Score Zero Has Two Meanings: Branch on evidence_state FirstIf your antifraud rule treats every risk.score == 0 as "clean," you will misread two very different situations the same way. On IP99 by ThreatHunter, score zero can mean never seen (evidence_state: no21h ago · 5 min readip99.hashnode.dev
This Week's Proxy Exits: 12.3M New Addresses, Still Almost All Off Datacenter SpaceDatacenter blocklists are still the default proxy defence in a lot of fraud stacks. The addresses showing up in proxy supply this week mostly were not in datacenters. Between 8–14 October 2026 (UTC), Oct 16 · 3 min readip99.hashnode.dev
Why Network-Type Blocklists Miss Most Proxy ExitsIf your fraud stack still treats "block datacenter ASNs" as the main proxy defence, you are mostly looking at a thin slice of the problem. The addresses showing up in proxy supply week after week are Oct 14 · 5 min readip99.hashnode.dev
