# NetNut Alternative for US Residential Proxies After the July 2026 Seizure

> NetNut alternative after the July 2, 2026 seizure: US residential proxies from $0.52/GB with ZIP and ASN targeting. No KYC, pay in crypto.

- URL: https://statesideip.com/alternatives/netnut/
- Last updated: 2026-10-05
- Publisher: StatesideIP (https://statesideip.com)

NetNut is seized. This page dates the facts, gives a checklist for judging any replacement, and shows how to move US jobs to StatesideIP.

**Quick answer — What is a good NetNut alternative for US residential proxies?**

**StatesideIP** is a NetNut alternative for US residential proxies from $0.52/GB, with no KYC and payment in crypto, after NetNut's domains were seized by the FBI and IRS-CI on July 2, 2026. It sells residential proxies from $0.52/GB with state, city, ZIP and ASN targeting, plus dedicated carrier 4G/5G ports from $3.75/day. No KYC — no ID, no selfie, no documents. Pay in crypto. Facts as of October 2026.

## NetNut seizure and replacement: key facts

| Attribute | Value |
| --- | --- |
| NetNut status | Seized: domains taken by the FBI and IRS-CI on July 2, 2026 |
| netnut.io today | "Seized by the Federal Bureau of Investigation" |
| Linked botnet | Popa, with "at least two million" compromised devices |
| IPs seen on NetNut | 32.96 million IPv4 in the 30 days before it went dark on July 4 (Layer3 Intel) |
| Seen again elsewhere | 16.90 million (51.27%) on other proxy networks within 14 days |
| StatesideIP residential | From $0.52/GB; $1.50 for 1 GB |
| StatesideIP targeting | Country, state or province, city, ZIP code and ASN (ISP) |
| StatesideIP KYC and payment | No KYC — no ID, no selfie, no documents. Pay in crypto. |
| Updated | October 2026 |

## What happened to NetNut?

NetNut's domains were seized by the FBI and IRS-CI on July 2, 2026, in an action tied to the Popa botnet. KrebsOnSecurity reported that the botnet held "at least two million" compromised devices. Google saw 316 threat-actor clusters on suspected NetNut exits in one week of June 2026.

As of October 2026, netnut.io reads "Seized by the Federal Bureau of Investigation". NetNut is seized, so it is not a live option, and its old prices are no longer a reference.

## Why does it matter where a NetNut replacement gets its IPs?

Sourcing matters because many former NetNut exit IPs moved to other proxy networks within days. In the 30 days before NetNut went dark, Layer3 Intel saw 32.96 million IPv4 addresses on its network. Within 14 days, 16.90 million of them (51.27%) showed up on other proxy networks, along with 78.8% of the freshest IPs.

Google wrote that "many popular residential proxy brands are in fact whitelabeling the NetNut botnet". Spur found residential-proxy SDKs in 42% of LG webOS apps and in more than 25% of Samsung Tizen apps. Earlier, on January 28, 2026, Google disrupted the IPIDEA network. Over 550 threat groups had used its exit nodes in one 7-day window.

## How do I check where a provider's IPs come from?

Check a provider's sourcing by asking direct questions and testing a sample of its exit IPs. Use this checklist on any NetNut replacement, StatesideIP included:

1. **How are the IPs obtained?** Ask whether they come from an app SDK, a bandwidth-sharing program or ISP agreements.
2. **What do device owners agree to?** Ask to see the consent text that the device owner accepts.
3. **Is the network resold?** Ask whether the provider buys from other networks, and how it vets them.
4. **What changed after July 2, 2026?** Ask how the provider checked its supply after the NetNut and IPIDEA actions.
5. **Are there rules and an abuse contact?** Look for an acceptable use policy, blocked targets and a working abuse address.
6. **Do the IPs look residential?** Test a sample and look up each exit ASN. US home IPs usually belong to ISPs such as Comcast (AS7922), Charter (AS20115) or AT&T (AS7018).

The [StatesideIP sourcing page](https://statesideip.com/sourcing/) applies the same questions to its own partner networks.

