proxif[.]ai

The domain proxif.ai was registered on April 09, 2026 through GoDaddy.com, LLC and is presently classified as a generic phishing site with a high risk rating. The site presents a page titled “Proxifai – One Platform for the Entire Dev Lifecycle,” suggesting an attempt to masquerade as a legitimate development‑lifecycle service. The page returns an HTTP 301 redirect, indicating a possible staging step before delivering malicious content.

Infrastructure analysis shows the domain resolves to the IP address 188.114.96.3, which is owned by CloudFlare, Inc. and geolocated to Canada. The authoritative name servers are dina.ns.cloudflare.com and edward.ns.cloudflare.com, both associated with CloudFlare’s DNS service. The TLS certificate is issued by Google Trust Services under the WE1 certificate authority, providing a seemingly valid HTTPS façade that could lend credibility to the phishing attempt.

Threat intelligence reveals a Gridinsoft trust score of 0 out of 100, confirming the domain’s malicious nature. VirusTotal reports that 4 out of 95 scanned security vendors flag the domain as suspicious, and the domain appears on three external blocklists. It is already blocked by PhishDestroy, MetaMask, and SEAL, indicating that multiple security platforms have identified the site as a phishing vector. The combination of a fresh registration date, low trust score, and presence on blocklists supports the high‑risk assessment.

Defenders should immediately add proxif.ai to network and endpoint blocklists, enforce DNS filtering for its IP address 188.114.96.3, and monitor for any traffic to the associated CloudFlare name servers. Continuous vigilance is advised, as the active status suggests the operator may still be distributing phishing pages. Organizations should also educate users about the fake “Proxifai” branding to reduce successful credential harvesting attempts.