The Paramount Pictures production was not scheduled to come out before October, but that changed when copies of the film began spreading online.

The trouble started on April 12 when X user @ImStillDissin posted two clips from the film, misleadingly claiming that someone at Nickelodeon had “accidentally emailed me the entire Avatar Aang movie.” Both clips were taken down via DMCA notices shortly after.

The initial leaker later told the Hollywood Reporter that he actually received the film through a contact from his “hacker days.” He didn’t realize what it was until he looked it up, and decided to post the snippets online.

The clips carried a #PeggleCrew watermark, a nod to the hacking group that is allegedly behind the breach, although this remains unconfirmed.

Not long after the clips were removed, a second X user posted the full film, racking up over a million views before that too was removed. Paramount, meanwhile, remained quiet and did not issue a public statement on the leak.

Behind the scenes, however, the movie studio and its anti-piracy partners have been quite busy. Initially, they mostly dealt with copies of the film being reposted on X by different users, but their challenge was spreading elsewhere too.

DMCA Notice Whack-a-Mole

After the leak was public, the film started to spread through other platforms too. Records in the Lumen Database show that Paramount and its enforcement teams at MarkScan Digital, Marketly LLC, and Vobile Inc. all sprung into action, flagging various leaked copies.

This includes DMCA takedown requests directly targeting leaks on third-party services such as Google Drive and the video service Vimeo, both of which were swiftly taken down.

However, some takedown requests include more indirect links too. For example, a DMCA notice sent on behalf of Paramount by MarkScan on April 13, targets a 4chan discussion thread, which typically only remains online briefly. This notice also listed a file that was posted on Rootz.

While Paramount clearly tried hard to contain the leak, it appeared that the problem only became harder to enforce.

The Piracy Ecosystem Takes Over

Unlike most movie leaks, the Avatar: Aang leak did not originate from a scene or P2P group. However, it found its way into the traditional piracy ecosystem within hours, where it continues to thrive today.

Multiple copies were uploaded to torrent sites and are widely shared, making it the second most pirated movie of the past week. This includes a copy that was uploaded to The Pirate Bay by “TheRedPill,” who referenced the ongoing whack-a-mole at other platforms in the upload description.

“Found this copy on twitter of all places via a wetranfer link. Supposedly this is a webrip that was sent to someone who then leaked it online. it has been passed around all day with links going up and down,” the uploader wrote.

This wasn’t the only copy of the leak that surfaced on torrent sites, as many others appeared around the same time. Meanwhile, pirate streaming sites began indexing the leak as well, further expanding its audience by millions of people.

As shown above, torrent site 1337x currently hosts a wide variety of leaked copies. These all originate from the same source but are reported in different qualities.

Little Recourse Beyond Google

Dozens of notices posted in the Lumen database show that Paramount and its enforcement partners are also targeting these pirate sites. However, since most of these sites don’t respond to takedown notices, these sites present a persistent problem.

For these pirate sites, Paramount typically asks Google to delist the URLs from search results, which reduces discoverability but does not take the infringing content offline.

The notice below, for example, was sent to Google yesterday and targets various torrent and streaming sites. However, that’s just the tip of the iceberg.

Also, it’s worth stressing that the notices in the Lumen Database reported here are only the fraction of Paramount’s takedown efforts that’s public. Most of their efforts, including any notices sent directly to X or other platforms that do not report to Lumen, remain unknown.

In addition to taking down content, Paramount will also be interested in finding the source of the leak. According to Variety, unnamed sources said that the matter is under investigation, but the leak reportedly did not originate from within the studio.

For now, Avatar: Aang, The Last Airbender remains on course for its October 9 premiere on Paramount+. By then, most of its target audience has already had the opportunity to watch an early, perhaps unfinished, version of the film for free.

From: TF, for the latest news on copyright battles, piracy and more.

Indian courts have issued pirate site blocking orders for over a decade. Initially, these orders were relatively basic, requiring local Internet providers to block specific domain names.

These regular injunctions were only partially effective. After the High Court granted a blocking injunction, pirate sites would often switch to new domains, requiring rightsholders to return to court to get these blocked as well.

Expanding Site Blocking Injunctions

To deal with this problem, the dynamic injunction was invented. These orders were issued to block pirate sites more effectively. ISPs were not only required to block original domains but also any clones and mirror sites that surfaced after the case was finalized.

When dynamic injunctions were no longer sufficient to slay the piracy hydra, rightsholders suggested upgrading the Indian blocking regime with Dynamic++ injunctions. These orders also protect copyrighted content that has yet to be registered.

In addition, Dynamic++ orders and their ‘superlative‘ variant also include domain name registrars as defendants. This includes blocking orders targeted at U.S. domain registrars, much to the delight of U.S. rightsholders.

Delhi High Court Slams the Brakes

The expanding scope of these orders has not gone unquestioned. In a recent ruling in a trademark case, the Delhi High Court has put a hard limit on the addition of new domain names, creating a strong divergence with earlier dynamic site blocking orders that were previously issued by the same High Court.

The case itself started as a routine trademark dispute. Mahindra and Mahindra, one of India’s largest conglomerates, sued a string of packers and movers businesses operating under domain names that incorporated the “MAHINDRA” mark.

The court ordered GoDaddy and other registrars to block five infringing domains, directed India’s telecoms regulator to instruct ISPs to do the same, and required Google to delist the relevant results. All parties complied with this order.

When the case reached its conclusion earlier this year, Mahindra requested to make the order future-proof. The company asked the court to allow a court official to add newly discovered mirror and redirect domains to the blocking order on an ongoing basis, without the need to return to a judge each time.

To back up this request, Mahindra pointed to two Delhi High Court rulings that implemented the same procedure: a 2019 decision against 1337x, The Pirate Bay, and others, and a 2023 ruling targeting cyberlocker sites including Mixdrop.

The same procedure had been used routinely in piracy cases ever since, so the company did not expect much pushback. However, after reviewing the matter, Justice Tushar Rao Gedela said no.

Case Closed

The reason for the denial comes down to a straightforward point about how courts work. Once a judge signs a final ruling and closes a case, the court’s authority over that matter ends. It can still fix typos and calculation errors, but it cannot reopen proceedings to add new defendants or extend the reach of its orders.

That principle applies directly here. Once the case was closed, the blocking order against the original five domains became part of the final judgment.

Additionally, Justice Gedela said that it is “beyond comprehension” that a court officer could add new parties and extend dynamic injunctions, even when the judge no longer has the power to do so.

According to Tejaswini Kaushal, analyst at the Indian intellectual property publication SpicyIP, rightsholders can still request injunctions under the new ruling. However, they will have to file a new proceeding to block additional domains after a case is closed.

“This means that practitioners will now have to rely on execution proceedings or initiate fresh litigation to address new instances of infringement,” Kaushal writes.

The ruling effectively creates a divergence between judges of the same court. A rights holder appearing before a different Delhi HC judge could receive the opposite answer today. The question will remain unsettled until a higher bench resolves it.

Legislature, Step In

Justice Gedela did not leave the matter there. The judgment calls on India’s Parliament to update is civil procedure rules and regulations governing online intermediaries, to create a proper legal basis for post-judgment blocking orders.

“There is an urgent and alarming need for the Central Government and the Legislature to act in haste to bring about radical changes,” the judgment states, noting that rightsholders should not be powerless against new infringers who simply weren’t part of the original proceedings.

The ruling effectively means that infringing domains names that appear after a case closes will now require fresh legal action, at least until a higher court settles the question.

This significantly changes the game for film studios, Netflix, and sports rightsholders who repeatedly relied on post-judgment expansions. They can still get these additional blockades by going back to court, but that means more time, and more money, to achieve the same result.

For now, the ball is in Parliament’s court.

—-

A copy of the judgment in Mahindra and Mahindra Limited & Anr. v. Diksha Sharma Proprietor of Mahindra Packers Movers & Ors. (CS(COMM) 209/2023) is available here.

From: TF, for the latest news on copyright battles, piracy and more.

Downloading content without permission is copyright infringement. These torrent download statistics are only meant to provide further insight into piracy trends. All data are gathered from public resources.

This week we have one newcomer on the list.

“Project Hail Mary” is the most shared title. It beats “The Legend of Aang: The Last Airbender“, which ends up in second place after an early (likely unfinished) version of the movie leaked online months before its official release.

The most torrented movies for the week ending on April 20 are:

Note: We also publish an updating archive of all the list of weekly most torrented movies lists.

From: TF, for the latest news on copyright battles, piracy and more.

Like other platforms that host user-generated content, this massive code library occasionally runs into copyright infringement issues too.

