Paste up to 50 IPs from your server logs. CandycornDB scores every one against the live refinery: landlord identity, /24 CIDR cluster risk, base-zero scoreReasons receipts. See exactly what your current GeoIP baseline is missing.
We do not store your IP list. Only aggregate counts (size, blind-spot total) and your masked email if you unlock the full report. See privacy.
Awaiting meta frame from /api/public/audit
The information gap is what your current vendor cannot see. A static baseline (MaxMind GeoLite2-ASN, IPinfo Privacy) flags the obvious infrastructure footprint: hyperscaler datacenter IPs. CandycornDB adds inferred proxy detection, /24 CIDR cluster risk, and landlord identity for the long tail of hosting providers.
Densest /24 in your batch. Each cell is one of 256 hosts in the CIDR range. Orange cells are flagged neighbors that share the same landlord identity.
Drop your work email to clear the masks. We send one summary email with the full PDF report. No drip sequence, no sales call.
The Developer tier ships 1,000 CandycornDB lookups per month, the same v2.3 base-zero engine you just ran above. No card on file.
Concurrency cap of 25 keeps DNS fan-out predictable. 50 IPs finish in two waves, typically under 4 seconds.
Every IP starts at 0. Hosting +15, proxy inferred +20, Tor +45, /24 cluster +25, residential -10. Free reports show component and signed delta. Detail strings are paid surface.
P3 wholesale ASN classification flags hosting landlords (M247, Clouvider, OVH). P1 subnet scan counts dirty neighbors in the /24 range and tiers cluster risk at >10, >25, >50.