
FBI seizes virtualine.net, domain of bulletproof host Virtualine
TRM Labs ties the host to ransomware and StealC payments and says the seizure may leave infrastructure online.
12 stories, newest first · one card per story

TRM Labs ties the host to ransomware and StealC payments and says the seizure may leave infrastructure online.

The government says Virtualine still hosts a replacement site that has already drawn a child-abuse complaint.

TRM Labs says the provider took nearly one-fifth of tracked illicit bulletproof-hosting inflows in 2026, and the seizure may not kill the infrastructure.

Dutch police seized dozens of servers in Limburg and recovered data on more than 3,000 customers; follow-up is underway.

Prosecutors say the host ignored abuse notices, offered to move infrastructure after law-enforcement requests, and took unhosted Bitcoin payments.
A court authorized seizure of virtualine.net; prosecutors allege it kept serving a forum after child-abuse complaints and have not charged operators.

German, Dutch and UK agencies assisted; the operator said it could rebrand and resume within about a day.

Prosecutors say the host kept a forum online after child-exploitation notices and took unhosted bitcoin.

Black Hills monitoring ties four ClickFix malware delivery chains to bulletproof host AS202412 (OMEGATECH LTD), making ASN-level blocking the durable defense.
Researchers detect cybercrime infrastructure-as-a-service ads across more than one million Telegram messages.
Scans from a bulletproof-hosting IP target the abandoned PIAF-HMS hospitality application, which contains numerous unpatched SQL injection flaws.

Recorded Future outlines ten automation strategies ransomware gangs use, from credential marketplaces to bulletproof hosting, urging intelligence-led defense.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views