Internet Takedown Index
The Internet Takedown Index is a public record of law enforcement actions against criminal internet infrastructure: seizures, sinkholes, covert takeovers, and compelled shutdowns. Every entry traces to a cited source, and every gap is written down.
Index overview
Counted at the August 20, 2026 research cutoff, last regenerated August 21, 2026.
- 104
- Documented takedowns
- 37
- Jurisdictions
- 86
- Organizations
- 49
- Named people
- 88
- Infrastructure records
- 152
- Cited sources
104 documented takedowns, 37 jurisdictions, 86 organizations, 49 named people, 88 infrastructure records, and 152 cited sources.
Takedowns by category
View all- Malware and botnets : 19
- Darknet market : 12
- Fraud and stolen data : 11
- Criminal hosting and proxies : 10
- Cryptocurrency laundering : 8
- Ransomware : 7
- State sponsored : 6
- Child sexual abuse material : 6
- Piracy and IP : 6
- Multi threat campaign : 5
- DDoS for hire : 5
- Criminal communications : 4
- Terrorism and extremism : 2
- Trafficking and exploitation : 2
- Phishing : 1
Takedowns by jurisdiction
View all- 🇺🇸 United States : 32
- 🇳🇱 Netherlands : 19
- 🇩🇪 Germany : 18
- 🇪🇺 European Union : 18
- 🇬🇧 United Kingdom : 17
- 🇫🇷 France : 12
- 🇨🇦 Canada : 9
- 🇱🇹 Lithuania : 5
- 🇸🇪 Sweden : 5
- 🇺🇦 Ukraine : 5
- 37 jurisdictions recorded
A takedown is counted against every jurisdiction named in its scope, so an operation coordinated across five countries appears under all five.
Recent takedowns
View all- Operation Offsides (2026 FIFA World Cup streaming domains) July 2026 ICE-HSI and IPR Center
- Huione Group backend infrastructure seizure June 2026 FBI
- CFAKE.com and SOCFAKE.com seizure June 2026 HSI
- PowerOFF eight-domain action (April 2026, USAO Alaska wave) April 2026 USAO-AK
- Operation PowerOFF April 2026 wave April 2026 Not established
- GRU DNS-hijacking router network disruption (APT28) April 2026 FBI
- Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption March 2026 USAO-AK and FBI
- LeakBase seizure March 2026 FBI
Cited, graded, and open about the gaps
Nothing here is aggregated away or stripped of detail. This is a public record built from public documents, and it tells you how strong each document is.
- Every entry traces to a cited source. Publisher, title, and date are recorded for each one, and each source carries the dataset's own provenance grade.
- Official records outrank reporting. Charging documents, seizure notices, and agency statements set the facts. Reporting establishes timing and aftermath.
- Unknown never means zero. A blank count means the public record does not establish a number, not that the number is nothing.
- What was deliberately excluded is published too. 12 considered candidates are listed with the reason each was left out, and 38 records are flagged as the source-verified core so the rest cannot pass for it.