proxysale[.]com

On 28 July 2026, an analysis of the domain proxysale.com was performed. The domain is registered through GoDaddy.com, LLC and was originally created on 31 August 2004. It is currently hosted on the IP address 104.21.43.151 and uses Cloudflare name servers carl.ns.cloudflare.com and karina.ns.cloudflare.com.

VirusTotal reports that one out of ninety‑one security scanners flagged the domain, indicating at least a single detection of malicious activity. The domain is listed on a single external blocklist, PhishDestroy, which continues to classify it as an active generic phishing source. No additional public intelligence such as page title, SSL certificate details, HTTP response codes, or brand‑specific lures has been disclosed, leaving the exact phishing payload or targeted brand unknown.

The limited detection footprint, combined with the active blocklist entry, suggests that threat actors are leveraging the long‑standing domain for credential‑harvesting campaigns, likely benefiting from the established domain age to evade age‑based heuristics. Defenders should consider adding proxysale.com to domain‑level deny lists, enforce DNS‑level blocking, and monitor traffic to the associated IP for anomalous patterns. Continuous re‑evaluation is recommended, as further evidence such as phishing page content or additional vendor detections could emerge, altering the risk posture.