Skip to main content
Back to the takedown index

DoubleVPN takedown

June 2021, Criminal hosting and proxies
Led by Politie (Netherlands National Police)

Extended pass entry, last reviewed August 21, 2026

What was taken down?

Servers and domains seized.

See what happened

What happened to the people?

No individual outcomes are recorded against this entry.
Group accounted for: Not established

See people and accountability

Did it stay down?

Not established in the public record. No later activity is recorded against this entry.

See what happened afterward

A Dutch-led coalition took offline DoubleVPN, a VPN service marketed on cybercrime forums and used to anonymize criminal network intrusions and ransomware attacks.

Date
June 2021
Target
DoubleVPN, bulletproof vpn service
Activity
Criminal hosting and proxies
Operational lead
Dutch National Police
Partners
Europol[1]
Jurisdiction
Not established
Outcome
Servers and domains seized.
Status
Completed
Legal mechanism
Dutch judicial search/seizure authority; coordinated international warrants.
Group accounted for
Not established

Infrastructure

Servers seized, with no count in the record.

Identifier Recorded as Status Notes
Not published Server Seized Servers supporting the DoubleVPN service.[1]

Domains and onion addresses are shown defanged. Where the record gives a count but no identifier, the count is shown in place of one. This list carries only what appears in the cited sources.

No individual is named against this entry in the cited record. That is a gap in what has been published rather than a finding that nobody was involved.

Group accounted for: Not established

The cited record does not say how large the group was or whether everyone involved has been identified.

See the organizations and roles behind this action

Not established in the public record. No later activity is recorded against this entry.

Numbered markers throughout this entry link to the source that supports the claim beside them.

Official sources

  1. [1]
    VPN service seized in coordinated international law enforcement action

    Europol, June 30, 2021, Source grade P2

    Establishes the Dutch-led seizure of DoubleVPN infrastructure.

    No address recorded for this source. Publisher, title, and date are given so it can be retrieved from the publisher.

Coverage note. Added from deep-research aggregation pass. Not independently re-verified source-by-source to the same standard as the original 38-incident core; source_quality capped at S2/P2 pending a dedicated verification pass.