Last updated: 2026-10-18. The domain status reflects same-day DNS / WHOIS lookup results. Event details are as stated in the original reports linked in this article.

Quick Verdict

  • Do not buy or renew NetNut.A lookup of netnut.io on 2026-10-18 shows the nameservers are ns1.fbi.seized.gov and ns2.fbi.seized.gov, which confirms the domain now points to the seizure.
  • According to Krebs on Security According to reporting dated 2026-07-02, the FBI and the IRS Criminal Investigation unit, with help from partners including Google, Lumen, and Shadowserver, seized hundreds of domains related to NetNut.
  • The same report noted that three security firms had previously linked NetNut to the Popa botnet. At least 2 million household devices, including smart TVs and TV boxes, were turned into rented residential proxy nodes, often without their owners' knowledge.
  • We have removed NetNut recommendation cards and affiliate links from all pages. Former affiliate links now redirect to this page.

What happened

NetNut is a residential proxy service owned by Israeli-listed company Alarum Technologies. On June 19, 2026, three security firms published similar findings concluding that NetNut's residential proxy network came from a botnet called Popa. The botnet installed software on household devices such as smart TVs and streaming boxes, turning them into always-on proxy nodes that were then rented out. Their traffic was mainly used for large-scale scraping, ad fraud, and account takeovers.

On July 2, 2026, the NetNut website homepage was replaced with a seizure notice from the FBI and the IRS Criminal Investigation unit. The notice thanked partners including Google, Lumen, and Shadowserver for helping take down hundreds of domains linked to the Popa botnet. Source: FBI Seizes NetNut Proxy Platform, Popa Botnet（Krebs on Security）。

What to do if you're already using it

  • 1. Disable the configuration:Remove its proxy address from your browser, antidetect browser, scripts, and server configurations, then replace it with a new provider.
  • 2. Check account:For any accounts you logged into through it, change the password, turn on two-factor authentication, and review recent login activity.
  • 3. Prepaid balance:The official site is no longer reachable, and there is no normal refund channel. You can contact the credit card issuer or PayPal you used for payment to ask about the dispute process. The outcome depends on their rules.

Providers you can switch to

When switching providers, price isn't the only factor. Also check how they explain where their IP addresses come from.Google's January 2026 report on residential proxy networkswrote that claims of a “compliant source” should be backed by transparent, auditable proof of user consent. The pages below are organized by official pricing and terms, with prices verified as of 2026-10-18: