Skip to main content

Public record database

Sources

The Internet Takedown Index is built from law enforcement releases, prosecutor and court records, government and agency publications, company reports, and news coverage. Every entry in the index traces back to one of the documents listed here.

152 sources indexed Cited 575 times across the index
137 official documents Government, prosecutor, court, and agency records
Research cutoff August 20, 2026

4 of the 152 sources carry a recorded web address. The rest give publisher, title, and date so the document can be retrieved from the publisher.

Showing 26 to 50 of 152 sources

Source Type Description Publisher Quality Used in entries
Kidflix: one of the largest child sexual exploitation platforms taken down
International agency release Establishes the German-led seizure of Kidflix and the nearly two-million-user figure. Europol P2 2
Garantex cryptocurrency exchange domains seized
Law enforcement release Establishes the US domain seizure and parallel German/Finnish actions against Garantex. US Secret Service / DOJ P1 3
Law enforcement disrupts Phobos ransomware and 8Base group
International agency release Establishes the disruption of more than 100 servers connected to Phobos/8Base. Europol P2 1
Cracked and Nulled cybercrime marketplaces seized
Prosecutor release Establishes the multinational seizure of the Cracked and Nulled forums. US DOJ P1 2
Justice Department seizes domains behind HeartSender phishing-kit operation
Prosecutor release Establishes the 39-domain seizure targeting HeartSender. US DOJ P1 3
Europol statement on the December 2024 Operation PowerOFF wave
International agency release 27 platforms taken down, three arrests Europol P2 3
Matrix encrypted communications platform taken down
International agency release Establishes the French-Dutch takedown of Matrix infrastructure. Europol P2 3
Illegal IPTV distribution network dismantled across Europe
International agency release Establishes the 102 identified suspects, 11 arrests, and 112+ searches. Europol P2 1
INTERPOL operation Synergia II targets cybercrime infrastructure across 95 countries
International agency release Establishes the more-than-90-country scope and 22,000+ malicious infrastructures disrupted. INTERPOL P2 1
Operation Magnus: RedLine and META infostealers dismantled
Law enforcement release Establishes the Dutch-led takedown of RedLine and META Stealer infrastructure. Dutch National Police / operation-magnus.com P1 4
Black Lotus Labs research on the Raptor Train botnet
Participating company report More than 200,000 compromised devices, botnet architecture Lumen Technologies Black Lotus Labs T1 3
Court-Authorized Operation Disrupts Worldwide Botnet Used by People's Republic of China State-Sponsored Hackers
Government release Seizure of botnet control, attribution to Integrity Technology Group, French assistance United States Department of Justice P1 6
Radar/Dispossessor ransomware infrastructure disabled
Prosecutor release Establishes the disabling of Radar/Dispossessor infrastructure across the US, UK, and Germany, and the 'Brain' alias for the alleged operator. US DOJ / FBI Cleveland S2 4
Bundeskriminalamt statement and wanted list published for Operation Endgame
Law enforcement release Named suspects remaining at large, German lead role Bundeskriminalamt P1 2
Largest ever operation against botnets hits dropper malware ecosystem
International agency release Wave 1 infrastructure figures, initiating countries, arrests Europol P2 8
911 S5 Botnet Dismantled and Its Administrator Arrested in Coordinated International Operation
Government release Arrest of YunHe Wang, domain and server seizures, 19 million compromised IP addresses including 613,841 in the United States United States Department of Justice P1 9
Treasury Sanctions Actors Behind the 911 S5 Botnet
Government release Sanctions designations of Wang, associates, and three Thai entities United States Department of the Treasury P2 3
Specialist reporting on the 2024 BreachForums seizure and brief domain recovery
News report Temporary recovery of the domain by operators Established specialist cybersecurity publication S2 1
FBI seizure notice and statement regarding BreachForums
Law enforcement release Domain and Telegram channel seizure Federal Bureau of Investigation P1 5
United States v. Dmitry Yuryevich Khoroshev, Criminal No. 24-299
Indictment 26-count indictment identifying LockBitSupp as Khoroshev; coordinated sanctions and reward United States District Court for the District of New Jersey P0 6
Samourai Wallet founders arrested; infrastructure seized
Prosecutor release Establishes the arrest of Samourai Wallet's founders and the seizure of web servers (Iceland) and domain/app infrastructure (US). US DOJ / USAO SDNY / IRS-CI / FBI P1 4
LabHost, one of the biggest phishing services worldwide, taken down
International agency release Establishes the 19-country operation against LabHost. Europol P2 2
Nemesis Market darknet marketplace shut down
Law enforcement release Establishes the BKA seizure of Nemesis Market infrastructure. Bundeskriminalamt P1 1
US Department of Justice announcements on LockBit charges and defendants
Government release Charges against Sungatov, Kondratyev, Vasiliev, Astamirov, Panev, and Matveev; arrest and extradition history United States Department of Justice P1 15
Law enforcement disrupt world's biggest ransomware operation
International agency release Participating countries and coordination roles, Poland and Ukraine arrests Europol P2 6

Showing 26 to 50 of 152 sources