As an intermediary, GitHub allows rightsholders to submit DMCA takedown notices to get infringing content removed. In addition, it also accepts DMCA anti-circumvention notices, requesting the removal of projects that bypass copy controls and restrictions.

The best-documented anti-circumvention claim on GitHub was sent by the RIAA back in 2020. At the time, the music industry group requested the removal of the open-source youtube-dl project, which is used by YouTube ripper software.

After initially removing the repository, GitHub later decided to reinstate the project, arguing that it doesn’t violate the DMCA’s anti-circumvention provisions. This decision still holds today, as the project remains on GitHub, despite having its website taken down by similar complaints.

Circumvention Claims Increased 41%

When the RIAA sent its anti-circumvention notices, these were still rare. In that year, GitHub only received 63 of these per year. That has increased more than tenfold since.

GitHub’s full-year transparency report that was just released reveals that it received 645 circumvention claims in 2025. That’s up 41% from a year earlier, and the bar chart shared by GitHub shows that these removal requests are clearly in an upward trend.

The initial boost in reports came in 2022, after GitHub updated its DMCA takedown submission form with questions explicitly related to circumvention. Providing that option triggered many more submitters to tick that box, raising the number of ‘circumvention’ claims.

Processing circumvention notices is quite costly for the company, as they are carefully reviewed by legal experts and engineers, to ensure that developers’ projects are not taken down without valid reasons.

“In cases where we are unable to determine whether a claim is valid, we will err on the side of the developer, and leave the content up,” GitHub writes in its policy, also pointing out that it has a million-dollar Developer Defense Fund for those who need it.

Surge in DMCA removals

The transparency report also covers ordinary takedown notices, which are much more common. In 2025, GitHub processed 2,661 takedown notices in 2025, which affected 47,228 repositories.

The number of targeted repositories surged 51.6% compared to 2024, while the number of notices also went up by roughly a third.

As shown above, August and November accounted for nearly half the year’s total, with 12,030 and 11,357 repositories taken down respectively. That pattern strongly suggests a small number of bulk complaints against projects with many forks, rather than a broad industry-wide surge.

GitHub Applauds Landmark DMCA Liability Ruling

The latest transparency report was announced in a blog post this week, where GitHub also referenced the Supreme Court ruling in Cox v. Sony. Which also affects its platform.

Previously, copyright holders had successfully pushed expansive theories of secondary liability, arguing that platforms could be held contributorily liable for user infringement even without direct involvement. That made intermediaries less likely to defend or protect users. The Supreme Court decision changed this.

“The Court’s opinion reinforced that service providers are not automatically liable for copyright infringement by users without evidence of intent to encourage or materially contribute to infringement,” GitHub’s Margaret Tucker noted.

This echoes comments it made earlier, where GitHub characterized the ruling as a key victory.

“This is a landmark victory for the open internet and for every developer who depends on platforms like GitHub to build, share, and collaborate on code. GitHub will always stand up for developers and for keeping the internet open,” GitHub wrote.

This doesn’t mean that GitHub will fundamentally change its DMCA policy, of course; this just gives them more room to side with developers, when appropriate.

From: TF, for the latest news on copyright battles, piracy and more.

Through multiple domains, it offered access to manga and manhwa comics free of charge, attracting many millions of visitors.

In 2024, a detailed report from Deepsee flagged Zonatmo.com as a particularly popular domain. Together with the other TMO properties, it was estimated to generate a billion views in November that year.

The same research linked the TMO operation to the Spanish company Nakamas Web SL, which was reportedly responsible for the sites.

This level of openness is unusual for a pirate site. DeepSee.io CEO Rocky Moss projected that the site would be stopped before the end of 2025. That projection was off by a few months, as TMO went offline in early 2026.

TMO’s website started having problems around March 18. This was widely noticed on social media, including a post by Animetrends that has been viewed close to 2.5 million times.

Without an official explanation from the site’s operators, many fans kept hope that it would make a comeback. A notice on the site suggesting it was “under maintenance” added to that impression.

However, after a few days that hope faded, as the main ZonaTMO domain was put on clienthold. This suspension status is typically set by a domain registrar in response to a legal complaint, and effectively renders the domain inaccessible.

The WHOIS data for zonatmo.com also clearly lists Nakamas Web as the company behind the site.

While TMO’s future was looking more and more troubled, the operators remained silent. Information received by TorrentFreak suggested that Korean webtoon platforms were involved, helped by serious anti-piracy forces. That information was officially confirmed today.

Spanish Takedown Following Cross-Border Investigation

The Copyright Overseas Promotion Association (COA), which represents many Korean publishers, including Kakao and Webtoon, announced that it conducted a multi-month investigation into the piracy operation.

COA worked with the commercial anti-piracy outfit IP-House and Spanish law firm Santiago Mediano Abogados, who eventually shared their gathered evidence with the local authorities for follow-up action.

This operation eventually led to an enforcement effort in Almeria, Spain, which resulted in the takedown of a network of interconnected websites, including Visortmo and TuMangaOnline.

While it is now confirmed that Korean rightsholders are behind the Spanish shutdown, not many details are shared. There is no mention of any arrests, for example, and no suspects have been identified either.

The involvement of the company Nakamas Web remains unconfirmed as well, although it’s worth noting that this company is based in Almeria, which was the center of the police operation. A request for comment to the company, whose website is still online, remains unanswered.

Pending Law Enforcement Investigation

Speaking with TorrentFreak, COA confirms that its members had their eyes set on TMO for a long time. While the group confirms the takedown, it can’t share further information at this point as the law enforcement investigation is ongoing.

“Zonatmo (TuMangaOnline, TMO) has long been recognized as a major illegal platform known for distributing unauthorized translations of Korean content in Spanish. Korean rightsholders had been monitoring the platform since its earlier stages, and in response, have pursued concrete legal enforcement actions overseas through COA.”

“At present, several matters remain at the stage of investigation in cooperation with local law enforcement authorities. As such, we are not in a position to disclose specific additional targets at this time,” a COA spokesperson adds.

For details, COA referred us to IP-House, which we asked about the suspects that were identified, whether any arrests were made, or whether a deal was reached with the operator of TMO. However, IP House declined to answer, citing an active investigation.

IP-House CEO Jan van Voorn commented on the action in broad terms in a press statement.

“This outcome reflects the strength of cross-border collaboration in addressing complex digital piracy to protect creators, consumers, and the integrity of the global content ecosystem,” Van Voorn said.

“We are proud to have supported COA in advancing this investigation and commend the Spanish National Police for their leadership and effectiveness in executing this enforcement action,” he added.

Part of a Wider Wave

The TMO takedown coincided with one of the most active periods of manga and anime piracy enforcement in history. In March 2026, HiAnime also went offline. The reason for HiAnime’s closure has not been officially confirmed, though it followed sustained pressure from the anti-piracy alliance ACE and a recent callout by the USTR.

Earlier, in January 2026, the manga aggregator Bato.to was shut down following action by Japanese anti-piracy body CODA and pressure from the Korean company Kakao Entertainment, with its operator identified and subject to criminal investigation in China.

According to COA, the TMO takedown is not the last enforcement action that’s planned on their end.

“This action forms part of a broader enforcement initiative led by COA, representing the K-content alliance” COA told TorrentFreak, adding that it “is actively investigating operators of such platforms and preparing coordinated legal actions across multiple jurisdictions.”

From: TF, for the latest news on copyright battles, piracy and more.

This is also the case in Chile, where there’s no shortage of options. This includes brands such as MagisTV, FlujoTV, and, XuperTV, which are popular throughout many countries in the region.

These services are a thorn in the side of rightsholders, including the American Hollywood giant Warner Bros. Entertainment, which filed a formal complaint. This effort paid off in February, when Chile’s Department of Telecommunications issued a dynamic blocking order, requiring ISPs to block domains linked to these pirate brands.

Warner Bros. Raises the Stakes

While the blocking action sorted some effect, the IPTV problem remained. This prompted Warner Bros. to raise the stakes by filing a criminal complaint against a company named Streaming Chile SpA that allegedly sells copyright-infringing IPTV subscriptions.

Chilean newspaper La Tercera reports that Warner Bros. accuses the company and its representatives, the 56-year-old Marta Leyton and her son Joaquín Ávila (25) of copyright infringement and computer fraud.

The complaint mentions that IPTV services are widely adopted. While some of these streaming services operate legally, many operate without permission of rightsholders.

“Alongside the growth of a legal IPTV service industry, an illegal industry of unauthorized IPTV service providers has grown alarmingly. These providers offer their clients pay television services via the internet, providing them with access to various content (channels),” the complaint alleges.