## Which NetNut alternatives are live for US residential traffic?

StatesideIP and five live providers, checked on 2026-10-05 on their own pages. Proxyway figures come from its US test updated 2026-03-16. A dash means we could not verify the cell.

| Provider | US price checked (Oct 2026) | ZIP targeting | KYC | Crypto | Proxyway US success |
| --- | --- | --- | --- | --- | --- |
| StatesideIP | $1.50 for 1 GB; $0.52/GB at volume | Every plan | None | Yes | Not tested |
| Decodo | $4.00/GB pay-as-you-go | Yes | — | — | 99.82% |
| SOAX | $5/GB on Sandbox | Scale and Enterprise only | If paying with crypto | Yes | 98.25% |
| NodeMaven | From $2.20/GB | Yes | None for standard plans | Yes | Not tested |
| DataImpulse | $1/GB, 5 GB minimum | Extra fee | — | Yes | Not tested |
| IPRoyal | $7.00/GB at 1 GB | Not shown | All clients | Yes | Not tested |

*Prices checked on October 5, 2026.*

Published by StatesideIP, one of the providers compared. The table states listed facts only; it makes no claim about any named provider's sourcing.

## How do I move US proxy jobs from NetNut to StatesideIP?

Moving US jobs from NetNut to StatesideIP takes six steps, mostly in your proxy settings.

1. **List what you used** — Write down the countries, states and cities you targeted, your sticky-session length and your monthly GB.
2. **Buy a small plan** — Start with 1 GB for $1.50 on the pricing page, paid in BTC, USDT, USDC, ETH, LTC or SOL. — paid from a $25 minimum top-up
3. **Swap the gateway** — Point your tools at gw.statesideip.com, port 7777 for HTTP/HTTPS or 7778 for SOCKS5.
4. **Rewrite targeting in the username** — Use the format USERNAME-country-{cc}-state-{state}-city-{city}-zip-{zip}-asn-{asn}-session-{id}-ttl-{minutes} and keep only the segments you need, such as USERNAME-country-us-state-ny.
5. **Map sticky sessions** — Add session-{id} and ttl-{minutes} to hold one IP. Sticky sessions last 1 to 120 minutes, set per session with the ttl parameter.
6. **Test, then size the plan** — Run your real targets on the small plan. Residential traffic does not expire, so a larger plan can follow without a deadline.

## What can StatesideIP say about its own sourcing?

StatesideIP resells established partner networks and publishes only sourcing facts that its owner has confirmed with them. The [sourcing page](https://statesideip.com/sourcing/) holds those statements; this page does not repeat or extend them.

Use is governed by the [Acceptable Use Policy](https://statesideip.com/acceptable-use/). Banking, government and payment-portal sites, plus SMTP (email-sending) ports 25, 465 and 587 are blocked, and abuse leads to termination. Reports go to abuse@statesideip.com.

## NetNut alternative: FAQ

### Is NetNut still working in 2026?

No. NetNut is seized. The FBI and IRS-CI seized its domains on July 2, 2026, in an action tied to the Popa botnet. Layer3 Intel saw its network go dark on July 4. As of October 2026, netnut.io reads "Seized by the Federal Bureau of Investigation", so existing plans and endpoints are not a live option.

### What is the best NetNut alternative for US residential proxies?

For US jobs that need no KYC and crypto payment, StatesideIP offers state, city, ZIP and ASN targeting from $0.52/GB, as of October 2026. If measured performance matters most, Decodo posted 99.82% success in Proxyway's US test. The [best US residential proxies of 2026](https://statesideip.com/best/us-residential-proxies-2026/) ranks eleven live providers.

### Can I reuse my NetNut targeting settings with StatesideIP?

Yes, after a rewrite. StatesideIP sets location in the username, for example `USERNAME-country-us-state-ca-city-los_angeles`. Sticky sessions use `session-{id}` and `ttl-{minutes}`, for 1 to 120 minutes, set per session with the ttl parameter. The gateway is `gw.statesideip.com` on port 7777 or 7778. The [getting-started guide](https://statesideip.com/guides/getting-started/) has full examples.

