proxyfai[.]org

proxyfai.org entered the PhishDestroy evidence set on Apr 9, 2026. The stored content classification is generic phishing. The assembled evidence scores 81/100 (high).

Three independent sources are positive: VirusTotal, MetaMask, and SEAL. VirusTotal recorded 3 detections among 91 engines: CRDF, Gridinsoft, SOCRadar on Jul 28, 2026 at 03:12 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. The evidence is not unanimous. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Jun 26, 2026 at 08:32 UTC. URLScan completed without a malicious verdict (score 0). PhishStats returned no feed match on Apr 9, 2026 at 15:48 UTC.

HTTP 301 was recorded on Aug 7, 2026 at 10:22 UTC. Registration records for the domain list GoDaddy.com, LLC as the registrar and Apr 9, 2026 as the creation date. Registration preceded first observation by 0 days. At collection time, the hostname resolved to 172.67.203.130 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The stored server header is cloudflare. Captured page title: “Proxifai - One Platform for the Entire Dev Lifecycle”. The evidence archive retains 1 visual capture from PhishDestroy. IoC extraction completed on Jul 29, 2026 at 02:06 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Google Trust Services as the certificate issuer with validity through Jul 6, 2026; checked Apr 10, 2026 at 00:44 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence. Taken together, the page content and independent findings support classifying this hostname as generic phishing.