Public record database

# Corrections log

Every record in the index was read back against its sources. Where a value did not survive that check it was changed, and every change is listed here: the record it belongs to, the field, the value before, the value now, the reason, and the source that settled it.

138 corrections Each with the value before and the value now

45 records affected Of 108 records in the index

Research cutoff August 21, 2026

138 corrections across 45 of the 108 records in the index, in 14 fields.

In 10 of them the value recorded before and the value recorded after are the same. The audit dataset carries them that way and this log does not alter them.

What a correction means. A correction is the audit changing a value it could not confirm against a source, not the index withdrawing a claim. The value that was there before is kept and published here, so every change can be checked against the source that settled it.

Showing 1 to 50 of 138 corrections

| Record | Field | Was | Now | Why it changed | Source |
| --- | --- | --- | --- | --- | --- |
| [Operation PowerOFF April 2026 wave](https://takedownindex.org/takedowns/operation-poweroff-april-2026-wave) | Announcement date | 2026-04-17 | 2026-04-16 | Europol release publication date. | [Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave) |
| [Operation PowerOFF April 2026 wave](https://takedownindex.org/takedowns/operation-poweroff-april-2026-wave) | Start date | 2026-04-13 | 2026-04-13 | Corrected to match the cited source. | [Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave) |
| [Operation PowerOFF April 2026 wave](https://takedownindex.org/takedowns/operation-poweroff-april-2026-wave) | End date | 2026-04-17 | 2026-04-16 | Corrected to match the cited source. | [Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave) |
| [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption) | Start date | 2026-03-01 | 2026-03-11 | Corrected to match the cited source. | [SocksEscort residential proxy network disrupted](https://takedownindex.org/sources/us-doj-socksescort-residential-proxy-network-disrupted), [src\_europol\_socksescort\_2026](https://takedownindex.org/sources/www-europol-europa-eu-src_europol_socksescort_2026) |
| [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption) | End date | 2026-03-01 | 2026-03-11 | Corrected to match the cited source. | [SocksEscort residential proxy network disrupted](https://takedownindex.org/sources/us-doj-socksescort-residential-proxy-network-disrupted), [src\_europol\_socksescort\_2026](https://takedownindex.org/sources/www-europol-europa-eu-src_europol_socksescort_2026) |
| [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption) | Announcement date | Not recorded | 2026-03-12 | Corrected to match the cited source. | [SocksEscort residential proxy network disrupted](https://takedownindex.org/sources/us-doj-socksescort-residential-proxy-network-disrupted), [src\_europol\_socksescort\_2026](https://takedownindex.org/sources/www-europol-europa-eu-src_europol_socksescort_2026) |
| [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption) | What came down | Several dozen domains seized. | Several dozen domains seized. 34 domains and 23 servers seized/taken down across seven countries per Europol | Verified source added detail omitted from the input. | [SocksEscort residential proxy network disrupted](https://takedownindex.org/sources/us-doj-socksescort-residential-proxy-network-disrupted), [src\_europol\_socksescort\_2026](https://takedownindex.org/sources/www-europol-europa-eu-src_europol_socksescort_2026) |
| [LeakBase seizure](https://takedownindex.org/takedowns/leakbase-seizure) | Start date | 2026-03-04 | 2026-03-03 | Corrected to match the cited source. | [LeakBase stolen-data marketplace seized](https://takedownindex.org/sources/us-doj-fbi-leakbase-stolen-data-marketplace-seized) |
| [LeakBase seizure](https://takedownindex.org/takedowns/leakbase-seizure) | End date | 2026-03-04 | 2026-03-04 | Corrected to match the cited source. | [LeakBase stolen-data marketplace seized](https://takedownindex.org/sources/us-doj-fbi-leakbase-stolen-data-marketplace-seized) |
| [LeakBase seizure](https://takedownindex.org/takedowns/leakbase-seizure) | Announcement date | Not recorded | 2026-03-04 | Corrected to match the cited source. | [LeakBase stolen-data marketplace seized](https://takedownindex.org/sources/us-doj-fbi-leakbase-stolen-data-marketplace-seized) |
