U.S. Seizes NightmareStresser Domains in Crackdown on DDoS-for-Hire Service

On September 17, 2026, the U.S. Department of Justice announced the court-authorized seizure of two internet domains — nightmare-stresser[.]com and nightmarestresser[.]org — associated with a DDoS-for-hire service operating under the name NightmareStresser. According to reports, the domains have been replaced with a seizure banner issued by the government. The service was reportedly used to launch distributed denial-of-service attacks against targeted victims. The disruption prevents the continued operation of the booter/stresser platform, which security researchers and law enforcement have long targeted for enabling malicious traffic generation. No new exploitation has been reported since the domains came under government control. The exact number of attacks attributed to NightmareStresser has not been independently verified, and the full list of victims has not been publicly disclosed. Authorities advise affected users to cease using the service and remain vigilant for any related compromise.