Last Updated on 30 September 2025 at 18:04
Bulletproof hosting cybercrime is hunted down, and this is a good policy for law enforcement authorities: Group pleads guilty to running bulletproof hosting service for criminal gangs, malware payloads.
For business and freelancers that are suffering from cybercriminals activities, bulletproof hosting is a problematic issue. A respectable business will never be in such a bad company. However, by tracking and hunting down cybercrime actors, analysing and understanding attack techniques, mechanisms and motivations, a business organisation can better understand the landscape, protect, and finally adjust their security policies accordingly.
With bulletproof hosting: “Copyright infringement notices are ignored, privacy is marketed as a feature of such services, and bulletproof offerings are the go-to for criminal groups seeking the infrastructure to host malware, establish command-and-control (C2) servers, and host illegal content, including malicious software and child pornography.”
What is bulletproof hosting ?
Bulletproof hosting (BPH) supplier provides hosting for malicious activities and stolen content by assuring anonymity to cybercrime authors and companies. This bulletproof hosting typically consists of services such as hiding ‘whois’ information, accepting forgery and false identity declaration.
Legitimate hosting providers are checking the real identity of their customers. Still, bulletproof hosting companies provide fake identities and host malware or other stolen materials such as articles, data, images, or pictures.
List of bulletproof hosting
Since end-2018 I discovered quite a huge list.
My current list is covering 1’570 such crime farms.
My list is covering even big, well-known names.
I use my list for web protection against content scrapers and cybercriminals. I manually check every single entry on this list.
A simplistic rule to identify the bulletproof hosting is based on their customer’s business model. Therefore, I apply the following rule: 2 (two) offending attacks and then the whole name/IP ranges are banished. I block them all, one hosting name and IP range at a time. In time, I learned how to improve my analysis of traffic data and immediately block the offenders.
Top bonus discovery: a very high number of North-American Canadian so-called “companies” are specialized in these bulletproof hosting “services”, but an encouraging, positive signal is that legal prosecutors in Switzerland are hunting them down too.
From my observation, there is quite easy to discover those cybercriminals by starting with webscrapers and copyright infringers. It is lengthy to obtain the ‘whois’ of a domain name hosted by those criminals. Indeed: cybercrime suppliers are loving cybercrime-focused customers.
“However, being willing to ignore the transgressions of clients does not mean that law enforcement will take the same stance.”
Read the whole article: https://www.zdnet.com/article/group-pleads-guilty-to-running-bulletproof-hosting-service-for-criminal-gangs-malware-payloads/
Going further:
“Law enforcement agencies from the US, Germany, France, Switzerland, and the Netherlands have seized this week the web domains and server infrastructure of three VPN services that provided a haven for cybercriminals to attack their victims.”
https://www.zdnet.com/article/law-enforcement-take-down-three-bulletproof-vpn-providers/
More findings of the same subject:
Engaged at board & C-level in start-up, mid-sized, large multinational environments (Fortune 500) to solve strategic, financial, and operational issues.
Specialities:
• recovery of failing Projects & Programs
• strategy definition + implementation of transformational change
– turnaround
– performance improvement
– operational restructuring
– digital transformation.
Website redesigns aren’t always the answer. Use session replays, MarTech insights, behavioural analytics to enhance UX without disrupting marketing budget.
More traffic won’t save a broken funnel. CRO is the missing link between visitors and revenue. AI, automation, predictive UX are reshaping digital experiences.
Success in digital marketplaces isn’t about features but positioning. The wrong category can bury a great product. Here is why strategic placement matters.
SaaS trust is fragile. Customers question the claims, the testimonials, the promises. Trust must move from branding to behaviour. Here is how.
Sales, support, and marketing must evolve beyond silos. Discover a couple of bold insights and innovative fix solutions for a seamless, customer-driven model.
Choosing the right martech tool requires input from marketing, IT, finance, and leadership. Avoid costly mistakes by involving the right voices.
RICE offers a data-driven approach to prioritization, but does it always work ? Explore its surprising potential for viable strategies across industries.
Discover neo-institutional theory in organizational change: how it dismantles inertia & start innovation. Insights for turnarounds and transformation projects.
Learn how to bridge the gap between strategy and execution with unconventional approaches, actionable insights, and a balance of discipline and agility.
Understand the differences between projects, programs, and portfolios. A bold take on leadership, management roles, and scaling complexity.