| [GRU DNS-hijacking router network disruption (APT28)](https://takedownindex.org/takedowns/gru-dns-hijacking-router-network-disruption-apt28) | Start date | 2026-04-01 | 2026-04-07 | Corrected to match the cited source. | [DOJ disrupts GRU Unit 26165 DNS-hijacking router network](https://takedownindex.org/sources/us-doj-doj-disrupts-gru-unit-26165-dns-hijacking-router-network) |
| [GRU DNS-hijacking router network disruption (APT28)](https://takedownindex.org/takedowns/gru-dns-hijacking-router-network-disruption-apt28) | End date | 2026-04-01 | 2026-04-07 | Corrected to match the cited source. | [DOJ disrupts GRU Unit 26165 DNS-hijacking router network](https://takedownindex.org/sources/us-doj-doj-disrupts-gru-unit-26165-dns-hijacking-router-network) |
| [GRU DNS-hijacking router network disruption (APT28)](https://takedownindex.org/takedowns/gru-dns-hijacking-router-network-disruption-apt28) | Announcement date | Not recorded | 2026-04-07 | Corrected to match the cited source. | [DOJ disrupts GRU Unit 26165 DNS-hijacking router network](https://takedownindex.org/sources/us-doj-doj-disrupts-gru-unit-26165-dns-hijacking-router-network) |
| [INTERPOL Synergia III](https://takedownindex.org/takedowns/interpol-synergia-iii) | Reported apprehended count | Not recorded | 94 | Corrected to match the cited source. | [INTERPOL Synergia III: 72 countries target 45,000 malicious IPs](https://takedownindex.org/sources/interpol-interpol-synergia-iii-72-countries-target-45-000-malicious-ips) |
| [INTERPOL Synergia III](https://takedownindex.org/takedowns/interpol-synergia-iii) | Start date | 2025-07-18 | 2025-07-18 | Corrected to match the cited source. | [INTERPOL Synergia III: 72 countries target 45,000 malicious IPs](https://takedownindex.org/sources/interpol-interpol-synergia-iii-72-countries-target-45-000-malicious-ips) |
| [INTERPOL Synergia III](https://takedownindex.org/takedowns/interpol-synergia-iii) | End date | 2026-01-31 | 2026-01-31 | Corrected to match the cited source. | [INTERPOL Synergia III: 72 countries target 45,000 malicious IPs](https://takedownindex.org/sources/interpol-interpol-synergia-iii-72-countries-target-45-000-malicious-ips) |
| [INTERPOL Synergia III](https://takedownindex.org/takedowns/interpol-synergia-iii) | Announcement date | Not recorded | 2026-03-13 | Corrected to match the cited source. | [INTERPOL Synergia III: 72 countries target 45,000 malicious IPs](https://takedownindex.org/sources/interpol-interpol-synergia-iii-72-countries-target-45-000-malicious-ips) |
| [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0) | Reported apprehended count | Not recorded | 651 | Corrected to match the cited source. | [Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud) |
| [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0) | Start date | 2026-02-18 | 2025-12-08 | Corrected to match the cited source. | [Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud) |
| [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0) | End date | 2026-02-18 | 2026-01-30 | Corrected to match the cited source. | [Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud) |
| [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0) | Announcement date | Not recorded | 2026-02-18 | Corrected to match the cited source. | [Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud) |
| [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0) | What came down | Fraud-related infrastructure disrupted across participating countries. | Fraud-related infrastructure disrupted across participating countries. 1,442 malicious IPs, domains, servers and related infrastructure taken down; 2,341 devices seized | Verified source added detail omitted from the input. | [Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud) |
| [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains) | Start date | 2026-07-20 | 2026-06-26 | Corrected to match the cited source. | [Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization](https://takedownindex.org/sources/us-doj-ice-hsi-operation-offsides-doj-seizes-domains-streaming-world-cup-matches) |
| [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains) | End date | 2026-07-20 | 2026-07-20 | Corrected to match the cited source. | [Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization](https://takedownindex.org/sources/us-doj-ice-hsi-operation-offsides-doj-seizes-domains-streaming-world-cup-matches) |
| [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains) | Announcement date | Not recorded | 2026-07-20 | Corrected to match the cited source. | [Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization](https://takedownindex.org/sources/us-doj-ice-hsi-operation-offsides-doj-seizes-domains-streaming-world-cup-matches) |
