Security researchers have detected residential proxy services operating through internet addresses assigned to the Executive Office of the President, potentially allowing customers of those services to route their web traffic through the White House network. The White House did not immediately respond to a request for comment.
Layer3 Intel said it identified multiple proxy nodes communicating from the network, known as AS2650. Its review found proxy traffic exiting through the network 236 times between October 5 and November 3. The activity used six internet addresses and was detected on 26 of those 30 days, mostly between 5 p.m. and midnight.
Proxy-tracking firm Synthient said the activity included multiple Windows 11 installations of Infatica, a service that can be bundled into free mobile and desktop apps. Infatica was founded by Vladimir Fomenko. His web-hosting company, King Servers, hosted six of the eight internet addresses used by Russian state security services in 2016 attacks on election systems in Arizona and Illinois, according to the report.
Layer3 Intel also said it found 28 residential proxy services capable of routing traffic through the White House network. The firm said it came across the access while requesting global rotating access through proxy services, rather than by specifically targeting the network.
Residential proxies let customers use another person’s internet address to mask their own location or make traffic appear to come from a different place. They can be used for legitimate purposes, but security experts have also associated them with account takeovers, advertising fraud and large-scale content scraping. Researchers have warned that vulnerabilities in proxy services can also expose devices and local networks to probing or compromise.
These services can be installed through software development kits embedded in apps, with developers receiving payment for installations. The report cited a January 2026 webinar in which tracking service Spur found residential proxies across hundreds of government, utility, healthcare and financial networks.
Sources: Krebs on Security.