# Internet Takedown Index

The Internet Takedown Index is a public record of law enforcement actions against criminal internet infrastructure: seizures, sinkholes, covert takeovers, and compelled shutdowns. Every entry traces to a cited source, and every gap is written down.

[About the Internet Takedown Index](https://takedownindex.org/about)

## Index overview

Counted at the August 20, 2026 research cutoff, last regenerated August 21, 2026.

104 documented takedowns, 37 jurisdictions, 86 organizations, 49 named people, 88 infrastructure records, and 152 cited sources.

## Takedowns by category
[View all](https://takedownindex.org/takedowns)

- [Malware and botnets](https://takedownindex.org/takedowns?activity_type=botnet_malware): 19
- [Darknet market](https://takedownindex.org/takedowns?activity_type=darknet_market): 12
- [Fraud and stolen data](https://takedownindex.org/takedowns?activity_type=fraud_stolen_data): 11
- [Criminal hosting and proxies](https://takedownindex.org/takedowns?activity_type=criminal_hosting_proxy): 10
- [Cryptocurrency laundering](https://takedownindex.org/takedowns?activity_type=crypto_laundering): 8
- [Ransomware](https://takedownindex.org/takedowns?activity_type=ransomware): 7
- [State sponsored](https://takedownindex.org/takedowns?activity_type=state_sponsored): 6
- [Child sexual abuse material](https://takedownindex.org/takedowns?activity_type=csam): 6
- [Piracy and IP](https://takedownindex.org/takedowns?activity_type=piracy_ip): 6
- [Multi threat campaign](https://takedownindex.org/takedowns?activity_type=multi_threat_campaign): 5
- [DDoS for hire](https://takedownindex.org/takedowns?activity_type=ddos_for_hire): 5
- [Criminal communications](https://takedownindex.org/takedowns?activity_type=criminal_communications): 4
- [Terrorism and extremism](https://takedownindex.org/takedowns?activity_type=terrorism_extremism): 2
- [Trafficking and exploitation](https://takedownindex.org/takedowns?activity_type=trafficking_exploitation): 2
- [Phishing](https://takedownindex.org/takedowns?activity_type=phishing): 1

* * *

## Takedowns by jurisdiction
[View all](https://takedownindex.org/takedowns)

- 🇺🇸[United States](https://takedownindex.org/takedowns?country=US): 32
- 🇳🇱[Netherlands](https://takedownindex.org/takedowns?country=NL): 19
- 🇩🇪[Germany](https://takedownindex.org/takedowns?country=DE): 18
- 🇪🇺[European Union](https://takedownindex.org/takedowns?country=EU): 18
- 🇬🇧[United Kingdom](https://takedownindex.org/takedowns?country=GB): 17
- 🇫🇷[France](https://takedownindex.org/takedowns?country=FR): 12
- 🇨🇦[Canada](https://takedownindex.org/takedowns?country=CA): 9
- 🇱🇹[Lithuania](https://takedownindex.org/takedowns?country=LT): 5
- 🇸🇪[Sweden](https://takedownindex.org/takedowns?country=SE): 5
- 🇺🇦[Ukraine](https://takedownindex.org/takedowns?country=UA): 5
- 37 jurisdictions recorded

A takedown is counted against every jurisdiction named in its scope, so an operation coordinated across five countries appears under all five.

* * *

## Recent takedowns
[View all](https://takedownindex.org/takedowns)

- [Operation Offsides (2026 FIFA World Cup streaming domains)](https://takedownindex.org/takedowns/operation-offsides-2026-fifa-world-cup-streaming-domains) July 2026 ICE-HSI and IPR Center
- [Huione Group backend infrastructure seizure](https://takedownindex.org/takedowns/huione-group-backend-infrastructure-seizure) June 2026 FBI
- [CFAKE.com and SOCFAKE.com seizure](https://takedownindex.org/takedowns/cfake-com-and-socfake-com-seizure) June 2026 HSI
- [PowerOFF eight-domain action (April 2026, USAO Alaska wave)](https://takedownindex.org/takedowns/poweroff-eight-domain-action-april-2026-usao-alaska-wave) April 2026 USAO-AK
- [Operation PowerOFF April 2026 wave](https://takedownindex.org/takedowns/operation-poweroff-april-2026-wave) April 2026 Not established
- [GRU DNS-hijacking router network disruption (APT28)](https://takedownindex.org/takedowns/gru-dns-hijacking-router-network-disruption-apt28) April 2026 FBI
- [Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption) March 2026 USAO-AK and FBI
- [LeakBase seizure](https://takedownindex.org/takedowns/leakbase-seizure) March 2026 FBI

## Cited, graded, and open about the gaps

Nothing here is aggregated away or stripped of detail. This is a public record built from public documents, and it tells you how strong each document is.

- **Every entry traces to a cited source.** Publisher, title, and date are recorded for each one, and each source carries the dataset's own provenance grade.
- **Official records outrank reporting.** Charging documents, seizure notices, and agency statements set the facts. Reporting establishes timing and aftermath.
- **Unknown never means zero.** A blank count means the public record does not establish a number, not that the number is nothing.
- **What was deliberately excluded is published too.** 12 considered candidates are listed with the reason each was left out, and 38 records are flagged as the source-verified core so the rest cannot pass for it.

[Read the methodology](https://takedownindex.org/about)