| [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains) | What came down | More than 1,000 domains seized. | More than 1,000 domains seized. More than 1,000 domains across three U.S. seizure actions; nearly 400 announced June 26 | Verified source added detail omitted from the input. | [Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization](https://takedownindex.org/sources/us-doj-ice-hsi-operation-offsides-doj-seizes-domains-streaming-world-cup-matches) |
| [Operation Ghost Click](https://takedownindex.org/takedowns/operation-ghost-click) | Reported charged count | 6 | 7 | Official indictment charged six Estonian nationals and one Russian national. | [Operation Ghost Click / DNSChanger case announcement](https://takedownindex.org/sources/fbi-usao-sdny-operation-ghost-click-dnschanger-case-announcement) |
| [Operation Ghost Click](https://takedownindex.org/takedowns/operation-ghost-click) | Reported apprehended count | 1 | 6 | Six Estonian defendants were arrested on action date; Russian defendant remained fugitive at announcement. | [Operation Ghost Click / DNSChanger case announcement](https://takedownindex.org/sources/fbi-usao-sdny-operation-ghost-click-dnschanger-case-announcement) |
| [Simda botnet disruption](https://takedownindex.org/takedowns/simda-botnet-disruption) | Start date | 2015-04-01 | 2015-04-09 | Corrected to match the cited source. | [Simda botnet disruption announcement](https://takedownindex.org/sources/interpol-simda-botnet-disruption-announcement) |
| [Simda botnet disruption](https://takedownindex.org/takedowns/simda-botnet-disruption) | End date | 2015-04-01 | 2015-04-09 | Corrected to match the cited source. | [Simda botnet disruption announcement](https://takedownindex.org/sources/interpol-simda-botnet-disruption-announcement) |
| [Simda botnet disruption](https://takedownindex.org/takedowns/simda-botnet-disruption) | Announcement date | Not recorded | 2015-04-13 | Corrected to match the cited source. | [Simda botnet disruption announcement](https://takedownindex.org/sources/interpol-simda-botnet-disruption-announcement) |
| [Simda botnet disruption](https://takedownindex.org/takedowns/simda-botnet-disruption) | What came down | C2 servers were seized or disrupted by participating national authorities in a coordinated action. | C2 servers were seized or disrupted by participating national authorities in a coordinated action. 10 C2 servers seized in the Netherlands; additional servers taken down in US, Russia, Luxembourg, Poland | Verified source added detail omitted from the input. | [Simda botnet disruption announcement](https://takedownindex.org/sources/interpol-simda-botnet-disruption-announcement) |
| [Operation Source / Beebone botnet disruption](https://takedownindex.org/takedowns/operation-source-beebone-botnet-disruption) | Announcement date | Not recorded | 2015-04-09 | Corrected to match the cited source. | [Operation Source: Beebone botnet disruption](https://takedownindex.org/sources/europol-operation-source-beebone-botnet-disruption) |
| [Operation Babylon](https://takedownindex.org/takedowns/operation-babylon) | Start date | 2015-01-01 | 2015-07-29 | Corrected to match the cited source. | [Operation Babylon: Italian-led Tor hidden-service takedown](https://takedownindex.org/sources/europol-operation-babylon-italian-led-tor-hidden-service-takedown) |
| [Operation Babylon](https://takedownindex.org/takedowns/operation-babylon) | End date | 2015-12-31 | 2015-07-29 | Corrected to match the cited source. | [Operation Babylon: Italian-led Tor hidden-service takedown](https://takedownindex.org/sources/europol-operation-babylon-italian-led-tor-hidden-service-takedown) |
| [Operation Babylon](https://takedownindex.org/takedowns/operation-babylon) | Announcement date | Not recorded | 2015-07-31 | Corrected to match the cited source. | [Operation Babylon: Italian-led Tor hidden-service takedown](https://takedownindex.org/sources/europol-operation-babylon-italian-led-tor-hidden-service-takedown) |
| [Darkode forum takedown](https://takedownindex.org/takedowns/darkode-forum-takedown) | Reported charged count | Not recorded | 12 | Corrected to match the cited source. | [Darkode forum takedown announcement](https://takedownindex.org/sources/us-doj-usao-wdpa-darkode-forum-takedown-announcement) |
