Takedown Index

SocksEscort · Criminal hosting and proxies

Lead

DOJ

Result

US seizure warrants executed against a few dozen US-registered domains; Europol reports 34 domains and 23 servers located in seven countries seized or taken down on the 11 March 2026 action day. The service had offered access to about 369,000 IP addresses since summer 2020 and listed about 8,000 infected routers as of February 2026, about 2,500 of them in the United States. US authorities froze about $3.5 million in cryptocurrency.

Accountability

No individual outcomes recorded

Return status

Not established in the public record

Kidflix · Child sexual abuse material

Lead

BLKA

Result

Server seized March 11, 2025; 79 arrests, 1,393 suspects identified, more than 3,000 devices seized, and 39 children protected as of announcement.

Accountability

79 apprehended

Return status

Not established in the public record

ALPHV/BlackCat · Ransomware

Lead

FBI

Result

Leak-site and negotiation infrastructure disrupted; decryption keys/tooling provided to victims.

Accountability

No individual outcomes recorded

Return status

Returned under the same operators

ANOM · Criminal communications

Lead

FBI, AFP, Dutch National Police

Result

Law enforcement operated the platform itself from inception; more than 27 million messages collected from more than 12,000 devices sold to more than 300 criminal syndicates in more than 100 countries; the platform was shut down on 7 June 2021.

Accountability

16 charged, 2 apprehended, 8 convicted, and 3 publicly wanted

Return status

Later activity recorded, link to the original not established

Monopoly Market · Darknet market

Lead

Not established

Result

Server infrastructure covertly seized and monitored before public disclosure.

Accountability

1 charged, 1 apprehended, and 1 convicted

Return status

Not established in the public record