Live: Tor + abuse feeds refreshed every 6 hours

Score Any IP, Email, Phone or Domain Instantly

Stop paying for fake signups. One API call returns a 0–100 risk score, an allow/review/block verdict, and every signal behind it — or score the entire signup at once with the unified score/user endpoint.

1,000 free lookups/monthNo card required5-minute setupCancel anytime
Try:
layercall — live scoring
$
<0.000 sec
Cached response time
0-in-1
IP, email, phone & domain
0+
Fraud signals per user
0
Free lookups / month
Tor exit nodesAWS · AS16509Commercial VPNsHetzner · AS24940Proxy egressDigitalOcean · AS14061Abuse feedsOVH · AS16276Datacenter ASNsM247 · AS9009Geo anomaliesGoogle Cloud · AS15169Tor exit nodesAWS · AS16509Commercial VPNsHetzner · AS24940Proxy egressDigitalOcean · AS14061Abuse feedsOVH · AS16276Datacenter ASNsM247 · AS9009Geo anomaliesGoogle Cloud · AS15169
Complete trust suite

One brand, every signal

Four live products behind one key, one credit system, and one response shape — every endpoint returns the same 0–100 score and allow/review/block verdict.

IP Intelligence

Live
/v1/score/ip

Uncover risky IPs before they reach your product.

  • VPN & proxy detection
  • Tor exit-node detection
  • Datacenter ASN detection
  • Abuse-feed signals
  • Geolocation + ASN + ISP

Email Validation

Live
/v1/verify/email

Verify emails in real time to protect your list.

  • Syntax verification
  • Live MX / domain check
  • 4,000+ disposable domains
  • Role-account flagging
  • Deliverability score

Phone Validation

Live
/v1/lookup/phone

Validate any number worldwide in milliseconds.

  • 240+ countries & formats
  • Line-type detection
  • VoIP & premium-rate flags
  • E.164 normalization
  • Works fully offline

Domain Intelligence

Live
/v1/score/domain

Analyze any domain for trust and email posture.

  • Domain age via RDAP
  • MX / SPF / DMARC posture
  • Newly-registered detection
  • Disposable-domain flags
  • Registrar intelligence
Only on LayerCall

Score the whole signup in one call

Everyone else makes you call four endpoints and merge the results yourself. Send IP, email, phone, and domain to /v1/score/userand get back one combined risk score, one verdict, and the top signals — with every component's full detail included.

  • One request, one verdict — allow, review, or block
  • Weighted scoring: a hard red flag is never averaged away
  • top_signals tells you exactly why, in plain English
POST /v1/score/user
{ "ip": "185.220.101.1",
  "email": "ceo@mailinator.com",
  "phone": "+14155552671" }

→ { "risk_score": 74,
    "verdict": "block",
    "top_signals": [
      "ip: tor exit node",
      "email: disposable domain" ],
    "processing_time_sec": 0.041 }
How it works

Live in three steps

1

Grab your API key

Create a free account and get a live key in minutes — no sales call, 1,000 lookups a month on the house.

2

Send a lookup

One request with the IP, email, phone, or domain from your signup flow — or all four at once. 0.003 sec on cache hits.

3

Act on the verdict

allow → let them in. review → flag and monitor. block → reject or step-up challenge. Conservative by design.

Real-time intelligence

Built to be trusted

Conservative scoring

Weights start strict — Tor +50, abuse +40, datacenter +30, VPN +25 — so when the verdict says block, you can act on it without fear of turning away real customers.

0 · allow40 · review70 · block100

Cached & fast

Repeat lookups return from cache in <0.003 sec; first-time live verifications (DNS, RDAP) typically finish in under 1 sec. Every response reports its own processing_time_sec — no guessing.

Always-fresh feeds

Tor exit nodes and abuse lists auto-refresh every 6 hours. No stale blocklists, no manual updates.

Made for signup & checkout flows

Call it before creating the account or charging the card. Fail open if unreachable, challenge on review, reject on block — every response carries a request_id for debugging.

Your rules always win

Exclude your office IPs, corporate domains, or test numbers with allow rules; hard-block known bad actors with block rules — for any IP, CIDR range, email, domain, phone, or ASN. Every response shows rule_applied so you always know why.

Switch in one call

Coming from another provider? POST their exported blocklist/allowlist CSV as-is — we auto-detect every entry, skip the junk, and tell you exactly what was imported. Free.

Pricing

Simple, credit-based pricing

One credit = one lookup. Every plan includes all endpoints — IP, email, phone, domain, unified score, custom rules, and the reporting network. No setup fees, cancel anytime.

Free
$0forever
1,000 lookups / mo
  • All endpoints
  • 1,000 credits/mo
  • Community support
  • No card required
Start free
Starter
$49/ mo
25,000 lookups / mo
  • All endpoints
  • 25,000 credits/mo
  • $0.004 / extra lookup
  • Custom allow/block rules
  • Email support
Start 7-day trial
Most popular
Growth
$149/ mo
100,000 lookups / mo
  • Everything in Starter
  • 100,000 credits/mo
  • $0.003 / extra lookup
  • Higher rate limits
  • Priority support
Start 7-day trial
Scale
$499/ mo
500,000 lookups / mo
  • Everything in Growth
  • 500,000 credits/mo
  • $0.002 / extra lookup
  • SLA + webhooks
  • Slack support
Start 7-day trial
Need more than 500k/mo? Talk to us about Enterprise — volume discounts, dedicated support, and SLA. Save 2 months with annual billing.

Catch the next fake signup before it happens

One GET request between your signup form and your database.

Get your free API key →