| [Darkode forum takedown](https://takedownindex.org/takedowns/darkode-forum-takedown) | Reported apprehended count | 28 | 28 | Europol annual review reports 28 arrests; DOJ reports 12 U.S.-charged and 70 global charge/arrest/search targets. | [Darkode forum takedown announcement](https://takedownindex.org/sources/us-doj-usao-wdpa-darkode-forum-takedown-announcement) |
| [Darkode forum takedown](https://takedownindex.org/takedowns/darkode-forum-takedown) | Aliases | Not recorded | Operation Shrouded Horizon | Verified source added detail omitted from the input. | [Darkode forum takedown announcement](https://takedownindex.org/sources/us-doj-usao-wdpa-darkode-forum-takedown-announcement) |
| [Wall Street Market / Silkkitie (Valhalla) shutdown](https://takedownindex.org/takedowns/wall-street-market-silkkitie-valhalla-shutdown) | Reported charged count | Not recorded | 4 | Three German administrators and one Brazilian moderator charged in U.S. proceedings. | [Wall Street Market and Silkkitie takedown announcement](https://takedownindex.org/sources/us-doj-wall-street-market-and-silkkitie-takedown-announcement), [Wall Street Market takedown coordination](https://takedownindex.org/sources/europol-wall-street-market-takedown-coordination) |
| [Wall Street Market / Silkkitie (Valhalla) shutdown](https://takedownindex.org/takedowns/wall-street-market-silkkitie-valhalla-shutdown) | Reported apprehended count | 3 | 4 | Three admins arrested in Germany plus moderator Marcos Paulo de Oliveira-Annibale arrested in Brazil per DOJ release. | [Wall Street Market and Silkkitie takedown announcement](https://takedownindex.org/sources/us-doj-wall-street-market-and-silkkitie-takedown-announcement), [Wall Street Market takedown coordination](https://takedownindex.org/sources/europol-wall-street-market-takedown-coordination) |
| [Operation Pacifier / Playpen](https://takedownindex.org/takedowns/operation-pacifier-playpen) | Reported charged count | Not recorded | 3 | Core operating group: creator/lead administrator Steven Chase and two co-administrators prosecuted in Western District of North Carolina; broader user cases excluded. | [Operation Pacifier / Playpen case history](https://takedownindex.org/sources/fbi-us-doj-operation-pacifier-playpen-case-history) |
| [Operation Pacifier / Playpen](https://takedownindex.org/takedowns/operation-pacifier-playpen) | Reported apprehended count | Not recorded | 3 | Corrected to match the cited source. | [Operation Pacifier / Playpen case history](https://takedownindex.org/sources/fbi-us-doj-operation-pacifier-playpen-case-history) |
| [Operation Pacifier / Playpen](https://takedownindex.org/takedowns/operation-pacifier-playpen) | Reported convicted count | Not recorded | 3 | Corrected to match the cited source. | [Operation Pacifier / Playpen case history](https://takedownindex.org/sources/fbi-us-doj-operation-pacifier-playpen-case-history) |
| [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure) | Reported charged count | Not recorded | 1 | Corrected to match the cited source. | [Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t) |
| [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure) | Reported apprehended count | Not recorded | 1 | Corrected to match the cited source. | [Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t) |
| [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure) | Reported convicted count | Not recorded | 1 | Corrected to match the cited source. | [Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t) |
| [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure) | What happened afterward | Not recorded | Operator Milomir Desnica arrested in Austria in November 2022, extradited to the United States June 23, 2023, pleaded guilty November 8, 2023, and was sentenced February 15, 2024 to 168 months. | Corrected to match the cited source. | [Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t) |
| [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure) | Group completeness | not\_applicable | likely\_complete | Corrected to match the cited source. | [Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t) |
| [Operation SpecTor](https://takedownindex.org/takedowns/operation-spector) | What came down | No new infrastructure seizure; operation used previously seized Monopoly Market data/evidence to support arrests. | Operation SpecTor was a follow-on enforcement sweep based on the December 2021 Monopoly server seizure; no separate new Monopoly infrastructure seizure occurred on May 2, 2023. | Corrected to match the cited source. | [Operation SpecTor: 288 dark web vendors arrested worldwide](https://takedownindex.org/sources/europol-operation-spector-288-dark-web-vendors-arrested-worldwide) |