Warner Bros. is represented by attorney Daniel Steinmetz, who noted that illegal IPTV services often rebroadcast legal streams without permission from rightsholder, bypassing copyright protections.

Several Linked IPTV Services

TorrentFreak has not seen a copy of the complaint, and the available reporting does not identify any associated URLs. However, the website streaming-chile.net notes in the its footer that it is owned by Streaming Chile SpA, which fits the picture.

The website in question mentions that the operation serves more than 35,000 customers worldwide. The same company, which also offers reseller services, is linked to other streaming platforms such as mejoriptv.net, maxtv.cl, and plandetv.cl.

As seen above, these IPTV services are also mentioned in the “our customers say” section on the main website. The Trustpilot page has less favorable reviews.

Part of a Broader Crackdown

Warner Bros. referral is part of a broader regional push against IPTV piracy. In February, for example, an Argentine court expanded the crackdown on pirate IPTV services by blocking more than 70 domains while ordering Google to disable sideloaded Android apps.

In Chile, the criminal referral against Streaming Chile SpA stands out because it targets a company and its representative by name, under criminal law rather than a civil procedure.

The Warner Bros. complaint is also the first known Chilean case to invoke the Ley de Delitos Económicos (Economic Crimes Law). Enacted in 2023, the law allows courts to order confiscation of all profits derived from criminal conduct. In addition, it imposes fines that scale with the defendant’s income, well beyond the penalties available under standard copyright law alone.

For now, the criminal complaint is at an early investigative stage. No arrests have been reported, and, as far as we can see, the IPTV services that we could link to the company remain online.

From: TF, for the latest news on copyright battles, piracy and more.

However, last December, the site announced that it had also backed up Spotify, which came as a shock to the music industry.

Anna’s Archive initially released only Spotify metadata, and no actual music, but that put the music industry on high alert. Together with the likes of Universal, Warner, and Sony, Spotify filed a lawsuit days later, hoping to shut the site down.

Through a preliminary injunction targeting domain registrars and registries, the shadow library lost several domain names. However, not all were taken down, and the site registered various new domain names as backups.

The legal pressure also appeared to pay off in other ways. Not long after the lawsuit was filed, the shadow library removed the Spotify listing for their torrents page. The same applies to the first batch of music files that was accidentally released in February.

The site’s operator, Anna’s Archivist, hoped that these removals would motivate the music industry to back down, but that wasn’t the case. Instead, they returned to court requesting a $322 million default judgment after the defendant failed to show up in court.

$322 Million, Granted in Full

Yesterday, Judge Jed Rakoff of the Southern District of New York entered a default judgment against the site’s unknown operators, awarding Spotify and the major labels the requested $322 million damages award in full.

The music labels get the statutory maximum of $150,000 in damages for around 50 works. Spotify adds a DMCA circumvention claim of $2,500 for 120,000 music files, bringing the total to more than $322 million.

The plaintiff previously described their damages request as “extremely conservative.” The DMCA claim is based only on the 120,000 files, not the full 2.8 million that were released. Had they applied the $2,500 rate to all released files, the damages figure would exceed $7 billion.

Anna’s Archive did not show up in court, and the operators of the site remain unidentified. The judgment attempts to address this directly, by ordering Anna’s Archive to file a compliance report within ten business days, under penalty of perjury, that includes valid contact information for the site and its managing agents.

Whether the site will comply with this order is highly uncertain.

For now, the monetary judgment is mostly a victory on paper, as recouping money from an unknown entity is impossible. For this reason, the music companies also requested a permanent injunction.

Permanent Injunction Targets Domains

In addition to the damages award, Rakoff entered a permanent worldwide injunction covering ten Anna’s Archive domains: annas-archive.org, .li, .se, .in, .pm, .gl, .ch, .pk, .gd, and .vg.

Domain registries and registrars of record, along with hosting and internet service providers, are ordered to permanently disable access to those domains, disable authoritative nameservers, cease hosting services, and preserve evidence that could identify the site’s operators.

The judgment names specific third parties bound by those obligations, including Public Interest Registry, Cloudflare, Switch Foundation, The Swedish Internet Foundation, Njalla SRL, IQWeb FZ-LLC, Immaterialism Ltd., Hosting Concepts B.V., Tucows Domains Inc., and OwnRegistrar, Inc.

Anna’s Archive is also ordered to destroy all copies of works scraped from Spotify and to file a compliance report within ten business days, under penalty of perjury, including valid contact information for the site and its managing agents. That last requirement could prove significant, given that the identity of the site’s operators remains unknown.

A Way Out, at a Price

In theory, Anna’s Archive has the option to prevent the domain suspension. The permanent injunction allows the site to seek relief from this measure, after showing that it has paid the full $322 million damages award and complied with all injunctive obligations.

That’s an unlikely option, to say the least. At the same time, however, it is not guaranteed that the site’s domain names will be suspended.

As reported previously, several domain names, including the Greenland-based .gl version, are linked to registries and registrars outside the jurisdiction of the U.S. court. As such, they previously did not comply to the preliminary injunction, and it is unknown whether the latest order changes that.

—

A copy of the default judgment entered by Judge Rakoff is available here (pdf).

From: TF, for the latest news on copyright battles, piracy and more.

These blocking actions initially relied on measures that required Internet providers to restrict access to notorious pirate sites. More recently, however, blocking requirements have spread to other online intermediaries.

For example, in several countries, blocking injunctions expanded to third-party DNS resolvers such as Cloudflare, OpenDNS and Google. Not much later, VPN services became a target, as these could also be used to circumvent blocking orders.

While major rightsholders argue these measures are effective and proportionate, critics highlighted overblocking incidents where anti-piracy measures restricted access to legitimate sites and services, restricting the free flow of information.

A new report published by the Centre for European Policy Studies (CEPS) today adds substantial weight to that critique. CEPS is not part of the EU, but it operates as a leading independent think tank that advises on EU policy.

Benefits and Costs of Website-Blocking Legislation

The study, titled The Benefits and Costs of Website-Blocking Legislation: An Economic, Legal and Policy Assessment, examines website-blocking measures across all 27 EU Member States and assesses whether those measures are effective, proportionate, and compatible with EU law.

The report’s central finding is blunt. It concludes that site blocking is associated with substantial risk of unintended consequences and harmful side effects. These adverse effects, including overblocking, are not always fully recognized before site-blocking measures are enacted.

The report suggests that blocking schemes are prone to overblocking because these rightsholders are not liable for mistakes, nor do they bear the costs, which are typically paid by the ISPs or other intermediaries.

“These problems are exacerbated by the fact that rightsholders bear none of the costs of website blocking and are thus incentivised to pursue stringent blocking orders without concern for the collateral damage they cause – there is no back-pressure,” the report reads.

Italy and Spain: A Pattern of Collateral Damage

The report examines six EU jurisdictions in detail, and in each case, the findings are critical of site blocking.

Italy’s Piracy Shield, operated by regulator AGCOM, requires ISPs to block notified domains and IP addresses within 30 minutes, with no prior court order. This system has repeatedly resulted in overblocking, where the anti-piracy system blocked access to legitimate sites and services.

Instead of addressing the collateral damage concerns, AGCOM fined Cloudflare €14.2 million in January, after the company refused to globally filter its 1.1.1.1 DNS resolver. Cloudflare has since appealed the fine, while challenging the legitimacy of the Piracy Shield system.

Spain has also seen reports of similar collateral damage through its blocking regime. For example, the report notes that when LaLiga was granted a court order in its favor, it targeted a series of Cloudflare-owned IP addresses starting in February 2025. These blocked pirate streams, but also 3,300 lawful services that used the same infrastructure.

“The collateral damage was significant for ordinary users, businesses, and services that had no connection whatsoever to piracy,” the report notes, adding that the court formally dismissed Cloudflare’s appeal in March 2025.

Meanwhile, in Belgium, site-blocking orders have targeted DNS resolvers, which led to OpenDNS temporarily exiting the country in April 2025. The company eventually returned as the ruling was suspended pending appeal, but by then it had already done its damage.

“The episode illustrates how overreaching court orders can have unintended consequences for the broader digital ecosystem, and how disproportionate liability exposure can sometimes incentivise service provider withdrawal rather than compliance,” the report writes.

Report Questions Blocking Effectiveness

Beyond the collateral damage, the report also questions whether blocking achieves its stated objective of stopping piracy. After all, users are typically good at bypassing blocking measures.

The report cites various academic studies, including a 2023 paper published by researchers from Chapman University and Carnegie Mellon University, which found that site blocking led to a modest increase in visits to legal sites. According to the report, it’s unclear if these effects last.

