See the threat the way its victims see it
Investigate phishing kits, brand impersonation and fraud from residential and mobile IPs in 249 countries and territories, not from a scanner range they already block.
Why scanners see a harmless page
Phishing kits cloak. They check the visitor's IP and show security vendors and datacenter ranges a blank or harmless page.
From sign-up to the first investigation
One endpoint for every vantage point: the location travels in the username.
Create an account and add funds
Sign up with Google, GitHub or email and top up from $10.
Choose the victim's vantage point
Mobile or residential IPs; add
-country-<code>for the targeted country, or-isp-<code>for a carrier.Isolate each investigation
One proxy per case, with a target host whitelist and an IP whitelist, so it reaches only what it should.
# Replace with your credentials from the 2extract dashboard
curl --proxy "http://2xt-customer-[accountID]-proxy-[name]-[params]:proxy_password@proxy.2extract.net:5555" \
"https://api.ipify.org?format=json"What security work needs from the network
Vantage points that look like ordinary users, controls that keep each case contained, and a network you can account for.
What security work needs from the network
Vantage points that pass cloaking
Residential and mobile IPs in 249 countries and territories, so kits and fraud pages answer as they would to a victim.
Target by country, city or ZIP, or by mobile carrier with
-isp.Controls per case
A proxy per investigation, with its own IP whitelist, target host whitelist and traffic limit.
A strict session with
-constfails explicitly instead of switching IPs in the middle of a capture.A network you can account for
Consent-based IPs, no botnets, GDPR and CCPA compliant, under a strict Acceptable Use Policy.
Our compliance team monitors the network and investigates every report of abuse.
Investigate from any vantage point: pay per GB from $3.99
Security research questions
Sessions, whitelists and targeting are in the documentation.
Still have a question?
Talk directly to the engineers who built the product. No chatbots, no first-level support scripts.
Your first investigation is one line away
Sign up with Google, GitHub or email, top up from $10 and pay per GB. No commitment.
curl -x http://…-country-us-session-case42:•••@proxy.2extract.net:5555 ipinfo.io/json