SMARTPROXY

Decodo is a Lithuanian company which has been in operation since 2018, originally as Smartproxy. They are known for residential, ISP, mobile, and datacenter proxies, scraping APIs, and web-data tools and are considered a large sized proxy provider. Decodo is operated by UAB Data Troops and is listed in the Tesonet portfolio alongside Oxylabs. Synthient's Research Team has found resellers such as TorchProxies, WiredProxies, and ShieldProxies providing access to Oxylabs; these relationships have not been separately established for Decodo. Indirect sales channels can introduce risk where downstream KYC controls are limited.

The related Oxylabs network is observed leveraging Honeygain to source IP addresses. Honeygain is distributed across Android, iOS, Windows, macOS, and Linux, is classified as Pay-Bandwidth and App Monetization, and has been observed in Cinema HQ, DooFlix, and RapidStreams. These findings come from Synthient's Oxylabs research; direct Honeygain supply to Decodo has not been confirmed.

Synthient's Research Team assigns a MEDIUM risk score to Honeygain based on the randomized sample of consent practices recorded in the Oxylabs research. This is the existing Honeygain assessment, not a separate consent-risk grade for Decodo.

Provider relationships

The highlighted node is Decodo. Honeygain is connected to Oxylabs; no direct Decodo-to-SDK supply edge is asserted. Advertised pool.

Yara Rules

See the Honeygain detection rule in the Oxylabs card. It identifies the SDK family, not the provider buying access to an endpoint.

Indicators of Compromise

See the Oxylabs indicator preview for the observed Honeygain files, domains, and IP addresses. These remain attributed to the Oxylabs research.