US and International Partners Seize Virtualine Hosting Domain
Summary
The FBI and international partners seized virtualine[.]net, Virtualine’s primary domain. DOJ says the host supported criminal operations and laundered direct Bitcoin payments; Chainalysis says its wallets connected to cybercrime infrastructure.
Key points
- On October 27, 2026, the FBI and international law-enforcement partners announced the court-authorized seizure of virtualine[.]net, Virtualine’s primary domain.
- The Justice Department says Virtualine hosted infrastructure tied to ransomware operators, infostealers, credential-theft forums, scams and other criminal activity.
- Prosecutors accuse Virtualine of knowingly hosting a forum that sold illicit content and promoted a hack-for-hire service.
- According to the Justice Department, Virtualine accepted direct Bitcoin payments through unhosted wallets and laundered the proceeds to conceal their origin.
- Chainalysis says Virtualine-associated addresses had connections to ransomware, infostealer infrastructure, cybercrime forums and scam activity; it recommends treating exposure to bulletproof-hosting payment addresses as a compliance risk signal.
- The investigation involved authorities in Germany, the Netherlands and the UK, with intelligence support from Chainalysis and the OverRIPE coalition.
Article Details
- Event Type
- Court-authorized law enforcement seizure of a bulletproof hosting provider’s primary domain
- Impact
- The FBI and international law enforcement partners seized virtualine.net, disrupting the domain of a hosting provider that the Justice Department says supported criminal activity. Prosecutors accuse Virtualine of knowingly hosting a criminal forum, while the Justice Department says the provider accepted direct Bitcoin payments and laundered proceeds. The article reports that Virtualine’s infrastructure was tied to ransomware, infostealers, fraud, and other cybercrime.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | virtualine[.]net | Primary domain of the Virtualine bulletproof hosting provider, seized by law enforcement; the Justice Department says it was used to facilitate criminal activity. |
Threat Actors
LanedoName the article identifies as an alias of Virtualine, the bulletproof hosting provider reportedly tied to cybercrime and accused by prosecutors of knowingly hosting a criminal forum.MassgodName the article identifies as an alias of Virtualine, the bulletproof hosting provider reportedly tied to cybercrime and accused by prosecutors of knowingly hosting a criminal forum.OmegatechName the article identifies as an alias of Virtualine, the bulletproof hosting provider reportedly tied to cybercrime and accused by prosecutors of knowingly hosting a criminal forum.SecuryName the article identifies as an alias of Virtualine, the bulletproof hosting provider reportedly tied to cybercrime and accused by prosecutors of knowingly hosting a criminal forum.SpamhouseName the article identifies as an alias of Virtualine, the bulletproof hosting provider reportedly tied to cybercrime and accused by prosecutors of knowingly hosting a criminal forum.VirtualineBulletproof hosting provider whose infrastructure was reportedly tied to cybercrime. The Justice Department says it facilitated criminal activity and laundered proceeds; prosecutors accuse it of knowingly hosting a criminal forum.
Vendors
Products
Countries
Germanythat enabled a wide range of global cybercrime. The investigation was conducted with assistance from Germany’s Polizei Hessen, the Netherlands’ Politie Midden-Nederland, and the U.K.’s National Crime Agency.Netherlandsglobal cybercrime. The investigation was conducted with assistance from Germany’s Polizei Hessen, the Netherlands’ Politie Midden-Nederland, and the U.K.’s National Crime Agency.United StatesOn October 27, 2026, the U.S. Attorney’s Office for the Eastern District of Virginia and the FBI Washington Field Office announced the court-authorized seizure of virtualine.net, the primary web domain of Virtualine, a