- [Operation PowerOFF April 2026 wave](https://takedownindex.org/takedowns/operation-poweroff-april-2026-wave)

Announcement date

Was: 2026-04-17

Now: 2026-04-16

Europol release publication date.

[Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave)
- [Operation PowerOFF April 2026 wave](https://takedownindex.org/takedowns/operation-poweroff-april-2026-wave)

Start date

Was: 2026-04-13

Now: 2026-04-13

Corrected to match the cited source.

[Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave)
- [Operation PowerOFF April 2026 wave](https://takedownindex.org/takedowns/operation-poweroff-april-2026-wave)

End date

Was: 2026-04-17

Now: 2026-04-16

Corrected to match the cited source.

[Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave)
- [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Start date

Was: 2026-03-01

Now: 2026-03-11

Corrected to match the cited source.

[SocksEscort residential proxy network disrupted](https://takedownindex.org/sources/us-doj-socksescort-residential-proxy-network-disrupted), [src\_europol\_socksescort\_2026](https://takedownindex.org/sources/www-europol-europa-eu-src_europol_socksescort_2026)
- [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

End date

Was: 2026-03-01

Now: 2026-03-11

Corrected to match the cited source.

[SocksEscort residential proxy network disrupted](https://takedownindex.org/sources/us-doj-socksescort-residential-proxy-network-disrupted), [src\_europol\_socksescort\_2026](https://takedownindex.org/sources/www-europol-europa-eu-src_europol_socksescort_2026)
- [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

Announcement date

Was: Not recorded

Now: 2026-03-12

Corrected to match the cited source.

[SocksEscort residential proxy network disrupted](https://takedownindex.org/sources/us-doj-socksescort-residential-proxy-network-disrupted), [src\_europol\_socksescort\_2026](https://takedownindex.org/sources/www-europol-europa-eu-src_europol_socksescort_2026)
- [SocksEscort proxy network disruption](https://takedownindex.org/takedowns/socksescort-proxy-network-disruption)

What came down

Was: Several dozen domains seized.

Now: Several dozen domains seized. 34 domains and 23 servers seized/taken down across seven countries per Europol

Verified source added detail omitted from the input.

[SocksEscort residential proxy network disrupted](https://takedownindex.org/sources/us-doj-socksescort-residential-proxy-network-disrupted), [src\_europol\_socksescort\_2026](https://takedownindex.org/sources/www-europol-europa-eu-src_europol_socksescort_2026)
- [LeakBase seizure](https://takedownindex.org/takedowns/leakbase-seizure)

Start date

Was: 2026-03-04

Now: 2026-03-03

Corrected to match the cited source.

[LeakBase stolen-data marketplace seized](https://takedownindex.org/sources/us-doj-fbi-leakbase-stolen-data-marketplace-seized)
- [LeakBase seizure](https://takedownindex.org/takedowns/leakbase-seizure)

End date

Was: 2026-03-04

Now: 2026-03-04

Corrected to match the cited source.

[LeakBase stolen-data marketplace seized](https://takedownindex.org/sources/us-doj-fbi-leakbase-stolen-data-marketplace-seized)
- [LeakBase seizure](https://takedownindex.org/takedowns/leakbase-seizure)

Announcement date

Was: Not recorded

Now: 2026-03-04

Corrected to match the cited source.

[LeakBase stolen-data marketplace seized](https://takedownindex.org/sources/us-doj-fbi-leakbase-stolen-data-marketplace-seized)
- [GRU DNS-hijacking router network disruption (APT28)](https://takedownindex.org/takedowns/gru-dns-hijacking-router-network-disruption-apt28)

Start date

Was: 2026-04-01

Now: 2026-04-07

Corrected to match the cited source.

[DOJ disrupts GRU Unit 26165 DNS-hijacking router network](https://takedownindex.org/sources/us-doj-doj-disrupts-gru-unit-26165-dns-hijacking-router-network)
- [GRU DNS-hijacking router network disruption (APT28)](https://takedownindex.org/takedowns/gru-dns-hijacking-router-network-disruption-apt28)

End date

Was: 2026-04-01

Now: 2026-04-07

Corrected to match the cited source.

[DOJ disrupts GRU Unit 26165 DNS-hijacking router network](https://takedownindex.org/sources/us-doj-doj-disrupts-gru-unit-26165-dns-hijacking-router-network)
- [GRU DNS-hijacking router network disruption (APT28)](https://takedownindex.org/takedowns/gru-dns-hijacking-router-network-disruption-apt28)

Announcement date

Was: Not recorded

Now: 2026-04-07

Corrected to match the cited source.