“Recent research confirms that blocking can sharply reduce access to targeted IPTV and streaming piracy services, but no study in the past five years provides a rigorous estimate of how long these effects persist,” the report reads.

The report does find that illegal consumption of films and music has declined substantially over time. However, it attributes this to increasing availability and affordability of legal content, not to enforcement.

Rightsholders are well aware of the limits of site blocking. In response, they expanded their blocking requests to also cover DNS resolvers and VPN providers, as we have seen in France, Belgium, Italy, Spain, and elsewhere.

The CEPS report does not see stricter blocking measures as a solution; it suggests a wide range of other recommendations for the EU, member states, and copyright holders.

IP Blocking Should Be Abolished

The report makes 12 formal recommendations. The most significant is that IP-based blocking should be avoided altogether, due to its inherent tendency to block large numbers of legitimate service sites. DNS-level or URL-level blocking should be used instead.

CEPS points out that this conclusion was also reached following reviews conducted by local telecoms regulator TKK, which effectively banned IP-address blocking in the country.

“To the extent that blocking is used at all, better targeted mechanisms such as DNS-level or URL-level blocking should be used instead, consistent with the Austrian TKK’s reasoning. IP-based blocking is inherently overinclusive because shared IP addresses serve thousands or millions of legitimate domains,” the report reads.

Other recommendations include a requirement for rightsholders to contribute to the costs of implementing blocking measures, and the option to be held liable for damages caused by overblocking at their request.

The report also calls for all blocking orders to be subject to prior or rapid judicial review, to be time-limited with periodic reviews, and narrow in scope.

According to the report, the UK blocking model comes closest to its ideal. English High Court orders are time-limited, technically evidenced, and require rightsholders to demonstrate that proposed blocking methods will not affect legitimate content. There hasn’t been any significant overblocking reported in the UK either.

Nord Security Funded the Study

CEPS writes that the study was conducted at the request of and with the support of Nord Security, parent company of NordVPN. However, the think tank states that the analysis and conclusions are entirely independent and reflect the views of the authors alone.

Speaking with TorrentFreak, a Nord Security spokesperson confirmed its support of the study while stressing that the research was conducted independently.

“Website-blocking measures are expanding across Europe, yet there has been limited independent analysis of whether they are effective, proportionate, and compatible with EU law. Nord Security funded this CEPS study because we believe policy in this area should be shaped by evidence, not assumptions,” Nord told us.

As one of the world’s most widely used VPN services, NordVPN has a major stake in the blocking debate. The company has been targeted by blocking orders, including in France, where it appealed alongside other VPN services.

Nord Security also attended the report’s presentation in Brussels this afternoon, where its Regulatory Policy & Compliance Counsel Emilija Beržanskaitė was critical about site-blocking efforts. At the same hearing, the EU’s Intellectual Property Office and the EU’s Directorate-General for Communications Networks, Content and Technology were also present.

For now, the report arrives at a moment when intermediaries are pushing back against blocking regimes across Europe, while the European Commission is yet to issue harmonized guidance on how member states should address blocking concerns.

From: TF, for the latest news on copyright battles, piracy and more.

The initial order required Cloudflare, Google, and Cisco to actively block access to pirate sites through their own DNS resolvers, confirming that third-party intermediaries can be required to take responsibility. Not much later, VPN providers were added to the blocking roster.

Initially, these orders were to address circumvention techniques for domains that were already blocked through ISPs. The DNS resolver and VPN provider blockades limited these loopholes. Several blocking orders have followed since, but a series of orders that came out at the Paris Judicial Court take a different approach.

On March 18, Judge Jean-Christophe Gayet issued seven simultaneous rulings, targeting a broad range of online intermediaries that enable access to pirate sports streams in France. The cases were filed by the Spanish professional football league LaLiga, which requested blocking measures against 35 domain names of sports streaming sites.

The pirate sites listed include librefutboltv.su, which has over 27 million monthly visits, as well as smaller ones such as tflix.live, daddylive.dad, yallashooot.video, ballcontrol.click, and kora-live.im.

The targeted intermediaries span every layer of the technical stack: this includes major French ISPs, alternative DNS resolvers such as Google, Cloudflare, and Quad9, as well as several of the world’s largest VPN providers.

Court: LaLiga Lacks Standing

Interestingly, however, LaLiga was not victorious in court. In each of the seven cases, the court declared the league’s claims inadmissible.

The court explained that, under Article L. 333-10 of the French Sports Code, the right to bring blocking injunctions applies to rightsholders, broadcasting companies, and professional sports leagues. However, the court interprets that last category narrowly.

To qualify for protection, sports leagues must be created by a state-delegated federation under French law, specifically under Articles L. 131-14 and L. 132-1 of the Sports Code. As a Spanish association with no delegation from the French state, LaLiga does not meet that definition.

LaLiga argued that the law should also cover foreign leagues that commercialize their audiovisual rights, and that reading it otherwise would discriminate against non-French rights holders. However, the court rejected these arguments.

The restriction has nothing to do with LaLiga’s nationality, the court noted; the league simply needs a subdelegation from the French state to qualify for protection via site-blocking orders. Additionally, the court concluded that LaLiga is not directly harmed by piracy in France, as it assigned its exclusive French broadcast rights to beIN Sports France.

This same reasoning applied to all seven cases and initially appears to be a major setback for the football league. However, help was just around the corner.

beIN Sports Steps In

beIN Sports France, which holds exclusive broadcast rights to LaLiga in France as part of a deal with the Spanish league, intervened voluntarily in all seven cases.

As the company that acquired exclusive French broadcasting rights for LaLiga, it qualifies under the second category in Article L. 333-10. Unlike LaLiga, beIN could also point to documented harm, including evidence that 35 disputed domain names were streaming LaLiga matches, with beIN Sports branding visible in the pirate feeds.

The court ultimately concluded that there was grave and repeated infringement of beIN Sports France’s exclusive rights in all seven cases and granted the blocking orders in its name.

Blocking The Full Stack

What further stands out is the fact that these orders all came out on the same day, targeting nineteen French ISPs, three DNS resolvers, a CDN provider, and four VPN services. This broad approach ensures that the most popular circumvention options are immediately cut off.

The orders run until June 21, 2026, and are also dynamic in nature. This means that new domain names can be added in the future, once they are approved for blocking by France’s audiovisual regulator, ARCOM.

The ISP order will have the most direct impact. It includes France’s largest providers, such as Orange, SFR, Free, and Bouygues Telecom, as well as various smaller ones.

If subscribers try to circumvent these blocking measures by switching to alternative DNS resolvers, orders against Google, Cloudflare, and Quad9 will prevent this.

VPN providers are not necessarily an option either, as the court granted blocking orders against ProtonVPN, as well as CyberGhost and ExpressVPN. LaLiga also referenced orders against NordVPN and Surfshark jointly, but TorrentFreak was unable to locate these.

The Cloudflare order is the most technically comprehensive of the batch. It covers not only Cloudflare’s public DNS resolver but also its CDN, reverse proxy service, and WARP service under a single ruling. The court requires Cloudflare to block the domains across its infrastructure, by whatever technical means it chooses.

Some of the defendants raised counterarguments in court. For example, several VPN providers argued that Article L. 333-10 conflicts with the EU E-Commerce Directive, while others sought a referral to the Court of Justice. However, none of these arguments convinced the court.

Site Blocking Evolution

The seven court orders represent the most comprehensive single-day blocking action under France’s sports piracy framework, as far as we know. Whereas initial orders targeted single intermediary categories, these come in one full sweep.

LaLiga president Javier Tebas is pleased with the outcome and thanks beIN for their cooperation.

“These rulings represent a significant step forward because they extend protection to the entire technical ecosystem that piracy currently relies on. The fight against audiovisual fraud must grow through collaboration, as is the case here with beIN Sports France, which has been key to developing a solid and effective defense in the French market,” Tebas said.

After multiple successful site-blocking petitions, it’s clear that the French court sees a blocking role for a wide variety of intermediaries. This was recently confirmed by the Paris Court of Appeal too.

—-

From: TF, for the latest news on copyright battles, piracy and more.

Europol and Eurojust announced the action with considerable fanfare but declined to name the service. However, at the time we confirmed that a key target was RapidIPTV, a platform that had been quietly running an IPTV streaming empire since at least 2014.

The authorities saw Amir Z. as the alleged mastermind behind the empire, which also offered a ‘franchise’ model. The man, known to his colleagues as “Dash the Iranian,” was arrested, and this week, after nearly six years of pre-trial proceedings, the prosecution formally started in court.

