Is ipapi.co legit or a scam?
A well-established and reputable IP geolocation API service with a high global traffic rank and positive industry reputation.
Analysis Summary
No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →
Visual Screenshot Analysis
We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.
Visual red flags detected in the screenshot
The website appears to be a legitimate landing page for an IP geolocation API service with professional design and standard SaaS navigation elements.
What our vision model saw
5 signalsProfessional design with consistent branding and layout
Functional navigation menu including Docs, Pricing, and Account links
Clear value proposition for an IP geolocation API service
Interactive IP lookup form and Google Maps integration button
No deceptive urgency tactics or fake trust badges visible
MT Intelligence
The service has been operational for several years and maintains a high global traffic ranking, which is a strong indicator of legitimacy. Our analysis shows zero detections across 92 antivirus engines and no reports of malicious activity in major browser blocklists. The site is operated by a registered US corporation, Kloudend, Inc., which is listed in official state data broker registries. Independent review aggregators and developer platforms show positive feedback regarding its accuracy and support. While some automated filters flagged a potential subscription risk, our manual review confirms these are standard SaaS pricing tiers with transparent terms.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for ipapi.co, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Operated by Kloudend, Inc., registered at 1887 Whitney Mesa Dr #4080, Henderson, NV 89014; listed as data broker in CA and TX.
- Provides free tier (no signup for basic lookups, limited requests) and paid subscription plans starting ~$15/mo for 60K lookups; emphasizes easy cancellation and no-questions-asked policy.
- Scamadviser rates it as average to good trust score, "Very Likely Safe", "legit and safe to use and not a scam website"; high traffic, long domain history, valid SSL.
- Positive customer testimonials on own site praising accuracy, support, and ease of use; one Capterra review notes quick resolution of false positive flag.
- No scam reports, billing complaints, unauthorized charges, or Reddit/Trustpilot negative threads found in searches for scam/fraud/complaint.
- Privacy policy states it does not sell IP queries; complies with GDPR/CCPA; uses Stripe and other processors; aggregates data from MaxMind/DB-IP.
- Built on AWS, GitHub repo for docs, Medium blog on fraud mitigation; trademarked name; no evidence of "Subscription Trap" abuse in public records.
- ipapi.co (site testimonials)open
"I tried other geolocation services but none are that accurate as @ipapi_co is."
- ipapi.co (site testimonials)open
"What a fantastic job you've done with ipapi. I am a new customer, recently switched over from [...] due to all sorts of issues, and find your service to be of the utmost quality."
- Capterraopen
"There was a small issue where my local development environment got flagged as suspicious activity. It was quickly resolved though!"
- Scamadviseropen
"In summary, It seems that ipapi.co is legit and safe to use and not a scam website."
Kloudend, Inc. at 1887 Whitney Mesa Dr #4080, Henderson, NV 89014. Registered data broker in Texas and listed in California data broker registry. Trademark for ipapi in UK & AU. Uses virtual/regus-style address common for small US corps.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Contact Verification
We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.
- No contact email found anywhere on the page.
- No postal address visible on the page.
- Scam family match: Subscription Trap.
- Phone number listed (122.0838).
- Links to 5 social profiles.
Domain & Encryption
Redirect Chain
- 1301http://ipapi.co/
- 2200https://ipapi.co/
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on ipapi.co and not a lookalike like i-papi.co.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review found no threat indicators on ipapi.co. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- ipapi.co passed our automated security checks with a trust score of 93/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- Yes. ipapi.co presents a valid TLSv1.2 certificate issued by Google Trust Services · WE1, expiring in 83 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- No. All 92 antivirus engines in our malware network report ipapi.co as clean.
- No. ipapi.co is not currently listed on the major browser blocklist feeds that modern browsers use.
- ipapi.co resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. ipapi.co sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
- This is a permanent record of the scan run on June 22, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around ipapi.co have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.