One-in-five rewriting pages is a great reminder that “it connects” ≠ “it’s trustworthy.” Free proxy pools are also where a lot of fraud egress recycles.

We’ve been digging into the same supply on IP99 (ThreatHunter): many working exits sit on residential/mobile space, not datacenters, and the useful signal is fresh proxy evidence—not a permanent label. When evidence ages out, the risk score should too.