FBI Seizes Virtualine Domain in International Crime Operation

The U.S. Department of Justice announced the seizure of the Virtualine domain (virtualine[.]net) as part of an international law enforcement operation targeting a bulletproof hosting provider accused of enabling prolific cybercrime and money laundering.

The DoJ said Virtualine, which also used names such as Secury, Massgod, Spamhouse, Lanedo and Omegatech, advertised its services to criminals for activities including phishing, carding, email spam and port scanning, while claiming to exclude child content and terrorism. The seizure followed investigations into how Virtualine’s infrastructure was used to host illicit content and facilitate transfers that helped conceal the proceeds of crime, with evidence cited from court filings and blockchain analyses.

Court documents and independent analyses described the operation as involving multiple countries and private entities. The DoJ noted that Virtualine accepted payments via direct BTC unhosted addresses, allowing customers to avoid hosted-exchange compliance checks, and that funds were laundered through the platform to obscure origins. Chainalysis is cited as saying Virtualine’s on-chain activity connected to ransomware operators, infostealer infrastructure, illicit markets and various phishing and scam addresses.

The site now displays a seizure notice, and the operator of Virtualine released an open letter denying knowledge of CSAM and asserting customer data remained safe. The joint action involved the Hessen State Police, the National Police Corps of the Netherlands, the U.K. National Crime Agency, OverRIPE, and Lumen Technologies, illustrating the cross-border scope of the case. The DoJ said the operation addressed notices from law enforcement in Germany, Canada and Australia, and from NCMEC in the United States.