[Back to the takedown index](https://takedownindex.org/takedowns) [Operation PowerOFF](https://takedownindex.org/takedowns/operation-poweroff) # Operation PowerOFF May 2025 wave May 2025, [DDoS for hire](https://takedownindex.org/takedowns/categories/ddos-for-hire) Led by [Defense Criminal Investigative Service](https://takedownindex.org/organizations/defense-criminal-investigative-service) Source linked. Verified August 23, 2026. What was taken down? Nine booter domains seized. DOJ put the running totals for the four-year effort at more than 75 domains seized and more than 11 defendants charged in Los Angeles and Anchorage. Alongside the seizures, HSI, DCIS and the Netherlands Police ran a search-engine advertising campaign aimed at deterring people looking for DDoS services.[[1]](#source-1) [See what happened](#what-happened) What happened to the people? Officials reported 4 apprehended. Group accounted for: Partial [See people and accountability](#people) Did it stay down? Not established in the public record. No later activity is recorded against this entry. [See what happened afterward](#afterward) ## What happened The Justice Department announced the court-authorized seizure of nine DDoS-for-hire domains, executed by the Defense Criminal Investigative Service's Cyber-West Resident Agency, while Poland's Central Cybercrime Bureau simultaneously announced the arrest of four administrators of such services. DOJ said several of those arrested had operated sites seized in earlier Central District of California operations.[[1]](#source-1) Announced May 7, 2025. **Date:** May 2025 **Target:** 9 booter and stresser services, booter stresser services **Activity:** DDoS for hire **Operational lead:** DCIS **Partners** USAO-CDCA, Policja, and 3 more[[1]](#source-1) - [United States Attorney's Office for the Central District of California](https://takedownindex.org/organizations/united-states-attorney-s-office-for-the-central-district-of-california), prosecuting - [Polish Police](https://takedownindex.org/organizations/polish-police), arresting - [Homeland Security Investigations](https://takedownindex.org/organizations/homeland-security-investigations), supporting - [United States Attorney's Office for the District of Alaska](https://takedownindex.org/organizations/united-states-attorney-s-office-for-the-district-of-alaska), supporting - [Politie (Netherlands National Police)](https://takedownindex.org/organizations/politie-netherlands-national-police), other **Jurisdiction:** United States, Poland, and Netherlands **Outcome:** Nine booter domains seized. DOJ put the running totals for the four-year effort at more than 75 domains seized and more than 11 defendants charged in Los Angeles and Anchorage. Alongside the seizures, HSI, DCIS and the Netherlands Police ran a search-engine advertising campaign aimed at deterring people looking for DDoS services. **Status:** Completed **Legal mechanism:** Court-authorized seizure warrants supported by an affidavit filed in the Central District of California; separate Polish national process for the arrests **Group accounted for:** Partial ### Infrastructure 9 domains seized. | Identifier | Recorded as | Status | Notes | | --- | --- | --- | --- | | Not published | 9 domains | Seized, United States | Nine booter domains seized under court-authorized warrants, executed by DCIS's Cyber-West Resident Agency. None of the nine were named in the release.[[1]](#source-1) | Domains and onion addresses are shown defanged. Where the record gives a count but no identifier, the count is shown in place of one. This list carries only what appears in the cited sources. ## People and accountability No individual is named against this entry in the cited record. That is a gap in what has been published rather than a finding that nobody was involved. Group accounted for: Partial Four administrators arrested against nine seized domains, and no identities were published. Nine services seized; four administrators arrested in Poland. [See the organizations and roles behind this action](https://takedownindex.org/takedowns/operation-poweroff-may-2025-wave/organizations) ## What happened afterward DOJ said the effort was ongoing and aimed at targeting all known booter sites. The disposition of the four Polish arrests was not published in this release.[[1]](#source-1) Not established in the public record. No later activity is recorded against this entry. ## Sources Numbered markers throughout this entry link to the source that supports the claim beside them. ### What each part of this entry rests on The audit recorded which sources carry which part of the record. These are those sources. - Identity, dates and counts, [[1]](#source-1) [Law Enforcement Seizes 9 DDoS-for-Hire Webpages as Part of Global Crackdown on ‘Booter’ and ‘Stresser’ DDoS Services](https://takedownindex.org/sources/united-states-attorney-s-office-for-the-central-district-of-california-law-enfor) - Agencies and roles, [[1]](#source-1) [Law Enforcement Seizes 9 DDoS-for-Hire Webpages as Part of Global Crackdown on ‘Booter’ and ‘Stresser’ DDoS Services](https://takedownindex.org/sources/united-states-attorney-s-office-for-the-central-district-of-california-law-enfor) ### Official sources 1. [Law Enforcement Seizes 9 DDoS-for-Hire Webpages as Part of Global Crackdown on ‘Booter’ and ‘Stresser’ DDoS Services](https://takedownindex.org/sources/united-states-attorney-s-office-for-the-central-district-of-california-law-enfor) United States Attorney's Office for the Central District of California, May 7, 2025, Source grade P1 Supporting detail not recorded. [Open source](https://www.justice.gov/usao-cdca/pr/law-enforcement-seizes-9-ddos-hire-webpages-part-global-crackdown-booter-and-stresser) Coverage note. - DOJ states the action was taken in conjunction with Operation PowerOFF, hence the parent link. - The release also lists the principal partners of Operation PowerOFF as a whole (Europol, USAO Alaska, CCIPS, FBI Anchorage and Los Angeles, HSI Columbus, BKA, NCA, Netherlands Police, Polish Central Cybercrime Bureau, Brazilian Federal Police, Japan's NPA, France's Police Nationale and others). That is a campaign-level list. Only the agencies the release ties to an act in this wave are carried as role rows. - DOJ says several of the administrators arrested in Poland had operated websites seized in previous Central District of California operations, but names neither the people nor the earlier services, so no resurgence row is proposed. - Poland's Central Cybercrime Bureau (CBZC) is recorded under the existing org\_pl\_police id; the corpus has no separate CBZC organization. - resurgence\_class left null: the A-G scale is undefined in this dataset and was not guessed. Research context ## How this entry was checked Source linked Every claim in this entry traces to a source the audit opened and read. Nothing on the record needed changing. Verified: August 23, 2026 Sources cited: 1 Research cutoff: August 23, 2026 Limitations recorded against this entry - DOJ says 'this week's sweeping law enforcement activity' without giving an exact seizure or arrest date, so started\_on and ended\_on use the announcement date of 2025-05-07. - None of the nine seized domains were named in the release. - The four people arrested in Poland were not named by the Polish or US authorities in this release, so no person records are carried. - No Europol or Polish CBZC release for this wave was retrievable in the audit; Europol's site search returns a JavaScript shell. The four arrests rest on DOJ's account of the Polish announcement. See also [About the Internet Takedown Index](https://takedownindex.org/about) Related entries - [Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption) - [911 S5 botnet dismantlement](https://takedownindex.org/takedowns/911-s5-botnet-dismantlement) - [Operation PowerOFF December 2018 wave](https://takedownindex.org/takedowns/operation-poweroff-december-2018-wave) Report updates or corrections Help keep this record accurate. [Submit feedback](https://takedownindex.org/about/corrections-and-updates)