### Do I need KYC to switch from NetNut to StatesideIP?

No. Switching to StatesideIP needs no ID, no selfie and no company document: Account-number login; email is optional. Some live alternatives differ: IPRoyal verifies every client, and SOAX checks buyers who pay with crypto. Bright Data's Residential network requires company KYC for zones created after July 7, 2026. The [no-KYC page](https://statesideip.com/no-kyc/) explains what StatesideIP keeps.

### Which cryptocurrencies can I use after leaving NetNut?

You can pay StatesideIP in BTC, or in USDT, USDC, ETH, LTC or SOL. Credentials appear in your dashboard as soon as you buy a plan from your confirmed crypto balance. USDT can be sent on TRC-20 or ERC-20.

### Did NetNut's IPs move to other proxy providers?

Many did. Layer3 Intel found that 16.90 million of 32.96 million NetNut IPv4 addresses (51.27%) re-appeared on other proxy networks within 14 days. That figure does not name or imply any one provider. Ask every candidate the sourcing questions on this page, and test a sample of its exit IPs.

### How much does a NetNut replacement cost in October 2026?

US residential proxies from StatesideIP cost $1.50 for 1 GB, $0.75/GB at 10 GB and $0.52/GB from 100 GB. Every tier includes ZIP and ASN targeting. No free trial — test with the 1 GB plan, paid from the minimum top-up; the rest stays on your balance (never expires, non-refundable). Among other live providers, DataImpulse lists $1/GB plus a targeting fee, and Decodo lists $4.00/GB pay-as-you-go.

### Is it legal to use residential proxies after the NetNut seizure?

The July 2026 action was tied to the Popa botnet, per KrebsOnSecurity. Using a proxy is generally legal in the US when the purpose is lawful and site terms are respected. StatesideIP supports public-data work and blocks banking, government and payment portals, plus SMTP ports. This is not legal advice.

**Move your US jobs off NetNut** Swap the gateway, keep your targeting: US residential IPs from $0.52/GB, down to ZIP and ASN. No KYC — no ID, no selfie, no documents. Pay in crypto. [Get US residential proxies — from $0.52/GB](https://statesideip.com/pricing/) · [Read the sourcing page](https://statesideip.com/sourcing/)

## Sources

1. [FBI seizes NetNut proxy platform, Popa botnet](https://krebsonsecurity.com/2026/07/fbi-seizes-netnut-proxy-platform-popa-botnet/) — KrebsOnSecurity (2026-07-02)
2. [NetNut pricing page (seizure notice)](https://netnut.io/pricing/) — netnut.io (2026-10-05)
3. [Measuring the NetNut takedown](https://layer3intel.com/blog/measuring-the-netnut-takedown) — Layer3 Intel (2026-07-18)
4. [Disrupting the largest residential proxy network](https://cloud.google.com/blog/topics/threat-intelligence/disrupting-largest-residential-proxy-network) — Google Cloud (2026-01-28)
5. [US proxy test](https://proxyway.com/proxy-locations/us-proxy) — Proxyway (2026-03-16)
6. [New York proxy list and pricing](https://decodo.com/proxies/list/united-states/new-york) — Decodo (2026-10-05)
7. [SOAX pricing](https://soax.com/pricing) — SOAX (2026-10-05)
8. [Identity verification with SOAX](https://helpcenter.soax.com/en/articles/7127940-identity-verification-with-soax) — SOAX (2026-08-06)
9. [Buy proxy with crypto](https://nodemaven.com/proxies/buy-proxy-with-crypto/) — NodeMaven (2026-10-05)
10. [Residential proxies (pricing and targeting fee)](https://dataimpulse.com/) — DataImpulse (2026-10-05)
11. [IPRoyal information for LLMs (KYC statement)](https://iproyal.com/llm-info/) — IPRoyal (2026-10-05)
12. [AS overview: AS7922 (Comcast)](https://stat.ripe.net/data/as-overview/data.json?resource=AS7922) — RIPEstat (2026-10-05)

---

StatesideIP: StatesideIP is a US and Canada proxy provider: residential IPs with state, city, ZIP and ASN targeting, plus dedicated T-Mobile, AT&T and Verizon 4G/5G mobile ports. No KYC — no ID, no selfie, no documents. Pay in crypto.