NetNut
A premium proxy provider taken down in July 2026 after the FBI seized its domains over alleged botnet operations.
Retired
NetNut appears to be discontinued or shut down — FBI seized NetNut's domains on July 2, 2026 in a coordinated takedown with Google over an alleged 2M-device proxy botnet; parent Alarum Technologies disputes the allegations and paused operations. Do not buy. This page is kept as an archive record and is excluded from search engines.
About
NetNut was a premium proxy provider run by Nasdaq-listed Alarum Technologies (ALAR), selling rotating residential, static ISP, datacenter, and mobile proxies plus a SERP Scraper API. Its signature product was ISP-sourced static residential proxies aimed at long-lived sessions. On July 2, 2026, the FBI seized hundreds of NetNut-associated domains, including netnut.io, in a coordinated action with Google's Threat Intelligence Group, Lumen, and the IRS Criminal Investigation division. Researchers and Google alleged that at least part of NetNut's exit-node pool overlapped with Popa, a residential-proxy botnet estimated at 2 million-plus consumer devices enrolled with little or no owner consent. Google disabled the backend accounts used for command and control.
Alarum disputes the allegations and said in a July 2026 disclosure that neither it nor NetNut had been formally contacted by the FBI. The company announced a temporary pause in operations. As of October 2026, netnut.io still serves the FBI seizure notice. This entry is kept as a historical record; do not buy NetNut services. Pricing figures from earlier reviews (datacenter from ~$1/GB, residential ~$3/GB entry) are historical only.
What it can do
- Historically: rotating residential, static ISP, datacenter, and mobile proxies
- Historically: SERP Scraper API priced per result
- Historically: city and state geo targeting
Setup
Not available: the service is defunct and its domains are seized. See the lifecycle note.
Prerequisites
None. Do not purchase NetNut services; the infrastructure was dismantled in July 2026.
Use cases
Works with
Trust score — 3/10
Scored 3/10 (metrics tier, metrics-v1). Evidence: netnut.io currently serves an FBI seizure notice; the July 2026 takedown is documented by Infosecurity Magazine and aimultiple, with Google's Threat Intelligence Group alleging overlap with the 2M-device Popa botnet. Strengths (historical): differentiated ISP static proxies, broad product range. Docked for: (1) service is dead and domains seized, zero current usability; (2) the botnet allegations, disputed by parent Alarum, destroy trust in the sourcing model; (3) all performance and pool figures are now historical and unverifiable. License: was proprietary; service defunct.
How the trust score is built
Full methodology →- Adoption · stars/downloads, log-scaled vs peers
- 2.0/10
- Maintenance · recency, releases, issue load
- 1.0/10
- Openness · license + docs
- 2.0/10
- Manual review · sanity read + red-flag check
- 3.0/10
- · FBI seized hundreds of NetNut domains on July 2, 2026 in coordinated action with Google, Lumen, and IRS-CI
- · Google's Threat Intelligence Group alleged overlap with the Popa residential-proxy botnet (~2M consumer devices)
- · Parent Alarum Technologies (NASDAQ: ALAR) disputes the allegations; announced temporary pause in operations
- · netnut.io still serves the FBI seizure notice as of October 2026; do not buy
- · Historical pricing (datacenter ~$1/GB, residential ~$3/GB entry) is now obsolete
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.