Want to Rent an Internet Address at the White House?

The Executive Office of the President network, which is reserved for the White House, has been used to exit residential proxy services. Security firm Layer3 Intel detected multiple residential proxy nodes beaconing from this network between October 5 and November 3.

A review of the proxies available from the White House network showed they exited from the network 236 times during that period. The activity was relatively persistent, with the proxy exit nodes coming from six internet addresses on 26 of the 30 days.

The proxy tracking company Synthient identified the activity as related to multiple installations of a service called Infatica. This proxy program is often integrated into "free" mobile and desktop applications.

Infatica's founder, Vladimir Fomenko, is a Russian man whose hosting firm, King Servers, was home to six of the eight internet addresses used by Russia's state security services to compromise databases for election systems in Arizona and Illinois in 2016.

Multiple services found

Layer3 Intel found that 28 separate residential proxy services were able to exit through the White House network. This indicates a widespread use of these services within the Executive Office of the President.

The majority of the activity happens in the evening, between 5 p.m. and midnight. The White House did not immediately respond to a request for comment.

Security risks and abuse

Residential proxy services are a major source of unwanted and often malicious traffic, including account takeover, advertising fraud, and mass content scraping for AI projects. They can also introduce serious security risks.

In January 2026, dozens of proxy services were forced to patch their networks after Synthient Founder Ben Brundage showed how cybercriminals were abusing a vulnerability in these services to seize control over devices inside the local networks of unsuspecting users.

Widespread problem

These proxy services are all too commonly found on government and corporate networks. In a webinar in January 2026, the proxy tracking service Spur found residential proxies in nearly 300 government owned and operated networks, 318 utility companies, 166 healthcare companies or hospitals, and 141 companies in banking and finance.

In a blog post earlier this year, the security firm Infoblox said it discovered that fully 65% of its customer base was querying one or more residential proxy related domains.