For the unprepared this is a website commonly used by credit card fraudsters to imitate an IP address close to the card's address
Check us out at https://spur.us
You say it yourself:
> Residential proxies can be impossible to detect.
The appeal of residential proxies is that the traffic comes from legitimate user networks. So how do you detect malicious usage there?
Moreover, it must be a game of whack-a-mole to keep your lists updated, as these services pop up all the time.
Very interesting service, but sadly I cannot sign up for a trial, due to not possessing a US telephone number, which for some reason is required. That said I am a researcher at an Internet measurement and security group. Any chances for a cooperation?
Honestly, for assessing risk of individual users, my worry is that the only good option right now is to use tools that require lots of data on the user, like recaptcha v3. You could set up a honeypot that tries to catch as many IP addresses implicated in proxy activity as possible. Maybe that second one would be a good company idea.
1. SEON: https://seon.io/
2.IPQS: https://www.ipqualityscore.com/
As I explained to my colleagues, I wouldn't be able to determine, with confidence, which of the services were 100% legit, and which weren't. We didn't want to accidentally get involved with questionably-obtained residential IPs, etc. That would've been antithetical to our business, and also just not how we operate in general.
(The startup provided solutions in the supply chain integrity space. Part of the technology included bespoke Web scraping, to monitor certain venues for naughtiness scale and patterns over time. Because venues were around the world, and because venues had complicating incentives regarding some of the questionable third-party activity in the venue... I wanted the delicate scraping to look similar to normal consumer users who were in the geopolitical region served by the venue. Instead of a residential IP service, I used an (undisclosed) different, impeccable approach, which won't work for all use cases, but did for ours.)
3G/LTE because all mobile providers use CG-NAT?
(I also discovered that my old DSL ISP accepted its dialup provider's credentials for PPPoE). Best part about PPPoE is that you can run multiple sessions over the same line/modem.