Overview
- The Justice Department and the FBI announced on Wednesday that they seized the virtualine.net domain as part of Operation Omegaline to disrupt a bulletproof hosting service tied to criminal activity.
- Court filings say Virtualine knowingly hosted a forum identified as Vendor 1 that traded sexually explicit images of minors and nonconsensual intimate images despite repeated abuse notices from police, NCMEC, and a victim's attorney.
- Authorities allege Virtualine accepted direct payments to unhosted Bitcoin addresses labeled 'BTC [NO-AML]' and then laundered those funds to hide their origin, with blockchain firm Chainalysis linking those addresses to ransomware, infostealers, and illicit marketplaces.
- The Virtualine operator published an open letter denying knowing facilitation of child sexual abuse material and claiming cooperation, but researchers and police report parts of the operator's network remain reachable and could be rebuilt by acquiring new ASNs.
- International law enforcement worked with private-sector groups such as OverRIPE, Lumen, Chainalysis, Silent Push and Spamhaus to trace infrastructure and payments, and investigators warn bulletproof hosts can regain routing in days so follow-up tracing and prosecutions are likely.