Appreciate the input, guys, really. Yeah, I figured proxies are usually the weak link, not just auth methods, lol. Combining whitelist and user:pass with good proxies and rotation seems like the way to go but still not foolproof. Gotta stay sharp and keep testing, otherwise you get burnt fast.