RapidIPTV Kingpin Goes to Trial

Spain’s National Court (Audiencia Nacional) began hearing the case on Tuesday against five defendants, all of Iranian origin. The charges cover membership of a criminal organization, intellectual property crimes, offenses against the market and consumers, as well as money laundering.

In sharp contrast to the multi-year wait following the arrests, the trial was relatively short-lived.

After three hours of negotiation, all defendants reached an agreement with prosecutors, according to EFE. The prosecution agreed to drop the most serious charge, membership of a criminal organization, after the defendants pleaded guilty to the three other charges.

This resulted in a large sentencing reduction. The prosecution had originally sought 22 and a half years of prison time for Amir Z., but the agreed sentence was just over two years. Similarly, the money-laundering fine that initially could be as high as €70 million was reduced to €8 million as part of the deal.

Because all sides agreed to the plea deal, it cannot be appealed by any party. This effectively ends the prosecution. The sentences for the remaining defendants were not reported.

€12 Million for the Rights-Holders

In addition to the €8 million fine to the state, the sentence also includes a damages fee of €12 million for the affected companies. The court also ordered the confiscation of all material seized during the raids, as well as all funds and accounts held by the defendants.

The private prosecution coalition was an unusually large one. Warner Bros, Universal, Columbia, Sony Pictures, Paramount, New Line, Netflix, Amazon, Disney, and LaLiga had all joined the action under Spain’s acusación particular mechanism, to hold the IPTV operators responsible.

How much money can eventually be recouped has yet to be seen, but with an estimated 2 million subscribers, the operation generated substantial revenue.

A Building in Iran, a Flat in Barcelona

The money-laundering element of the case was also notable. Prosecutors alleged that the group moved approximately €25.1 million through payment processors, cryptocurrency exchanges, shell companies, and falsified invoices.

Specific transactions identified by investigators included the construction of a residential building in Iran, the purchase of a Barcelona property valued at €1.6 million, and the purchase of two luxury vehicles worth a combined €400,000.

Those figures partially overlap with what was already public: at the time of the 2020 raids, Europol reported that police seized real estate, cars, jewelry, cash, and cryptocurrency worth approximately €4.8 million, and €1.1 million frozen in bank accounts.

The platform used various domain names, including rapidiptv.com, rapidiptv.net, iptvstack.com, and the iptv.community forum. According to the prosecution, it captured signals from licensed pay-TV platforms and routed them through a private server network of 50 servers in at least 13 countries across Europe and North America.

Interestingly, iptvstack.com and iptv.community both remain operational at the time of writing.

From: TF, for the latest news on copyright battles, piracy and more.

Several Game of Thrones episodes leaked in the past, and the same applies to the sequel, House of the Dragon.

With the long-awaited third season of HBO’s hit series Euphoria coming up this weekend, the company was on high alert. So, when it saw several ‘spoilers’ being posted by an X account operating under the name “Lexi howard’s cat”, it wasted no time to take action.

The Lexi-inspired fan account has been around for a long time, sharing various Euphoria-related updates. However, a series of posts that were published in late March appeared to have hit too close to home.

On March 31, HBO’s parent company, Warner Bros. Discovery (WBD) sent a takedown notice to X, flagging several posts. According to Michael Bentkover, WBD’s Director of Worldwide Online Enforcement, these were “spoilers for unaired episodes of our Euphoria TV Series”.

TorrentFreak was unable to find out what was posted exactly, but the DMCA notice identifies it as video/audiovisual recording.

X confirmed receipt on the same day and presumably removed the posts. However, that was not the end of it. A week later, on April 7, the company requested a DMCA subpoena at a California federal court, with the goal to identify the person behind the @maudesfancat account.

DMCA subpoenas are relatively easy to obtain, as they only require a court clerk to sign off, which indeed happened a day later.

The issued subpoena requires X to share information sufficient to identify the person behind the account. This includes names, addresses, telephone numbers, email addresses, account numbers, IP addresses, and any other contact or billing records held by the platform.

Unlike the DMCA notice, where WBD used “video” to describe the content, the declaration to the court by Michael Bentkover classifies the infringing content as “summaries of unpublished, character, setting, and plots of a forthcoming series”.

This distinction may matter, as a summary of a plot may not enjoy the same protection as a leaked video. Copyright generally protects the expression of a work, not the underlying ideas or plot descriptions.

Then again, Bentkover also states that the user in question “posted access to HBO’s unpublished, copyright protected work from its forthcoming series,” which sounds substantial.

For now, X Corp. has until April 23 to respond. Legally, both X and the account holder can challenge the subpoena, but no objections have been submitted in court yet. Meanwhile, the ‘Lexi howard’s cat’ account is no longer online.

—

A copy of the subpoena, filed April 8 at the U.S. District Court for the Northern District of California, is available here (pdf). The notice of filing and supporting declaration can be found here (pdf).

From: TF, for the latest news on copyright battles, piracy and more.

The operators of the Asian drama and anime portal never revealed who was behind that pressure, but court records later showed it was Wavve Americas Inc., the parent company of legal Korean streaming service Kocowa.

Wavve had filed a copyright lawsuit in Arizona federal court against the unknown operators of multiple Dramacool domains, hoping to take the associated sites offline permanently.

Defendants Go Silent

When Wavve eventually identified the defendants, they were scattered across Thailand, Vietnam, Pakistan, the Netherlands, and New Jersey.

Kocowa identified domain operators in Thailand, Vietnam, Pakistan, the Netherlands, and New Jersey. The amended complaint named Asian C, Tommy USA, Najeeb Ullah Mirani, Baidar Bakhtand, and Dorothy Bradshaw, none appeared in court to answer the complaint.

Meanwhile, some Dramacool domains remained operational. While these may include copycat sites unrelated to the original operation, the ongoing copyright infringement is a serious problem for Kocowa.

To break this impasse, Wavve filed a motion for default judgment in September 2025, noting that some defendants had not only ignored the litigation but expanded their operations to new domains while the case was pending.

The company did not seek any monetary compensation but simply requested an order that would allow the company to take over the Dramacool domain names.

Default Judgment Entered

Earlier this week, U.S. District Judge Krissa M. Lanham granted the motion for a default judgment in full. The court found the requested injunction proportional and appropriate.

“Requiring defendants stop their infringing activities will not cause any legitimate hardship. And the public interest is served in enforcing copyright law. A permanent injunction prohibiting defendants from continuing their activities is appropriate,” the order reads.

The order prohibits all defendants from operating the sixteen named domain names, including watchasia.to and asianwiki.co, and also bars them from registering or owning any new piracy-linked domain names.

Wavve had acknowledged that an award for monetary damages would be meaningless, as the foreign pirate site operators are unresponsive. Therefore, they set all their hopes on a domain transfer order, which the court granted as well.

Domain Transfers Granted

In the order, Judge Lanham acknowledged that domain transfers are legally contested territory in copyright cases. The standard trademark statute that typically enables such transfers does not apply here, as the lawsuit did not include trademark claims.

However, since none of the defendants put up a defense and because several of the associated sites remain online, the transfers were granted. This was in part justified by judgments in a number of other courts, which approved domain transfers in similar copyright cases.

The order notes that domain transfers can be an appropriate remedy when there are indications that the defendants will not comply with an injunction. That is the case here, Judge Lanham concluded.

“Here, defendants concealed their identities, ignored this litigation, and have an ‘established practice of evading copyright enforcement by moving their operation to new domains, even after having a judgment rendered against them’,” the order reads,

“Wavve is entitled to an order transferring the domain names,” Judge Lanham adds.

Dramacool Domains Still Online

Whether Wavve can actually take control of all 16 domains remains to be seen, as not all registrars and registries may comply with U.S. court orders.

Several of the original Dramacool-operated domains, including dramanice.la, runasian.net, watchasia.to, asianc.sh, and asianwiki.co, have been offline since the November 2024 shutdown.

However, at least three of the named domains are still actively serving pirated content several days after the judgment was entered. Dramacool.bg, dramacool.com.tr, and dramacool.ba all remain online, redirecting visitors to functional streaming sites with full drama libraries.

In closing, it is worth stressing that the permanent injunction prevents the defendants from registering new domain names for infringing purposes. However, the domain transfer order targeted at registrars and registries, is limited to the sixteen named domain names.

—

A copy of the default judgment order, issued by U.S. District Judge Krissa M. Lanham, is available here (pdf). The clerk’s entry of default judgment is available here (pdf).

From: TF, for the latest news on copyright battles, piracy and more.

