Skip to main content

Public record database

Takedown Index

The Internet Takedown Index documents law enforcement seizures, sinkholes, takeovers, and shutdowns of criminal internet infrastructure. Every entry traces to a cited source.

104 takedowns indexed Across 37 jurisdictions
Last reviewed August 20, 2026
Takedown Date Category Lead organization Jurisdiction Status Derived from the recorded end date. A date in the past reads Completed, no date reads Ongoing. The dataset carries no separate status column.
Megaupload seizure ID: td_2012_megaupload Jan 19, 2012 Piracy and IP DOJ Not established Completed
Operation Ghost Click ID: td_2011_dnschanger Nov 8, 2011 Malware and botnets FBI Not established Completed
Coreflood botnet disruption ID: td_2011_coreflood Apr 13, 2011 Malware and botnets DOJ and FBI Not established Completed
Operation In Our Sites (initial phase) ID: td_2010_operation_in_our_sites Jun 30, 2010 Piracy and IP ICE-HSI and IPR Center Not established Completed

Showing 101 to 104 of 104 takedowns

104 results

January 2012

Megaupload seizure

Megaupload Piracy and IP

Lead
DOJ
Result
18 domains were seized; servers in multiple countries were taken offline or frozen pending the case.
Accountability
1 charged and 4 apprehended
Return status
Not established in the public record

November 2011

Operation Ghost Click

DNSChanger Malware and botnets

Lead
FBI
Result
FBI seized rogue DNS servers and, with court authorization, substituted clean DNS servers to keep previously infected machines online during remediation.
Accountability
6 charged and 1 apprehended
Return status
Not established in the public record

April 2011

Coreflood botnet disruption

Coreflood Malware and botnets

Lead
DOJ and FBI
Result
US authorities seized Coreflood's command-and-control servers and a set of associated domains, then used civil/criminal process to substitute law-enforcement-controlled servers that instructed infected machines to stop the malware.
Accountability
No individual outcomes recorded
Return status
Not established in the public record

June 2010

Operation In Our Sites (initial phase)

Nine domains offering pirated first-run films Piracy and IP

Lead
ICE-HSI and IPR Center
Result
Domains seized and replaced with law-enforcement notices; program continued with additional waves.
Accountability
No individual outcomes recorded
Return status
Not established in the public record

Previous Page 5 of 5 Next

Filters

Filter takedowns