Dutch police takes down bulletproof hosting hub linked to 80+ cybercrime cases

Dutch police says they seized 250 servers running a bulletproof hosting service used solely by criminal actors, a move linked to investigations dating back to 2022. The operation has been connected to more than 80 cybercrime investigations at home and abroad since 2022, with authorities noting the service continued to be used for criminal activities.

In a press release published by Politie, authorities stated that the hosting company is used solely for criminal activities and that the servers were taken offline to block ongoing abuse and support further investigation. Sources told BleepingComputer that Dutch police took servers from a The Hague datacenter used by CrazyRDP, now offline; CrazyRDP offered anonymous VPS/RDP services with no-KYC and no logs and was often cited by threat actors as bulletproof hosting.

Bulletproof hosting typically enables criminal infrastructure such as malware command-and-control, phishing sites, ransomware infrastructure, botnet control panels, and data-leak sites. The seizure aims to prevent further cybercrime while allowing investigators to probe the servers’ activity.