Public record database
Sources
The Internet Takedown Index is built from law enforcement releases, prosecutor and court records, government and agency publications, company reports, and news coverage. Every entry in the index traces back to one of the documents listed here.
4 of the 152 sources carry a recorded web address. The rest give publisher, title, and date so the document can be retrieved from the publisher.
Showing 1 to 25 of 137 sources
-
Operation Offsides: DOJ seizes domains streaming World Cup matches without authorization
US DOJ / ICE HSI, July 20, 2026
Establishes the seizure of more than 1,000 unauthorized World Cup streaming domains.
Prosecutor release P1 Used in 3 entries -
DOJ seizes cloud infrastructure behind Huione Group money-laundering backend
US DOJ, June 23, 2026
Establishes the seizure of a Huione Group-linked cloud-computing backend account.
Prosecutor release P1 Used in 2 entries -
HSI seizes domains behind non-consensual sexual deepfake services
US HSI / DOJ, June 12, 2026
Establishes the HSI-led seizure of CFAKE.com and SOCFAKE.com.
Law enforcement release P1 Used in 2 entries -
Europol statement on the April 2026 Operation PowerOFF wave
Europol, April 17, 2026
53 domains seized, four arrests, 21 participating countries
International agency release P2 Used in 3 entries -
PowerOFF: eight DDoS-for-hire domains seized
USAO Alaska, April 16, 2026
Establishes an eight-domain PowerOFF seizure attributed to USAO Alaska in April 2026.
Prosecutor release S2 Used in 1 entry -
DOJ disrupts GRU Unit 26165 DNS-hijacking router network
US DOJ, April 1, 2026
Establishes the court-authorized neutralization of the US-based portion of the GRU router network.
Prosecutor release P1 Used in 2 entries -
Coordinated disruption of Aisuru, KimWolf, JackSkid, and Mossad IoT DDoS botnets
USAO Alaska / US DOJ, March 19, 2026
Establishes the multi-country disruption of the four related IoT DDoS botnet families.
Prosecutor release S2 Used in 5 entries -
INTERPOL Synergia III: 72 countries target 45,000 malicious IPs
INTERPOL, March 13, 2026
Establishes the campaign's duration, 72-country participation, and 45,000 malicious IP target.
International agency release P2 Used in 1 entry -
LeakBase stolen-data marketplace seized
US DOJ / FBI, March 4, 2026
Establishes the LeakBase seizure and evidentiary preservation of user data.
Prosecutor release P1 Used in 1 entry -
SocksEscort residential proxy network disrupted
US DOJ, March 1, 2026
Establishes the seizure of dozens of SocksEscort domains.
Prosecutor release P1 Used in 2 entries -
Operation Red Card 2.0 targets cross-border online fraud
INTERPOL, February 18, 2026
Establishes the INTERPOL-coordinated Red Card 2.0 action against fraud infrastructure.
International agency release P2 Used in 1 entry -
Europol release on the November 2025 Operation Endgame action against Rhadamanthys, VenomRAT and Elysium
Europol, November 14, 2025
Wave 3 infrastructure figures and the Greek arrest
International agency release P2 Used in 5 entries -
Operation Serengeti 2.0 disrupts over 11,000 malicious cyber infrastructures in Africa
INTERPOL / AFRIPOL, August 22, 2025
Establishes the 18-country-plus-UK scope and 11,000+ malicious infrastructures figure.
International agency release P2 Used in 2 entries -
Bundeskriminalamt statement on Operation Deep Sentinel
Bundeskriminalamt, June 16, 2025
German lead role, arrests, seizure details
Law enforcement release P1 Used in 1 entry -
Europol release on the takedown of Archetyp Market
Europol, June 16, 2025
Operation dates, participating agencies and roles, arrests, asset seizure, marketplace scale
International agency release P2 Used in 11 entries -
Operation Secure: INTERPOL-coordinated action takes down 20,000+ malicious IPs and domains
INTERPOL, June 11, 2025
Establishes the 26-country scope, 20,000+ IP/domain figure, 41 servers seized, and 32 arrests.
International agency release P2 Used in 1 entry -
Europol release on Operation Endgame's 2025 action against initial access malware
Europol, May 23, 2025
Wave 2 infrastructure figures, charges, cryptocurrency seizures
International agency release P2 Used in 5 entries -
16 defendants federally charged in connection with DanaBot malware scheme
USAO Central District of California, May 22, 2025
Names lead defendants Aleksandr Stepanov ('JimmBee') and Artem Kalinkin ('Onix') among 16 charged in the DanaBot scheme (part of Operation Endgame wave 2).
Prosecutor release P1 Used in 2 entries -
United States v. Aleksandr Stepanov et al., DanaBot indictment
United States District Court for the Central District of California, May 22, 2025
16-defendant DanaBot charges announced with the Endgame wave
Indictment P0 Used in 2 entries -
US Department of Justice announcement charging the alleged Qakbot leader and seizing cryptocurrency
United States Department of Justice, May 22, 2025
Gallyamov charge, continued operation after the 2023 takedown
Government release P1 Used in 5 entries -
Europol statement on the Lumma Stealer disruption
Europol, May 21, 2025
Suspension of Europe-based infrastructure
International agency release P2 Used in 2 entries -
US Department of Justice statement on the seizure of Lumma Stealer command infrastructure
United States Department of Justice, May 21, 2025
Seizure of the central command structure and the marketplaces selling the malware
Government release P1 Used in 3 entries -
Kidflix: one of the largest child sexual exploitation platforms taken down
Europol, April 2, 2025
Establishes the German-led seizure of Kidflix and the nearly two-million-user figure.
International agency release P2 Used in 2 entries -
Garantex cryptocurrency exchange domains seized
US Secret Service / DOJ, March 7, 2025
Establishes the US domain seizure and parallel German/Finnish actions against Garantex.
Law enforcement release P1 Used in 3 entries -
Law enforcement disrupts Phobos ransomware and 8Base group
Europol, February 10, 2025
Establishes the disruption of more than 100 servers connected to Phobos/8Base.
International agency release P2 Used in 1 entry
Showing 1 to 25 of 137 sources