This presentation will introduce the world of bulletproof hosting and Intelligence Agencies Hosting (IAH) and how it has been used by the majority of cybercriminals for decades, by both small groups and state actors. Then, we will highlight various examples where OSINT has enabled the discovery of invaluable details to attribute actions to groups, companies, and governments that use these services to commit malicious activities. As a bonus, we will reveal a very certain link between an intelligence agency and a well-known bulletproof hosting service in the field.