BlackSuit / Operation Checkmate

The BlackSuit onion address was archived with an Operation Checkmate seizure notice dated 24 July 2025. The U.S. Department of Justice later confirmed that coordinated actions on that date took down four servers and nine domains.

Operation

Operation Checkmate

Agency

Homeland Security Investigations, U.S. Secret Service, IRS Criminal Investigation, Federal Bureau of Investigation

Category

ransomware

Action

coordinated infrastructure takedown

BEFORE

No independently replayable pre-seizure capture of this exact onion address was found in the public web archives reviewed.

AFTER

BEFORE is shown only when a separately sourced public capture exists strictly before the seizure date. AFTER is the content-addressed upstream seizure-banner object.

These are archival labels, not live links. A seized, expired, or reassigned domain is a poor place to send readers without warning.

• weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onion

seized.fyi states that its domain lists are not always complete. Count: 1.

The BlackSuit onion address was archived with an Operation Checkmate seizure notice dated 24 July 2025. The U.S. Department of Justice later confirmed that coordinated actions on that date took down four servers and nine domains.

Read the reviewed case timeline →

OpenSpy object

Open preserved original

Upstream record

seized.fyi

Observed

2025-07-24

Media

image/png

Resolution

1200×750

Bytes

897,072

SHA-256

a5688c2c379d5e57f4ae5c0293a8e535ef30e164632904ba3eb971f9e39c625d

Upstream filename

a5688c2c379d5e57f4ae5c0293a8e535.png

1. Justice Department Announces Coordinated Disruption Actions Against BlackSuit (Royal) Ransomware Operations U.S. Department of Justice · official law-enforcement announcement
2. BlackSuit / Operation Checkmate seizure banner Extortion Wiki · verified archive record