ZeroFox Intelligence Flash Report - UK Sanctions Prominent Bulletproof Hosting Provider

ZeroFox Intelligence Flash Report - UK Sanctions Prominent Bulletproof Hosting Provider

Product Serial: F-2025-11-26a

TLP:CLEAR

In this Flash report, ZeroFox researchers report on the recent sanctioning by the United Kingdom’s National Crime Agency (NCA), in coordination with partners in Australia, New Zealand, Canada, and the United States, against a Russian citizen for operating a bulletproof hosting (BPH) service.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• On November 19, 2025, the United Kingdom’s National Crime Agency (NCA), in coordination with partners in Australia, New Zealand, Canada, and the United States, announced sanctions against a Russian citizen for operating a bulletproof hosting (BPH) service.
• The BPH operates under the names “Media Land LLC” and “ML.Cloud LLC”. Both of these companies are based in Russia and provide virtual and physical servers for cybercriminals to maintain digital privacy and evade law enforcement (LE) takedowns.
• BPH is a marketing term used by underground Internet Service Providers (ISPs) to promote services that aid cybercriminals in the conduct of their operations.
• The sanctioning will likely have a limited impact on cybercriminals’ operational environment. Considering that this BPH is based in Russia, it is highly unlikely that any legal action to take down its operations will occur.