Skip to content
Prooflume

Before you pay, click or reply, see the evidence.

Paste a message, link, sender, phone number or IP address. Prooflume runs real lookups (DNS, registration records, redirects, sender authentication) and shows you each one as it happens.

facts signals unknowns, kept as unknowns

Sample investigationSampleCompleted
  1. failed
  2. failed
  3. failed
  4. failed
  5. failed
  6. failed
  7. failed
  8. failed
  9. failed
Text from +1 202-555-0147, as received

USPS: Your parcel US9514901185421 is on hold at our depot due to an unpaid $1.99 redelivery fee. Pay within 12 hours or it will be returned: https://usps-redelivery-hold.example/track?id=US9514901185421 Questions? Call +1 202-555-0147

No verdict until every required check has returned.

Every observation is one of three things.

A case is a list of observations made by tools, not opinions. Each one carries its shape everywhere it appears: in the timeline, the map and the report. Outlined shapes mark data from a third-party provider.

Fact
Something Prooflume observed or a registry recorded.
Resolves to 203.0.113.48
Signal
An observation that points toward a scam. Weighed by rules, never by mood.
Registered 2 days ago
Unknown
A check that could not answer. Not proof of safety or of fraud.
Registration data unavailable
  1. High risk

    Independent checks contradict what the message claims, and it asks for money, credentials or a payment.

  2. Suspicious

    Signals point the wrong way, but not strongly enough for high risk. Verify through a channel you already trust.

  3. Low evidence

    The checks found little either way. That is not a clean result: it means there was little to check.

  4. Unknown

    Required checks could not run or did not answer. Missing evidence stays unknown.

Four verdicts. None of them is “safe”.

Verdicts come from deterministic rules over tool evidence, never from a model. When a check cannot run, the result says so instead of filling the gap. A report shows counts of facts, signals and unknowns, not a confidence score.

Lookups that cost credits wait for you.

Third-party reputation checks are off unless you turn them on, and each one pauses the investigation until you approve the exact request: which tool, which value, which provider, what it costs.

Sample approval

Your approval is needed

Look up this phone number with IPQS

IPQualityScore checks the number against its abuse reports. The lookup sends only the phone number and uses one provider credit.

Expires expired. If it expires, the lookup is skipped and its result stays unknown.

Exact request

Tool
phone.reputation
Subject
+1 202-555-0147
Provider
IPQualityScore
Cost
No model cost, 1 provider credit
Request hash
9c41e7b05d2a3f86e1b4c07d9a52f3e8b16d40c2a97e5f13b8d6c0e4a2f9b7d1

What Prooflume never does

  • Open a submitted link in your browser. An isolated fetcher with no credentials requests it once, from our servers.
  • Contact the sender, call a number from the message, or reply on your behalf.
  • Send money, messages or reports anywhere.
  • Run a paid lookup without asking you first, showing the exact request.
  • Call anything safe. There is no safe verdict.

Paste what you received.

Prooflume is in early access. Deterministic checks work without any AI; live AI is opt-in and capped per investigation.

Start an investigation