Is Tab Proxy Down? Verified 2026 Status After IPIDEA

Updated July 12, 2026: In our checks, tabproxy.com does not resolve in public DNS and the service cannot be reached. Google named Tab Proxy among the brands controlled by the actors behind IPIDEA. The accurate summary: Tab Proxy was materially disrupted and its original site is unavailable — which is not the same as proof that every server and IP was permanently destroyed.

Keep three layers separate when someone asks "is Tab Proxy still working?":

• Website: tabproxy.com returns no DNS answer in our tests; the storefront, dashboard and docs do not load.
• Retail service: login, top-ups, endpoint generation, renewals and support cannot be verified through the original domain.
• Backend network: Google seriously degraded the shared IPIDEA pool, but later independent telemetry showed much of that supply survived, went dormant, or moved through other resale channels.

For any production task, treat Tab Proxy as unavailable and unsuitable. That is more defensible than "the company was permanently liquidated," which the public record does not establish.

Source: Google Threat Intelligence Group, captured by ProxyRadar. The detailed claims live in the linked original report.

What Tab Proxy marketed#

Tab Proxy positioned itself as a low-cost residential provider with a familiar feature set for the IPIDEA family: rotating residential proxies billed by traffic, static residential/ISP addresses, a per-IP SOCKS5 product and a desktop proxy client for choosing exit locations, with HTTP(S) and SOCKS5 support and country/city/ISP targeting.

Marketing pages advertised a very large pool — figures around 200 million residential IPs across 190+ countries were common. These were vendor claims, never independently audited, and they describe a network that is no longer reachable through the original brand. They cannot be treated as current capacity.

Why Google named Tab Proxy#

On January 28, 2026, Google Threat Intelligence Group (GTIG) published its investigation into IPIDEA and said many ostensibly independent providers were controlled by the same actors. The named list explicitly included Tab Proxy (tabproxy.com) alongside 360 Proxy, 922 Proxy, ABC Proxy, Cherry Proxy, IP2World, Luna Proxy, PIA S5 Proxy, PY Proxy and several VPN and SDK brands.

According to GTIG, SDKs embedded in mobile and desktop apps recruited residential exit nodes, and some apps did not clearly disclose that a user's device and home IP would join a commercial proxy network. Across the ecosystem, Google documented more than 600 Android apps, roughly 3,075 Windows files and about 7,400 second-tier command-and-control servers, and observed more than 550 tracked threat groups using IPIDEA exits in a single seven-day window.

These are network-wide figures. They do not prove every Tab Proxy customer or IP was malicious, but they explain why legal, platform and security action followed. Google described the result as significant degradation and a device pool reduced by millions — disruption, not a claim the brand can never return. Reuters, BleepingComputer and others reported the same framing, and Proxyway's 2026 market research lists tabproxy.com in its "shut down" column.

The NetNut takedown and what it means for Tab Proxy#

On July 2, 2026, Google, the FBI and Lumen announced action against the NetNut residential proxy network ("Popa"). Google stated it has "high confidence that many popular residential proxy brands are in fact whitelabeling the NetNut botnet" and warned that disrupted operators often start reselling competitors' capacity.

Be precise: the NetNut post did not publish a new list re-attributing Tab Proxy specifically to NetNut. What is confirmed is that Tab Proxy was named in the January IPIDEA action and that the ecosystem shares pools heavily — IPinfo found roughly nine in ten IPIDEA IPs also appeared in other providers. A dead Tab Proxy storefront does not mean "Tab Proxy IPs" left the market; that capacity may be resold elsewhere.

What can be verified now#

• tabproxy.com does not resolve in our DNS checks; the site does not load.
• Google explicitly named Tab Proxy in the January 2026 IPIDEA disruption.
• Independent trackers list tabproxy.com among shut-down IPIDEA brands.
• No verified Tab Proxy announcement of permanent closure and no confirmed refund program were found.

Tab Proxy's website and retail service are unavailable after the IPIDEA disruption, and its original domain no longer resolves. There is no verified permanent-shutdown notice, and part of the pool may persist via resellers — which does not restore Tab Proxy's service.

What former Tab Proxy customers should do#

Do not top up an old balance, pay an "unlock" fee, or reinstall a Tab Proxy client from a mirror, Telegram link or ad. After a domain disappears, look-alike sites and reuploaded clients are prime phishing and malware vectors.

1. Rotate any reused password; revoke Tab Proxy credentials and API keys stored in browsers, antidetect profiles, scripts, CI secrets and servers.
2. Review important accounts for unfamiliar sessions and source-IP changes after the outage began.
3. If a Tab Proxy client is still installed, quarantine or remove it, check startup entries and scheduled tasks, and run an updated scan. Precautionary, not proof that every build was malicious.
4. For a refund, preserve invoices and support messages, send one documented request to the last verified contact, and ask your card issuer or PayPal about dispute deadlines. Crypto payments normally have no chargeback.

Choosing a safer replacement#

A large advertised pool and a low per-GB or per-IP price do not prove informed consent from the device owners routing your traffic. Ask who legally operates the service, how device owners opt in and out, whether upstream suppliers and resellers are disclosed, and how abuse is handled. Treat "ethical," "clean" and "compliant" as marketing until backed by a DPA and auditable procedures, then run a small paid test measuring success rate, latency, geolocation accuracy, CAPTCHA rate, session stability and support.

For related incidents, see our reports on PIA S5 Proxy, 922 Proxy, ABCProxy and Cherry Proxy, plus the 9Proxy outage report.

Commercial disclosure: ProxyUniverse is one partner option available through this publication. This mention is not an independent audit of its IP sourcing or compliance. Apply the same consent, ownership and performance checks and compare other providers before purchasing.

FAQ#

Is Tab Proxy shut down for good?#

Its website is unavailable and its domain does not resolve, and Google named it in the IPIDEA disruption. No verified announcement confirms permanent corporate closure, so "currently unavailable and disrupted" is accurate.

Was every Tab Proxy IP from an infected device?#

Not established. Google documented substantial trojanized and deceptive sourcing across the shared IPIDEA supply chain, not universal maliciousness of every IP.

Is Tab Proxy part of the NetNut botnet?#

Tab Proxy was named in the January IPIDEA action. Google's July NetNut post warns "many" brands whitelabel NetNut but did not specifically re-attribute Tab Proxy. Treat that specific claim as unconfirmed.

Can I recover my balance?#

There is no confirmed general refund program. Preserve evidence and promptly ask your payment provider about dispute options.

Sources#

• GTIG: Disrupting the World's Largest Residential Proxy Network
• GTIG: Google's Continued Disruption of Malicious Residential Proxy Networks (NetNut)
• Reuters: Google disrupts large residential proxy network
• BleepingComputer: Google disrupts IPIDEA residential proxy networks
• KrebsOnSecurity: FBI Seizes NetNut Proxy Platform, Popa Botnet
• Proxyway: Google Disrupts 10+ IPIDEA-Related Providers
• IPinfo: Residential Proxy Infrastructure Research