[Back to the takedown index](https://takedownindex.org/takedowns)

[Operation PowerOFF](https://takedownindex.org/takedowns/operation-poweroff)

# Operation PowerOFF April 2026 wave

April 2026, DDoS for hire

Corrected and source linked. Verified August 21, 2026.

What was taken down?

53 domains seized; more than three million criminal accounts exposed; more than 75,000 warning messages sent to users.[[1]](#source-1)

[See what happened](#what-happened)

What happened to the people?

Officials reported 4 apprehended.
Group accounted for: Partial

[See people and accountability](#people)

Did it stay down?

Not established in the public record. No later activity is recorded against this entry.

[See what happened afterward](#afterward)

## What happened

Multinational wave seizing 53 DDoS-for-hire domains across 21 countries, accompanied by arrests and a large-scale user-warning campaign.[[1]](#source-1)

Announced April 16, 2026.

**Date:** April 13 to April 16, 2026

**Target:** 53 booter and stresser domains, booter stresser services

**Activity:** DDoS for hire

**Operational lead:** Not established

**Partners**

Europol[[1]](#source-1)

- [European Union Agency for Law Enforcement Cooperation](https://takedownindex.org/organizations/european-union-agency-for-law-enforcement-cooperation), coordinator

**Jurisdiction:** European Union, United States, and United Kingdom

**Outcome:** 53 domains seized; more than three million criminal accounts exposed; more than 75,000 warning messages sent to users.

**Status:** Completed

**Legal mechanism:** National judicial process across participating states; Europol coordination

**Group accounted for:** Partial

### Infrastructure

53 domains seized.

| Identifier | Recorded as | Status | Notes |
| --- | --- | --- | --- |
| Not published | 53 domains | Seized | 53 booter and stresser domains seized across 21 countries.[[1]](#source-1) |

Domains and onion addresses are shown defanged. Where the record gives a count but no identifier, the count is shown in place of one. This list carries only what appears in the cited sources.

## People and accountability

No individual is named against this entry in the cited record. That is a gap in what has been published rather than a finding that nobody was involved.

Group accounted for: Partial

Four arrests across 53 seized domains leaves most operators unaccounted for.

53 independent services with separate operators.

[See the organizations and roles behind this action](https://takedownindex.org/takedowns/operation-poweroff-april-2026-wave/organizations)

## What happened afterward

Prosecutions ongoing as of the cutoff.[[1]](#source-1)

Not established in the public record. No later activity is recorded against this entry.

Return class G. The class is a research grading carried in the source dataset and its scale is not published, so this page relies on the relationship and confidence values instead. [How this index handles it](https://takedownindex.org/about).

## Corrections to this record

The re-verification pass changed 3 values on this record. What was there before is kept below so the change can be checked.

| Field | Was | Now | Why it changed |
| --- | --- | --- | --- |
| Announcement date | 2026-04-17 | 2026-04-16 | Europol release publication date. [Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave) |
| Start date | 2026-04-13 | 2026-04-13 | Corrected to match the cited source. [Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave) |
| End date | 2026-04-17 | 2026-04-16 | Corrected to match the cited source. [Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave) |

The value that was there before is kept so the change can be checked. [See these corrections in the full log](https://takedownindex.org/corrections?takedown=operation-poweroff-april-2026-wave).

## Sources

Numbered markers throughout this entry link to the source that supports the claim beside them.

### What each part of this entry rests on

The audit recorded which sources carry which part of the record. These are those sources.

- Identity, dates and counts, [[1]](#source-1) [Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave)
- Agencies and roles, [[1]](#source-1) [Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave)

### Official sources

1.
[Europol statement on the April 2026 Operation PowerOFF wave](https://takedownindex.org/sources/europol-europol-statement-on-the-april-2026-operation-poweroff-wave)

Europol, April 17, 2026, Source grade P2

53 domains seized, four arrests, 21 participating countries

[Open source](https://www.europol.europa.eu/media-press/newsroom/news/europol-supported-global-operation-targets-over-75-000-users-engaged-in-ddos-attacks)

Research context

## How this entry was checked

Corrected and source linked

Every claim traces to a source the audit opened and read, and the audit changed something on this record. Each edit is listed with the reason for it.

Verified: August 21, 2026

Sources cited: 1

Research cutoff: August 21, 2026

The audit changed 3 fields on this entry.

[See what changed](https://takedownindex.org/corrections?takedown=operation-poweroff-april-2026-wave)

See also

[About the Internet Takedown Index](https://takedownindex.org/about)

Related entries

- [Operation PowerOFF December 2024 wave](https://takedownindex.org/takedowns/operation-poweroff-december-2024-wave)
- [Operation PowerOFF December 2022 wave](https://takedownindex.org/takedowns/operation-poweroff-december-2022-wave)
- [Webstresser.org takedown](https://takedownindex.org/takedowns/webstresser-org-takedown)

Report updates or corrections

Help keep this record accurate.

[Submit feedback](https://takedownindex.org/about/corrections-and-updates)
