Skip to main content
Back to the takedown index

Operation PowerOFF

Operation PowerOFF April 2026 wave

April 2026, DDoS for hire

Corrected and source linked. Verified August 21, 2026.

What was taken down?

53 domains seized; more than three million criminal accounts exposed; more than 75,000 warning messages sent to users.[1]

See what happened

What happened to the people?

Officials reported 4 apprehended.
Group accounted for: Partial

See people and accountability

Did it stay down?

Not established in the public record. No later activity is recorded against this entry.

See what happened afterward

Multinational wave seizing 53 DDoS-for-hire domains across 21 countries, accompanied by arrests and a large-scale user-warning campaign.[1]

Announced April 16, 2026.

Date
April 13 to April 16, 2026
Target
53 booter and stresser domains, booter stresser services
Activity
DDoS for hire
Operational lead
Not established
Partners
Europol[1]
Jurisdiction
European Union, United States, and United Kingdom
Outcome
53 domains seized; more than three million criminal accounts exposed; more than 75,000 warning messages sent to users.
Status
Completed
Legal mechanism
National judicial process across participating states; Europol coordination
Group accounted for
Partial

Infrastructure

53 domains seized.

Identifier Recorded as Status Notes
Not published 53 domains Seized 53 booter and stresser domains seized across 21 countries.[1]

Domains and onion addresses are shown defanged. Where the record gives a count but no identifier, the count is shown in place of one. This list carries only what appears in the cited sources.

No individual is named against this entry in the cited record. That is a gap in what has been published rather than a finding that nobody was involved.

Group accounted for: Partial

Four arrests across 53 seized domains leaves most operators unaccounted for.

53 independent services with separate operators.

See the organizations and roles behind this action

Prosecutions ongoing as of the cutoff.[1]

Not established in the public record. No later activity is recorded against this entry.

Return class G. The class is a research grading carried in the source dataset and its scale is not published, so this page relies on the relationship and confidence values instead. How this index handles it.

The re-verification pass changed 3 values on this record. What was there before is kept below so the change can be checked.

Field Was Now Why it changed
Announcement date 2026-04-17 2026-04-16 Europol release publication date. Europol statement on the April 2026 Operation PowerOFF wave
Start date 2026-04-13 2026-04-13 Corrected to match the cited source. Europol statement on the April 2026 Operation PowerOFF wave
End date 2026-04-17 2026-04-16 Corrected to match the cited source. Europol statement on the April 2026 Operation PowerOFF wave

The value that was there before is kept so the change can be checked. See these corrections in the full log.

Numbered markers throughout this entry link to the source that supports the claim beside them.

What each part of this entry rests on

The audit recorded which sources carry which part of the record. These are those sources.

Official sources

  1. [1]
    Europol statement on the April 2026 Operation PowerOFF wave

    Europol, April 17, 2026, Source grade P2

    53 domains seized, four arrests, 21 participating countries

    Open source