The record labels accused the Astound-owned ISP of not doing enough to stop pirating subscribers. Specifically, they alleged that the company failed to terminate repeat infringers.

The trial lasted more than two weeks and ended in a resounding victory for the labels. A Texas federal jury found Grande liable for willful contributory copyright infringement, and the ISP was ordered to pay $47 million in damages to the record labels. The copyright infringement verdict was confirmed by the Fifth Circuit Court of Appeals, though the Fifth Circuit ordered a new trial on damages.

The verdict was not the final word yet, as Grande petitioned the Supreme Court last year, urging the justices to take up the case and review the Fifth Circuit’s decision.

Grande’s petition centered on the crucial question of ISP liability in cases of contributory copyright infringement. Grande framed the issue as an “exceptionally important question under the Copyright Act,” highlighting a “nationwide litigation campaign by the U.S. recording industry” to hold ISPs liable for copyright violations carried out by their customers.

The central question is as follows:  

“Whether an ISP is liable for contributory copyright infringement by (i) providing content-neutral internet access to the general public and (ii) failing to terminate that access after receiving two third-party notices alleging someone at a customer’s IP address has infringed.”

Knowledge is Not Intent

The case and the questions are similar to the Cox v. Sony case, which the Supreme Court decided in favor of the Internet provider last month. In a 7-2 decision, it concluded that an ISP cannot be held contributorily liable for copyright infringement merely because it kept providing service to subscribers that were flagged for piracy.

In Cox, the Supreme Court stated that contributory liability requires proof that the provider intended its service to be used for infringement. That intent can only be shown in one of two ways. Either the provider actively induced infringement, or the service is one that has no substantial non-infringing uses.

“Under our precedents, a company is not liable as a copyright infringer for merely providing a service to the general public with knowledge that it will be used by some to infringe copyrights. Accordingly, we reverse,” Justice Thomas wrote in the opinion last month.

The Court also directly countered the Fourth Circuit’s reasoning, which held that supplying a product with “knowledge” of future infringement was enough to establish liability.

Supreme Court Sends Grande v. UMG Back to Fifth Circuit

With Cox v. Sony now settled, the Supreme Court turned its attention to Grande’s pending petition. Rather than taking up the case on the merits, the Court issued a GVR order, granting the petition, vacating the Fifth Circuit’s judgment, and remanding the case for reconsideration under the Cox standard.

The order effectively removes the case from the Supreme Court docket, urging the Fifth Circuit Court of Appeals to take another look at its decision in light of the new ruling.

Given the similarities between the two cases, it is no surprise that the Supreme Court came to this conclusion.

It is now up to the Fifth Circuit to revisit whether Grande’s conduct meets the intent threshold that was established in Cox. That is a significantly higher bar than the one applied in the original verdict, which found that continuing to provide service to known infringers was enough to establish material contribution.

The music companies previously said they sent over a million copyright infringement notices, but that Grande failed to terminate even a single subscriber account in response. However, without proof of active inducement, these absolute numbers carry less weight now.

Whether this translates into a win for Grande on remand remains to be seen. For now, however, the original $47 million verdict is further away than ever.

This week’s GVR order is just one of the many ripple effects of the Sony ruling on other contributory infringement cases. Last week, we reported how X already asked the court to dismiss its liability battle with several music publishers. Meanwhile, the ruling will also directly impact Verizon’s repeat infringer battle with the music industry.

From: TF, for the latest news on copyright battles, piracy and more.

The music publishers, meanwhile, were busy in a different court, asking a Texas judge to throw out X’s antitrust complaint against them with similar finality.

The motion to dismiss, filed in the Northern District of Texas, argues that X’s lawsuit doesn’t hold up and the music companies want all eight counts dismissed with prejudice.

A Conspiracy Built on One Word

X filed its antitrust complaint in January, accusing the National Music Publishers’ Association (NMPA) and a coalition of major music publishers, including Sony, Universal, and Warner Chappell, of coordinating a “weaponized” DMCA takedown campaign to coerce X into industry-wide licensing deals.

The conspiracy claim rested heavily on a pre-litigation email sent by NMPA President David Israelite to Twitter in October 2021. X alleged that Israelite threatened a “massive program” of DMCA notices on a scale “larger than any previous effort in DMCA history” if X did not agree to a partnership.

However, the publishers have now submitted the full email chain to the court, arguing that X’s complaint “selectively crops, paraphrases, and misconstrues” it. They note that the complete exchange tells a more nuanced story.

In his October 6 email, Israelite warned Twitter that the NMPA was preparing a “massive program” of DMCA notices, adding that his “preference is not to go down that road, but instead to develop a partnership.” He closed by writing (emphasis added): “If you are interested in engaging in such a conversation, please let me know. If you choose not to do so, then please know we are open to starting a conversation at any point during the future process.”

The publishers argue that X’s conspiracy theory rests almost entirely on that final word.

“X argues that by using the word ‘we,’ NMPA meant that X could only deal with the Music Publishers collectively for a license and that no individual Music Publisher would negotiate separately. That inference is not only implausible, it is completely devoid of factual basis or allegation. An antitrust claim cannot rest on such a tenuous thread.”

Same Judge, Same Problem

One of the key reasons for a dismissal is the argument that there can be no antitrust injury, as X and the music publishers do not compete. The music companies argue that antitrust law requires a competitor to be involved in a refusal-to-deal claim.

The argument has already succeeded once against X, in the same courthouse, before the same judge. In February, District Judge Jane Boyle dismissed X’s antitrust lawsuit against the World Federation of Advertisers with prejudice, finding that X had failed to allege antitrust injury because no competitor was involved in the alleged boycott.

The publishers quote that ruling extensively and argue the present case is largely similar.

“Specifically, X does not allege that any participant in the alleged conspiracy is its competitor, a necessary requirement for antitrust injury to flow from an alleged refusal to deal,” the motion states.

The proposed order submitted alongside the motion has Judge Boyle’s name pre-filled.

Retaliation, Not Antitrust

The music publishers take their motion to dismiss beyond simply refuting X’s claims. They also suggest that X filed the antitrust suit as leverage in the copyright infringement case the music companies filed in the Tennessee federal court.

“The paucity of factual allegations supporting an antitrust claim is no accident. X’s motivation in filing suit was different: retaliation and leverage for the copyright suit the Music Publishers filed against it, which is currently pending in Tennessee federal court,” the motion notes.

X argues that the music companies sent a flood of “baseless” DMCA notices, targeting over 200,000 posts and suspending 50,000 users. However, the music publishers motion counters that none of the takedown notices was objectively baseless.

The Sham Exception

The music companies argue that their takedown campaign was a First Amendment-protected pre-litigation activity. They invoke the Noerr-Pennington doctrine, which shields things such as pre-litigation notices and cease-and-desist letters from antitrust liability.

DMCA takedown notices, they argue, fall in the same category, especially since these were used as key evidence in the the copyright lawsuit currently pending in Tennessee.

This type of protection does not apply if the notices themselves are “baseless” or a “sham,” which X argued is the case here. The original complaint pointed to several examples, including a takedown notice targeting a video where the non-commercial use of background music was flagged as copyright infringement.

The music companies, however, counter that X does and cannot claim that any notices were baseless. This includes the background music example: this may qualify for fair use defense, but the publishers add that “infringing use of incidental background music is still infringing.”

All in all, the motion to dismiss concludes that the music companies used the DMCA as Congress intended, and that it is not an antitrust violation. The complaint should therefore be dismissed with prejudice on all counts.

It is now up to Judge Boyle to decide whether the antitrust case can continue or whether it should be dismissed outright. The same is true for the Nashville case, where X asked the court to completely dismiss the music companies’ copyright infringement lawsuit.

—

A copy of the motion to dismiss, filed April 2, 2026 at the U.S. District Court for the Northern District of Texas, is available here (pdf). The supporting memorandum can be found here (pdf).

From: TF, for the latest news on copyright battles, piracy and more.

It confirms that they can’t be held liable for pirating activities of subscribers or customers unless they actively induce copyright infringement through specific acts, or if their service has no substantial non-infringing uses.

For rightsholders, however, the ruling represents a significant setback, as it makes it much harder to hold ISPs liable for pirating subscribers.

Or, as Justice Sotomayor noted in her concurring Supreme Court opinion, the majority’s decision “permits ISPs to sell an internet connection to every single infringer who wants one without fear of liability and without lifting a finger to prevent infringement.”

The ruling reshapes the liability landscape, giving new urgency to site-blocking efforts.

Internet providers have previously opposed such legislation over liability concerns. Have those concerns been resolved by the Supreme Court? And where do the U.S. site-blocking legislative efforts stand today?

