Proxy IP is clean but sessions still get flagged – it's probably DNS