proxyfy[.]online

Analysis of proxyfy.online indicates a confirmed phishing domain targeting development lifecycle platforms. The domain, registered on April 9, 2026, through GoDaddy.com, LLC, currently resolves to IP address 104.21.79.34 and is actively flagged by multiple security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware. The page title, 'Proxifai - One Platform for the Entire Dev Lifecycle,' suggests an attempt to impersonate a legitimate development tool or service, though the exact brand or product being mimicked is not explicitly confirmed in available data. Infrastructure analysis reveals the domain is hosted with an SSL certificate issued by Google Trust Services, which may lend a superficial appearance of legitimacy but does not mitigate the threat. The domain appears in 23 threat intelligence pulses on AlienVault OTX and holds a trust score of 0/100 from Gridinsoft, reinforcing its malicious classification. While four security vendors on aggregated scanning platforms have flagged the domain, the absence of broader detection does not diminish the risk, as phishing domains often evade initial detection through rapid rotation or targeted distribution. Defenders should treat this domain as high-risk and implement immediate blocking at the network and endpoint levels. The short registration period (three months) and active status on multiple blocklists suggest this is part of an ongoing campaign rather than an isolated incident. Further investigation into associated IP ranges, WHOIS history, and potential ties to other malicious domains is recommended to assess the full scope of the threat.