[DOJ disrupts GRU Unit 26165 DNS-hijacking router network](https://takedownindex.org/sources/us-doj-doj-disrupts-gru-unit-26165-dns-hijacking-router-network)
- [INTERPOL Synergia III](https://takedownindex.org/takedowns/interpol-synergia-iii)

Reported apprehended count

Was: Not recorded

Now: 94

Corrected to match the cited source.

[INTERPOL Synergia III: 72 countries target 45,000 malicious IPs](https://takedownindex.org/sources/interpol-interpol-synergia-iii-72-countries-target-45-000-malicious-ips)
- [INTERPOL Synergia III](https://takedownindex.org/takedowns/interpol-synergia-iii)

Start date

Was: 2025-07-18

Now: 2025-07-18

Corrected to match the cited source.

[INTERPOL Synergia III: 72 countries target 45,000 malicious IPs](https://takedownindex.org/sources/interpol-interpol-synergia-iii-72-countries-target-45-000-malicious-ips)
- [INTERPOL Synergia III](https://takedownindex.org/takedowns/interpol-synergia-iii)

End date

Was: 2026-01-31

Now: 2026-01-31

Corrected to match the cited source.

[INTERPOL Synergia III: 72 countries target 45,000 malicious IPs](https://takedownindex.org/sources/interpol-interpol-synergia-iii-72-countries-target-45-000-malicious-ips)
- [INTERPOL Synergia III](https://takedownindex.org/takedowns/interpol-synergia-iii)

Announcement date

Was: Not recorded

Now: 2026-03-13

Corrected to match the cited source.

[INTERPOL Synergia III: 72 countries target 45,000 malicious IPs](https://takedownindex.org/sources/interpol-interpol-synergia-iii-72-countries-target-45-000-malicious-ips)
- [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0)

Reported apprehended count

Was: Not recorded

Now: 651

Corrected to match the cited source.

[Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud)
- [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0)

Start date

Was: 2026-02-18

Now: 2025-12-08

Corrected to match the cited source.

[Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud)
- [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0)

End date

Was: 2026-02-18

Now: 2026-01-30

Corrected to match the cited source.

[Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud)
- [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0)

Announcement date

Was: Not recorded

Now: 2026-02-18

Corrected to match the cited source.

[Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud)
- [Red Card 2.0](https://takedownindex.org/takedowns/red-card-2-0)

What came down

Was: Fraud-related infrastructure disrupted across participating countries.

Now: Fraud-related infrastructure disrupted across participating countries. 1,442 malicious IPs, domains, servers and related infrastructure taken down; 2,341 devices seized

Verified source added detail omitted from the input.

[Operation Red Card 2.0 targets cross-border online fraud](https://takedownindex.org/sources/interpol-operation-red-card-2-0-targets-cross-border-online-fraud)
- [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains)

Start date

Was: 2026-07-20

Now: 2026-06-26

Corrected to match the cited source.

[Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization](https://takedownindex.org/sources/us-doj-ice-hsi-operation-offsides-doj-seizes-domains-streaming-world-cup-matches)
- [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains)

End date

Was: 2026-07-20

Now: 2026-07-20

Corrected to match the cited source.

[Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization](https://takedownindex.org/sources/us-doj-ice-hsi-operation-offsides-doj-seizes-domains-streaming-world-cup-matches)
- [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains)

Announcement date

Was: Not recorded

Now: 2026-07-20

Corrected to match the cited source.

[Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization](https://takedownindex.org/sources/us-doj-ice-hsi-operation-offsides-doj-seizes-domains-streaming-world-cup-matches)
- [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains)

What came down

Was: More than 1,000 domains seized.

Now: More than 1,000 domains seized. More than 1,000 domains across three U.S. seizure actions; nearly 400 announced June 26

Verified source added detail omitted from the input.

[Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization](https://takedownindex.org/sources/us-doj-ice-hsi-operation-offsides-doj-seizes-domains-streaming-world-cup-matches)
- [Operation Ghost Click](https://takedownindex.org/takedowns/operation-ghost-click)

Reported charged count

Was: 6

Now: 7

Official indictment charged six Estonian nationals and one Russian national.

