. |
| is_known_bad_network | bool | Address is on a network flagged as hostile — hijacked or criminal-controlled infrastructure. |
| proxy_likelihood | number | Derived 0–100 heuristic. Not from an authoritative VPN list. |
| location | object | Nested city-level location (region, city, postal, lat/long, timezone) — same data as /v1/geo. |
✉️
Email
Syntax, mail-server (MX) reachability, and disposable / role / free-mail detection.
| Field | Type | Description |
|---|---|---|
| syntax_valid | bool | Address parses as a valid email. |
| domain_has_mx | bool | Domain publishes MX records (can receive mail). |
| has_spf | bool | Domain publishes an SPF record. Presence only. |
| has_dmarc | bool | Domain publishes a DMARC record. Presence only. |
| is_disposable | bool | Domain is a known disposable/temporary provider. |
| is_role_account | bool | Local-part is a role account (admin@, info@…). |
| is_freemail | bool | Domain is a free consumer provider. |
| tld_valid | bool | TLD is well-formed. |
| tld_risk | string | low | medium | high. |
📱
Phone
Number validation with line type, region, and carrier metadata.
| Field | Type | Description |
|---|---|---|
| valid | bool | Number is valid for its region. |
| region | string | ISO region code the number belongs to. |
| line_type | string | mobile | fixed | voip | … where metadata supports it. |
| e164 | string | Normalized E.164 form. |
| reported_scam | bool | Number appears in recent scam-call complaints. Weak — caller IDs are spoofed. |
🏳️
Country
Sanctions & embargo screening, regulatory risk tiers, and cross-source consistency.
| Field | Type | Description |
|---|---|---|
| shipping_country_sanctioned | bool | Destination is comprehensively sanctioned/embargoed. |
| risk_tier | string | standard | monitored | high_risk. |
| country_mismatch | bool | Shipping / IP / phone countries disagree. |
🪪
Name
Sanctions & watchlist name screening, matching on names and their known aliases. A check, not a compliance determination — a match is review-worthy, a non-match is not clearance.
| Field | Type | Description |
|---|---|---|
| sanctions_match | bool | The name matches a sanctions-list entry (or alias). |
| match_type | string | none | exact | reordered. |
| matched_name | string | The listed name that matched. |
| matched_type | string | individual | entity | vessel | aircraft. |
| program | string | The sanctions program(s) the match falls under. |
📍
Geolocation
Full location for an IP via the dedicated /v1/geo endpoint. On every plan.
| Field | Type | Description |
|---|---|---|
| country_code | string | ISO 3166 alpha-2 country code. |
| country_name | string | Human-readable country name. |
| region | string | Region / state / province. |
| city | string | City name. |
| postal_code | string | Postal / ZIP code where available. |
| latitude | number | Approximate latitude. |
| longitude | number | Approximate longitude. |
| timezone | string | Time zone (e.g. America/Los_Angeles). |
| asn | number | Autonomous System Number. |
| org | string | Network / organization name. |
| scope | string | public | private | loopback | cgnat | … routing scope. |
| bogon | bool | Non-routable/reserved address (no location returned). |
Σ
Composite
score (0–100, advisory) and reasons[] (stable reason codes) — never a verdict.