A Bicameral, Bipartisan Site Blocking Push

Last year, several new site-blocking proposals emerged in Congress. In January 2025, Lofgren had filed her Foreign Anti-Digital Piracy Act (FADPA) in the House. A few months later, Senator Tillis announced a draft of the Block BEARD Act, with bipartisan support from Senators Chris Coons, Marsha Blackburn, and Adam Schiff.

At the time, the House and Senate efforts were not coordinated. That has changed.

TorrentFreak has learned that, over the past months, Senator Tillis and Representative Lofgren have been working on a draft that would combine their separate site-blocking proposals into a single piece of legislation.

The unified approach marks a significant shift from the fragmented approach of the past year.

No draft text has been circulated publicly, and sources could not provide a specific timeline for introduction beyond noting it would need to happen before Tillis’s term ends in January 2027.

One possibility mentioned by sources is that the legislation could be attached to an omnibus spending bill. For now, however, that remains speculative.

Targeting ISPs and DNS Resolvers

While detailed specifics on the bill will have to wait until a draft is circulating, it is expected that the legislation will require both ISPs and large DNS providers to block foreign pirate sites.

This is in line with Lofgren’s original FADPA bill, which specifically included DNS resolvers with more than $100 million in annual revenue. Tillis’s Block BEARD act does not mention DNS resolvers, but uses the Section 512(k)(1)(A) DMCA service provider definition, which is wide enough to capture them.

The inclusion of DNS resolvers is significant, as it brings tech companies such as Google and Cloudflare into the mix. Targeting DNS resolvers is relatively novel internationally, as most site-blocking regimes do not explicitly include DNS providers.

We reached out to Google and Cloudflare, requesting comment, but they did not reply before publication. However, these companies have appealed similar blocking requests elsewhere, including in France, so they likely have reservations.

Notably, last year the Internet Infrastructure Coalition (I2Coalition), which represents major tech companies including Amazon, Cloudflare, and Google, launched its DNS at Risk campaign, warning the public about such DNS blocking threats.

Support and Opposition

Rightsholder groups including the RIAA, MPA, and Creative Future have supported the site-blocking efforts, while consumer advocates have raised concerns. However, the public discourse has been relatively quiet compared to the SOPA debates in 2012.

Times have changed and site blocking is much more common today than it was back then. That said, discussions, support, and critique will likely pick up when the legislation moves forward.

It is notable, however, that Representative Lofgren’s leading role is a shift from her position during the SOPA debates. At the time, she was among the fiercest opponents of SOPA in 2012, warning that blocking threatened the open internet.

Lofgren believes that her FADPA proposal is a “smart, targeted approach” that is mindful of due process, and respects free speech while using a narrow and targeted blocking approach.

Rep. Issa’s Wild Card

Running parallel to the Tillis-Lofgren effort is a separate proposal from Representative Darrell Issa, chairman of the House Judiciary Subcommittee on Courts, Intellectual Property, and the Internet.

Issa’s American Copyright Protection Act (ACPA) has been circulated in draft form for a while but has not been formally introduced. The bill takes a different procedural path. Rather than relying on standard district court jurisdiction, ACPA proposes that the Judicial Conference of the United States maintain a roster of designated judges to hear all piracy blocking cases.

Whether the Tillis-Lofgren framework and Issa’s separate effort will eventually converge remains unclear. Sources indicate that, in earlier stages, these were two separate, uncoordinated tracks.

Issa’s proposal also includes DNS resolvers. At the same time, it also addresses overblocking concerns directly. If a third party’s site is blocked due to an error caused by the copyright owner, the third party could request up to $250,000 in compensation from the rightsholder.

The Timeline

At the time of writing, the introduction timeline for the bicameral bill is unknown. However, Senator Tillis is not running for reelection. That gives him until January 2027 to advance the legislation and also creates a hard deadline.

Whether the bill surfaces as standalone legislation, gets attached to an omnibus spending package, or eventually blends with Issa’s separate ACPA proposal has yet to be seen. But it’s clear that, behind the scenes, lawmakers are still working on getting it ready.

With the Cox decision reshaping the legal landscape, site-blocking efforts have gained new urgency for both ISPs, DNS providers, and rightsholders.

From: TF, for the latest news on copyright battles, piracy and more.

To curb this trend, music companies have taken legal action against various stream-ripping services. This includes Yout.com, which is operated by the American developer Johnathan Nader.

Nader is not easily defeated, however. In 2020 he took the RIAA to court in an attempt to have the site declared legal.

Appeal Pending

At the end of 2022, the district court handed a win to the RIAA and dismissed the matter at an early stage. Judge Stefan Underhill concluded that Yout had failed to show that it doesn’t circumvent YouTube’s technological protection measures. As such, it could be breaking the law. That wasn’t the end though.

Yout’s operator opted to appeal at the Court of Appeals for the Second Circuit, asking it to reverse the lower court’s decision. The stream-ripper’s arguments are partly supported by amicus briefs from GitHub and the EFF, both of which joined the case.

On the other side of the aisle, the RIAA dug in its heels. The music group saw no reason to doubt the lower court’s position and, in its response to the appeal, found the Copyright Alliance at its side.

Yout Flags Cox Supreme Court Precedent

The Second Circuit appeal has been pending for a while, but some fresh arguments appeared this week, after the Supreme Court issued its ruling in Cox v. Sony, reversing a billion-dollar verdict against the internet service provider and narrowing the standard for contributory copyright liability.

Yout’s lawyers were quick to flag the decision to the Second Circuit via a supplemental authority letter. They argued that the Supreme Court’s discussion of when a service is ‘tailored to infringement’ has bearing on Yout’s own situation.

“Although Cox Communications is not an anti-circumvention case, it nonetheless may provide useful guidance to the Court in the present case as the Supreme Court discusses when a ‘service is tailored to infringement’,” Yout’s counsel wrote.

The Supreme Court held that a service that has noninfringing uses cannot be held liable, even if the operator knows that the service may be used for copyright infringement. Yout suggests the same logic should apply in its case.

RIAA: Cox Does Not Apply

Shortly after Yout informed the court, the RIAA sent a direct response.

“Yout’s letter is not helpful to the resolution of this case,” RIAA writes. “The Cox decision addresses common law contributory liability for infringement. Yout’s complaint involves statutory anti-circumvention claims.”

The distinction matters according to the RIAA, as the anti-circumvention of the DMCA (Section 1201) operates independently of the contributory liability doctrine. This means that a technology with noninfringing uses can still be prohibited under Section 1201, if it meets one of three criteria.

RIAA argues that all these criteria are met here, as Yout is designed to let users save local copies of YouTube content, its revenue model depends on that downloading functionality, and it markets itself explicitly as a stream recording tool, while borrowing the first four letters of YouTube’s name.

Whether this exchange of opinions will influence the Second Circuit’s eventual decision has yet to be seen. The key issue on appeal remains whether YouTube’s rolling cipher qualifies as a technological protection measure under Section 1201 of the DMCA, and whether Yout circumvents it.

—

A copy of Yout’s Rule 28(j) letter is available here (pdf). The RIAA’s response can be found here (pdf).

From: TF, for the latest news on copyright battles, piracy and more.

The social media company allegedly failed to respond adequately to takedown notices and lacked a proper termination policy.

The National Music Publishers Association (NMPA), for example, claimed it had sent over 300,000 formal infringement notices, many of which didn’t lead to immediate removals.

“Twitter routinely ignores known repeat infringers and known infringements, refusing to take simple steps that are available to Twitter to stop these specific instances of infringement of which it is aware,” the music companies alleged.

X Won the First Battle

In 2024, X scored a partial win when the court dismissed the music publishers’ direct and vicarious copyright infringement claims, and partially dismissed claims of contributory infringement.

The court concluded that X can’t be held liable for making it ‘very easy’ to upload infringing material or for monetizing pirated content. Those characteristics are not exclusive to infringing material and apply to legitimate content.

While this was a partial win for X, most of the contributory infringement claim remained intact, and the lawsuit was allowed to move forward on those grounds.

Among other things, the music companies argued that X is liable because it willingly turned a blind eye to pirating users, especially those who have a blue checkmark. However, according to a new filing by X this week, new legal developments warrant a full dismissal now.

Cox Sets the New Standard

Last Friday, X informed the Tennessee federal court about the Supreme Court decision in Cox v. Sony, which was decided in favor of the ISP last week. This ruling also concerns a ‘repeat infringer’ case, and it sets a clear standard for contributory copyright infringement.

