Solid overview of VPN signals. One angle that bites fraud stacks in practice: a lot of “VPN” exits now sit on residential broadband, so ASN/hosting blocklists miss them.

At IP99 (by ThreatHunter) we score IP risk from fresh proxy/VPN/dial-up-pool evidence that ages out—so a score of 0 is “no current evidence,” not “safe.” Useful when you’re deciding whether an exit looks like shared egress before you trust a session.