Free WorldIP accounts, 10x the free API and trust score 1.3

Three changes are live on WorldIP.io. Free accounts are open, and each one gets an API key with ten times the keyless daily limit. Trust score 1.3 lowers the score of an address when sites on it are confirmed serving malicious content. And every IP page now shows a summary of recent abuse findings for that address.

Trust score 1.3: confirmed malicious content is its own factor

The WorldIP.io trust score is a transparent 0 to 100 score. Every IP starts at a neutral 65, and each signal adds or subtracts a fixed, explainable amount. Every IP page lists each factor and its exact weight, so the number can be checked line by line. The full methodology is on the trust score page.

Version 1.3 adds a factor for confirmed malicious content. When sites on an IP address are confirmed serving phishing, malware, crypto wallet drainers, fraud or scams, or other illegal content, the address loses trust through this factor, separately from the other signals. Only reviewed, confirmed findings count.

The penalty is proportional to how much of what the address hosts is malicious, so a shared hosting address keeps most of its score when one neighbor goes bad. The methodology page gives these examples:

A legitimate site that was hacked counts for less than infrastructure set up for abuse. Findings fade over time, with a 30-day half-life that shortens to 7 days once the site is taken down, and a finding shown to be wrong is removed outright.

This builds on an earlier fairness change: a datacenter or hosting address keeps its trust unless there is threat evidence against it. Hosting amplifies real threat evidence and has no penalty of its own.

New on every IP page: recent abuse findings

IP pages, such as https://worldip.io/8.8.8.8, now include a "Recent abuse findings" panel. It shows:

• whether malicious content has been confirmed on the address;
• what kind: phishing, malware, wallet drainer, fraud or illegal content;
• when it was first seen and when it was last confirmed;
• whether it is still online or has gone offline.

Anyone can see the summary. Signed-in users see the full finding timeline, and for visitors who are not signed in the detail is blurred with a prompt to sign in.

The panel reports on the IP address only. WorldIP.io never shows the domain names of the sites involved.

The same findings are included in the enriched API on Pro and higher plans.

Free accounts are open, with 10x the keyless limit

Sign up at worldip.io/auth/login with a one-time email code or link, or with Google. There is no password and no credit card, and each person can have one free account.

Every account can create one free API key on the account page. Compared with the keyless API:

The free key works on the core IP lookup API for IPv4 and IPv6: geolocation (country, plus region and city where available), reverse and forward DNS, ASN number and name, organization, and CIDR. Send it as a header over HTTPS:

curl -H "Authorization: Bearer YOUR_KEY" https://worldip.io/8.8.8.8

The key is shown once, when it is created, and WorldIP.io stores only a hash of it. You can regenerate or revoke it at any time from the account page. Responses carry X-Daily-* and X-RateLimit-* headers, so a client always knows how much of its allowance is left.

Enriched data, including the trust score, VPN, proxy and datacenter classification, and BGP context, is part of the paid plans for businesses described on the pricing page.

Deleting an account permanently removes the account, its API key and the key's request log.

Get started

• Create a free account with an email code or Google.
• Create your API key on the account page.
• Read the API documentation for endpoints, headers and limits.
• See how every factor is weighed in the trust score methodology.