Skip to content
NewA calmer, faster ZeroHour

FBI seizes Virtualine bulletproof hosting domain

Original title: FBI Seizes Virtualine Bulletproof Hosting Domain Linked to Ransomware and Cybercrime

Cyber Security Newsby Abinaya ()2 min read
Part of a story covered by 8 sourcesFBI seizes Virtualine domain; replacement hosting still onlineMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Prosecutors say the host ignored abuse notices, offered to move infrastructure after law-enforcement requests, and took unhosted Bitcoin payments.

On October 27, 2026, the FBI seized virtualine.net, the main site of bulletproof host Virtualine, in a court-authorized action. The Justice Department said the business also used the names Secury, Massgod, Spamhouse, Lanedo, and Omegatech and sold hosting while seeking cybercrime-forum customers. Chainalysis linked its payment addresses to ransomware operators, infostealer infrastructure, and scam and phishing addresses, but no groups or totals were named. Seizing the domain does not show that every related server stopped.

Unconfirmed: Prosecutors did not name ransomware groups or transaction values, and Silent Push said Omegatech was not fully offline.

Key facts
  • In September 2024, Virtualine told an Exploit user it would host phishing, card fraud, spam, and port scanning.
  • By March 2026 it advertised moving customer infrastructure to a shell company after law-enforcement requests.
  • Warnings about child sexual abuse material began in January 2026 from police in Germany, Canada, and Australia and from NCMEC.
  • The FBI Washington Field Office worked with German, Dutch, and British authorities, OverRIPE, and Lumen.
  • Silent Push reported that Omegatech was not fully offline after the seizure.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

2 min read at cybersecuritynews.com

The FBI seized virtualine. net, the main website of a bulletproof hosting provider linked to ransomware operators, stolen-data markets, and other cybercrime services. Announced on October 27, 2026, the court-authorized action targeted a business accused of helping criminals keep their websites online, ignore abuse complaints, and hide payments.

Cyber Security News

By Abinaya · cybersecuritynews.com

Read the full article at Cyber Security News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.