[Operation Ghost Click / DNSChanger case announcement](https://takedownindex.org/sources/fbi-usao-sdny-operation-ghost-click-dnschanger-case-announcement)
- [Operation Ghost Click](https://takedownindex.org/takedowns/operation-ghost-click)

Reported apprehended count

Was: 1

Now: 6

Six Estonian defendants were arrested on action date; Russian defendant remained fugitive at announcement.

[Operation Ghost Click / DNSChanger case announcement](https://takedownindex.org/sources/fbi-usao-sdny-operation-ghost-click-dnschanger-case-announcement)
- [Simda botnet disruption](https://takedownindex.org/takedowns/simda-botnet-disruption)

Start date

Was: 2015-04-01

Now: 2015-04-09

Corrected to match the cited source.

[Simda botnet disruption announcement](https://takedownindex.org/sources/interpol-simda-botnet-disruption-announcement)
- [Simda botnet disruption](https://takedownindex.org/takedowns/simda-botnet-disruption)

End date

Was: 2015-04-01

Now: 2015-04-09

Corrected to match the cited source.

[Simda botnet disruption announcement](https://takedownindex.org/sources/interpol-simda-botnet-disruption-announcement)
- [Simda botnet disruption](https://takedownindex.org/takedowns/simda-botnet-disruption)

Announcement date

Was: Not recorded

Now: 2015-04-13

Corrected to match the cited source.

[Simda botnet disruption announcement](https://takedownindex.org/sources/interpol-simda-botnet-disruption-announcement)
- [Simda botnet disruption](https://takedownindex.org/takedowns/simda-botnet-disruption)

What came down

Was: C2 servers were seized or disrupted by participating national authorities in a coordinated action.

Now: C2 servers were seized or disrupted by participating national authorities in a coordinated action. 10 C2 servers seized in the Netherlands; additional servers taken down in US, Russia, Luxembourg, Poland

Verified source added detail omitted from the input.

[Simda botnet disruption announcement](https://takedownindex.org/sources/interpol-simda-botnet-disruption-announcement)
- [Operation Source / Beebone botnet disruption](https://takedownindex.org/takedowns/operation-source-beebone-botnet-disruption)

Announcement date

Was: Not recorded

Now: 2015-04-09

Corrected to match the cited source.

[Operation Source: Beebone botnet disruption](https://takedownindex.org/sources/europol-operation-source-beebone-botnet-disruption)
- [Operation Babylon](https://takedownindex.org/takedowns/operation-babylon)

Start date

Was: 2015-01-01

Now: 2015-07-29

Corrected to match the cited source.

[Operation Babylon: Italian-led Tor hidden-service takedown](https://takedownindex.org/sources/europol-operation-babylon-italian-led-tor-hidden-service-takedown)
- [Operation Babylon](https://takedownindex.org/takedowns/operation-babylon)

End date

Was: 2015-12-31

Now: 2015-07-29

Corrected to match the cited source.

[Operation Babylon: Italian-led Tor hidden-service takedown](https://takedownindex.org/sources/europol-operation-babylon-italian-led-tor-hidden-service-takedown)
- [Operation Babylon](https://takedownindex.org/takedowns/operation-babylon)

Announcement date

Was: Not recorded

Now: 2015-07-31

Corrected to match the cited source.

[Operation Babylon: Italian-led Tor hidden-service takedown](https://takedownindex.org/sources/europol-operation-babylon-italian-led-tor-hidden-service-takedown)
- [Darkode forum takedown](https://takedownindex.org/takedowns/darkode-forum-takedown)

Reported charged count

Was: Not recorded

Now: 12

Corrected to match the cited source.

[Darkode forum takedown announcement](https://takedownindex.org/sources/us-doj-usao-wdpa-darkode-forum-takedown-announcement)
- [Darkode forum takedown](https://takedownindex.org/takedowns/darkode-forum-takedown)

Reported apprehended count

Was: 28

Now: 28

Europol annual review reports 28 arrests; DOJ reports 12 U.S.-charged and 70 global charge/arrest/search targets.

[Darkode forum takedown announcement](https://takedownindex.org/sources/us-doj-usao-wdpa-darkode-forum-takedown-announcement)
- [Darkode forum takedown](https://takedownindex.org/takedowns/darkode-forum-takedown)

Aliases

Was: Not recorded

Now: Operation Shrouded Horizon

Verified source added detail omitted from the input.

