Infraud was an online marketplace for stolen credit card info. A federal indictment was just unsealed. 13 arrested and total of 36 charged in a coordinated take-down called "Operation Shadow Web" that involved over a dozen international government agencies across seven different countries. Article

I thought it was odd that the DOJ went through all this bragging without mentioning how they brought the ring-leader down. So I got curious, checked the WHIOS data, checked the nameserver for Infraud.cc, and guess what I found? Cloudflare, with creation date of 5/22/2017 (8 months and 18 days ago). Keep in mind that the web address for the site have been the same since at least 2011.

Here's the pdf for the sealed indictment. Filed 10/31/2017. You'll notice that the stings by HSI only begin 8/4/2017, two months after Infraud switched to Cloudflare. If you ask me, that's about how long it would take to assemble a grand jury and seal an indictment.

My gut tells me Cloudflare is actively working with the feds, otherwise they wouldn't let them host all these bad sites. I'd like to hear your thoughts on this.