Skip to main content

Public record database

Sources

The Internet Takedown Index is built from law enforcement releases, prosecutor and court records, government and agency publications, company reports, and news coverage. Every entry in the index traces back to one of the documents listed here.

152 sources indexed Cited 575 times across the index
137 official documents Government, prosecutor, court, and agency records
Research cutoff August 20, 2026

4 of the 152 sources carry a recorded web address. The rest give publisher, title, and date so the document can be retrieved from the publisher.

Showing 1 to 25 of 152 sources

Source Type Description Publisher Quality Used in entries
Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization
Prosecutor release Establishes the seizure of more than 1,000 unauthorized World Cup streaming domains. US DOJ / ICE HSI P1 3
DOJ seizes cloud infrastructure behind Huione Group money-laundering backend
Prosecutor release Establishes the seizure of a Huione Group-linked cloud-computing backend account. US DOJ P1 2
HSI seizes domains behind non-consensual sexual deepfake services
Law enforcement release Establishes the HSI-led seizure of CFAKE.com and SOCFAKE.com. US HSI / DOJ P1 2
Europol statement on the April 2026 Operation PowerOFF wave
International agency release 53 domains seized, four arrests, 21 participating countries Europol P2 3
PowerOFF: eight DDoS-for-hire domains seized
Prosecutor release Establishes an eight-domain PowerOFF seizure attributed to USAO Alaska in April 2026. USAO Alaska S2 1
DOJ disrupts GRU Unit 26165 DNS-hijacking router network
Prosecutor release Establishes the court-authorized neutralization of the US-based portion of the GRU router network. US DOJ P1 2
Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets
Prosecutor release Establishes the multi-country disruption of the four related IoT DDoS botnet families. USAO Alaska / US DOJ S2 5
INTERPOL Synergia III: 72 countries target 45,000 malicious IPs
International agency release Establishes the campaign's duration, 72-country participation, and 45,000 malicious IP target. INTERPOL P2 1
LeakBase stolen-data marketplace seized
Prosecutor release Establishes the LeakBase seizure and evidentiary preservation of user data. US DOJ / FBI P1 1
SocksEscort residential proxy network disrupted
Prosecutor release Establishes the seizure of dozens of SocksEscort domains. US DOJ P1 2
Operation Red Card 2.0 targets cross-border online fraud
International agency release Establishes the INTERPOL-coordinated Red Card 2.0 action against fraud infrastructure. INTERPOL P2 1
Europol release on the November 2025 Operation Endgame action against Rhadamanthys, VenomRAT and Elysium
International agency release Wave 3 infrastructure figures and the Greek arrest Europol P2 5
BreachForums hacking forum admin resentenced to three years in prison
News report Fourth Circuit vacatur of the original sentence and Fitzpatrick's 2025-09-16 resentencing to 36 months custody plus 20 years supervised release. BleepingComputer S1 1
Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa
International agency release Establishes the 18-country-plus-UK scope and 11,000+ malicious infrastructures figure. INTERPOL / AFRIPOL P2 2
Bundeskriminalamt statement on Operation Deep Sentinel
Law enforcement release German lead role, arrests, seizure details Bundeskriminalamt P1 1
Europol release on the takedown of Archetyp Market
International agency release Operation dates, participating agencies and roles, arrests, asset seizure, marketplace scale Europol P2 11
Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains
International agency release Establishes the 26-country scope, 20,000+ IP/domain figure, 41 servers seized, and 32 arrests. INTERPOL P2 1
Europol release on Operation Endgame's 2025 action against initial access malware
International agency release Wave 2 infrastructure figures, charges, cryptocurrency seizures Europol P2 5
16 defendants federally charged in connection with DanaBot malware scheme
Prosecutor release Names lead defendants Aleksandr Stepanov ('JimmBee') and Artem Kalinkin ('Onix') among 16 charged in the DanaBot scheme (part of Operation Endgame wave 2). USAO Central District of California P1 2
Lumma Stealer operators register replacement domains within a day of seizure
News report Establishes that Lumma operators stood up three replacement domains within roughly a day of the initial May 2025 seizure, which DOJ/Microsoft subsequently also seized. Aggregated security reporting S1 1
United States v. Aleksandr Stepanov et al., DanaBot indictment
Indictment 16-defendant DanaBot charges announced with the Endgame wave United States District Court for the Central District of California P0 2
US Department of Justice announcement charging the alleged Qakbot leader and seizing cryptocurrency
Government release Gallyamov charge, continued operation after the 2023 takedown United States Department of Justice P1 5
Europol statement on the Lumma Stealer disruption
International agency release Suspension of Europe-based infrastructure Europol P2 2
US Department of Justice statement on the seizure of Lumma Stealer command infrastructure
Government release Seizure of the central command structure and the marketplaces selling the malware United States Department of Justice P1 3
Disrupting Lumma Stealer: Microsoft leads global action against favored cybercrime tool
Participating company report Court order, approximately 2,300 domains seized, more than 394,000 infected computers identified between 2025-03-16 and 2025-05-16, partner roles Microsoft On the Issues T1 8

Showing 1 to 25 of 152 sources