[Darkode forum takedown announcement](https://takedownindex.org/sources/us-doj-usao-wdpa-darkode-forum-takedown-announcement)
- [Wall Street Market / Silkkitie (Valhalla) shutdown](https://takedownindex.org/takedowns/wall-street-market-silkkitie-valhalla-shutdown)

Reported charged count

Was: Not recorded

Now: 4

Three German administrators and one Brazilian moderator charged in U.S. proceedings.

[Wall Street Market and Silkkitie takedown announcement](https://takedownindex.org/sources/us-doj-wall-street-market-and-silkkitie-takedown-announcement), [Wall Street Market takedown coordination](https://takedownindex.org/sources/europol-wall-street-market-takedown-coordination)
- [Wall Street Market / Silkkitie (Valhalla) shutdown](https://takedownindex.org/takedowns/wall-street-market-silkkitie-valhalla-shutdown)

Reported apprehended count

Was: 3

Now: 4

Three admins arrested in Germany plus moderator Marcos Paulo de Oliveira-Annibale arrested in Brazil per DOJ release.

[Wall Street Market and Silkkitie takedown announcement](https://takedownindex.org/sources/us-doj-wall-street-market-and-silkkitie-takedown-announcement), [Wall Street Market takedown coordination](https://takedownindex.org/sources/europol-wall-street-market-takedown-coordination)
- [Operation Pacifier / Playpen](https://takedownindex.org/takedowns/operation-pacifier-playpen)

Reported charged count

Was: Not recorded

Now: 3

Core operating group: creator/lead administrator Steven Chase and two co-administrators prosecuted in Western District of North Carolina; broader user cases excluded.

[Operation Pacifier / Playpen case history](https://takedownindex.org/sources/fbi-us-doj-operation-pacifier-playpen-case-history)
- [Operation Pacifier / Playpen](https://takedownindex.org/takedowns/operation-pacifier-playpen)

Reported apprehended count

Was: Not recorded

Now: 3

Corrected to match the cited source.

[Operation Pacifier / Playpen case history](https://takedownindex.org/sources/fbi-us-doj-operation-pacifier-playpen-case-history)
- [Operation Pacifier / Playpen](https://takedownindex.org/takedowns/operation-pacifier-playpen)

Reported convicted count

Was: Not recorded

Now: 3

Corrected to match the cited source.

[Operation Pacifier / Playpen case history](https://takedownindex.org/sources/fbi-us-doj-operation-pacifier-playpen-case-history)
- [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure)

Reported charged count

Was: Not recorded

Now: 1

Corrected to match the cited source.

[Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t)
- [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure)

Reported apprehended count

Was: Not recorded

Now: 1

Corrected to match the cited source.

[Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t)
- [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure)

Reported convicted count

Was: Not recorded

Now: 1

Corrected to match the cited source.

[Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t)
- [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure)

What happened afterward

Was: Not recorded

Now: Operator Milomir Desnica arrested in Austria in November 2022, extradited to the United States June 23, 2023, pleaded guilty November 8, 2023, and was sentenced February 15, 2024 to 168 months.

Corrected to match the cited source.

[Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t)
- [Monopoly Market seizure](https://takedownindex.org/takedowns/monopoly-market-seizure)

Group completeness

Was: not\_applicable

Now: likely\_complete

Corrected to match the cited source.

[Citizen of Croatia and Serbia Charged with Running Monopoly Drug Market on the Darknet](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-citizen-of-croatia-and-serb), [Monopoly Market infrastructure seizure](https://takedownindex.org/sources/europol-monopoly-market-infrastructure-seizure), [Serbian Citizen Sentenced to 14 Years in Prison for Operating Monopoly Narcotics Marketplace on Dark Web](https://takedownindex.org/sources/united-states-attorney-s-office-district-of-columbia-serbian-citizen-sentenced-t)
- [Operation SpecTor](https://takedownindex.org/takedowns/operation-spector)

What came down

Was: No new infrastructure seizure; operation used previously seized Monopoly Market data/evidence to support arrests.

Now: Operation SpecTor was a follow-on enforcement sweep based on the December 2021 Monopoly server seizure; no separate new Monopoly infrastructure seizure occurred on May 2, 2023.

Corrected to match the cited source.

[Operation SpecTor: 288 dark web vendors arrested worldwide](https://takedownindex.org/sources/europol-operation-spector-288-dark-web-vendors-arrested-worldwide)

Showing 1 to 50 of 138 corrections
