{"input":"example.com","resolvedIp":"104.20.23.154","ipVersion":4,"resolvedFrom":{"domain":"example.com","addresses":["104.20.23.154","172.66.147.243"]},"verdict":"CLEAN","score":6,"type":{"type":"datacenter/hosting","confidence":"medium","reasons":["Org/PTR matches hosting/cloud pattern (\"cloudflare\").","No PTR record — common for raw datacenter allocations."]},"geo":{"countryCode":"US","rir":"ARIN","source":"RIR allocation country (Team Cymru DNS) — coarse, not city-level GeoIP."},"network":{"asn":13335,"asName":"CLOUDFLARENET - Cloudflare, Inc., US","bgpPrefix":"104.20.16.0/20","allocatedDate":"2014-03-28"},"ptr":null,"blocklists":{"checked":3,"listed":[],"cleanZones":["dnsbl.dronebl.org","all.s5h.net","bl.blocklist.de"],"unknownZones":[]},"tor":false,"findings":[{"id":"datacenter","severity":"low","title":"Datacenter / hosting network","detail":"Org/PTR matches hosting/cloud pattern (\"cloudflare\"). No PTR record — common for raw datacenter allocations. Datacenter IPs are normal for servers/APIs but unusual for ordinary end-user traffic, and are over-represented in scraping, credential-stuffing and spam."},{"id":"no-ptr","severity":"info","title":"No reverse DNS (PTR)","detail":"No PTR record is configured. Common for raw datacenter allocations and some abuse infrastructure; not by itself conclusive."}],"summary":"CLEAN — no abuse signals found; datacenter/hosting.","deepInspected":false,"checkedAt":"2026-06-23T00:39:46.246Z"}