Under the Supreme Court’s new standard, a service provider can only be held contributorily liable if it intended its service to be used for infringement. That intent can be shown in just two ways: the provider actively induced copyright infringement through specific acts, or the service has no substantial non-infringing uses. Nothing else qualifies.

X argues that the music publishers’ surviving claim fails both tests. Social media is clearly capable of substantial non-infringing uses, and the publishers never alleged that X took specific steps to actively encourage infringement.

The social media platform argues that, under the new Cox precedent, the contributory infringement claim fails as a matter of law and the entire case should be dismissed.

“F the DMCA”

To stress that there is a high bar for these infringement claims, X directly references some of the most damning evidence in the Cox case, which was not enough to establish liability.

“Cox even expressed contempt for copyright law, writing emails with comments like ‘F the DMCA.’ Despite these facts, the Supreme Court had no trouble reversing the jury’s contributory-infringement verdict, because such facts were not ‘evidence of express promotion, marketing, and intent to promote infringement,” X notes in its filing.

The comparison is somewhat ironic, as Elon Musk himself once publicly described the DMCA as a “plague on humanity”, which the music publishers cited in their original complaint as evidence of a hostile attitude toward copyright.

While controversial, these statements don’t appear to matter for a contributory infringement claim, as they don’t actively induce copyright infringement. Therefore, X believes that the present case should be dismissed.

“If the Supreme Court had issued this opinion three years ago, X believes this Court would have dismissed Plaintiffs’ contributory-infringement claim in its entirety. Indeed, virtually every contributory-infringement case Plaintiffs cited in opposing X’s motion to dismiss – including the Fourth Circuit case on which this Court relied – is no longer good law,” X writes.

Millions at Stake

X is not simply flagging the Supreme Court ruling for the record. The social media platform asks Judge Trauger for a status conference before both sides spend millions more on a case that may have already been rendered pointless.

There are various motions pending while the case is heading to summary judgment, and X asks the court to reconsider whether the new Cox precedent warrants a more streamlined process.

“If the Court would prefer to address these issues at summary judgment, X is prepared to do so. But both sides are now poised to spend millions of dollars in fees and expert expenses in the coming months on issues that Cox makes irrelevant as a matter of law,” X writes.

X says that it plans to move for judgment on the pleadings, or alternatively, it will ask the court to reconsider its earlier motion to dismiss ruling in light of new legal reality. For now, X is proposing a hearing to find the most efficient path forward.

Whatever the court decides, the legal standoff between X and the music industry will be far from over. Earlier this year, Elon Musk’s company filed a landmark antitrust complaint against the NMPA, Sony, Universal, and other major music publishers, alleging that they “weaponized” the DMCA to force licensing deals.

—

—

From: TF, for the latest news on copyright battles, piracy and more.

By blocking pirate domains through ISP DNS resolvers, subscriber access is effectively cut off. However, the measures were only partially effective, as many users simply switched to third-party DNS resolvers to get around them.

In 2024, an order from the Paris Judicial Court, requested by football and rugby rightsholder Canal+, aimed to patch that loophole. The order required Cloudflare, Google, and Cisco to actively block access to pirate sites through their own DNS resolvers, confirming that third-party intermediaries can be required to take responsibility.

Article L. 333-10

The DNS blocking order is grounded in Article L. 333-10 of the French Sport Code, which enables rightsholders to request blocking measures against named pirate sites if they can demonstrate “serious and repeated infringement” of their exploitation rights.

To prevent pirate sites from being accessed on French soil, rightsholders may request that “all proportionate measures” are implemented by any online entity in a position to help.

The scope of Article L. 333-10 was always meant to be broad. There was little doubt that it included regular consumer ISPs. However, applying it to DNS resolvers was a different matter, and all three companies fought back.

Cisco was the most extreme in its response. The American company decided to stop offering its OpenDNS service in France, pending appeal. Google and Cloudflare kept their DNS resolvers online in the country but joined Cisco at the Paris Court of Appeal.

Five Appeals, Five Rejections

Last week, the Paris Court of Appeal ruled on five separate appeals, where Cisco, Cloudflare, and Google appealed blocking orders that the French pay-TV provider Canal+ obtained. The court rejected all appeals and concluded that DNS blocking measures are both technically feasible and proportionate.

The news was first reported by the French news outlet L’Informé, which also published the orders.

This is the first time a French appeals court has validated the DNS blocking approach under Article L. 333-10, giving the strategy a considerably stronger legal basis. Specifically, the appeals court repeatedly stressed that DNS resolvers can be required to block pirate sites.

Defense Arguments Fail

The DNS providers raised various arguments in their defense. According to the court’s summary, Cloudflare and Cisco argued that their services have “only a neutral and passive function” and “neither transmit nor participate in infringement.” They compared their role to an address book: they translate domain names into IP addresses, and their involvement ends the moment they return that result to a user’s browser.

This argument failed to convince the court, which found that the “neutral and passive” nature of the DNS resolvers is simply irrelevant to Article L. 333-10. The law isn’t about liability at all. What matters is whether a service can help to block access to pirate sites, which DNS resolvers clearly can.

“The DNS resolution service allows its users, via the translation of a domain name into an IP address, to access websites on which sports competitions are broadcast in violation of rights-holders’ rights, and in particular to circumvent the blocking of those sites by ISPs,” the court wrote.

Google also argued that blocking pirate sites via third-party DNS services is not an effective deterrent, since it can be circumvented by using a VPN or switching to yet another DNS resolver.

The appeals court wasn’t moved by this argument either. French law doesn’t require blocking measures to be perfect, as long as they stop a subset of the visitors to pirate sites, it’s good enough.

“Any filtering measure can be circumvented, and this possibility does not render the measures in question ineffective,” the Paris Court of Appeal wrote.

Intermediaries Pick Up the Bill

Cisco, which shut down its OpenDNS service in France instead of complying with the original order, argued on appeal that implementing geo-targeted DNS blocking would require 64 person-weeks of engineering work.

However, the court was not swayed by this cost argument, noting in its decision that the estimate was “not supported by any objective evidence.” The court also pointed out that Cisco already offers a DNS filtering service to enterprise customers, which undermined the argument that there’s a significant technical challenge.

Cloudflare, meanwhile, offered no figures at all to quantify the cost, the court noted, adding that they also offer filtering options already.

At the end of the day, Cisco, Cloudflare, and Google will have to implement the blocking measures for hundreds of pirate site domains while covering the implementation costs themselves.

More IP Blocking Battles Ahead

Canal+ is pleased with the five appeals court rulings. The pay-TV service Canal+ said in a statement that the rulings are “more than a victory,” forming part of “a global approach that will be reinforced by the progressive deployment of complementary measures, including IP blocking.”

In France, the next anti-piracy frontier is automated IP-address blocking, which is expected to go live later this year, ahead of the FIFA football World Cup. According to L’Informé, the Roland Garros tennis tournament will serve as a trial opportunity.

In addition to DNS providers, Canal+ and other rightsholders have also obtained blocking orders against VPN providers. These are still under appeal.

—

The five orders of the Paris Court of Appeal (RG 24/09372), dated March 27, 2026, are available here (pdf), via L’Informé journalist Marc Rees.

From: TF, for the latest news on copyright battles, piracy and more.

With gaming as a multi-billion-dollar industry today, protecting games is more important than ever. Especially during the early release window when most sales are generated.

In the past decade, Denuvo has been the prime anti-piracy solution. The Irdeto-owned protection software managed to delay pirate releases seriously. Despite being a nuisance to many legitimate customers, gaming companies were pleased to pay for this first line of defense.

That is, until everything suddenly appeared to change a few weeks ago with the pirate leak of ‘Resident Evil Requiem,’ mere hours after its official release.

Hypervisor Bypasses Break Denuvo on Day Zero

The early leak was not a one-off. A wave of hypervisor-based Denuvo bypasses came out recently, including day-zero releases of major titles, including Crimson Desert and Life is Strange: Reunion. Meanwhile, long-protected titles like Assassin’s Creed Shadows also fell to the new method.

The speed and scale of the breaches, which also bypass other DRM software, are unprecedented. Where some reputable game crackers previously feared that Denuvo would effectively end game piracy, the tables have completely turned now.

Traditionally, crackers were required to reverse engineer Denuvo’s DRM paths to patch the game, which is a labor-intensive process that could take months.

Hypervisor bypasses take a fundamentally different approach. They don’t interfere with the game directly, but they operate beneath the operating system’s standard security visibility level, in what security researchers call Ring -1.

At this fundamental level, with key security features disabled, the hypervisor bypasses can intercept Denuvo’s CPU instructions and feed back false data to make the game believe that the tampering protection is still in place.

Because these bypasses are much easier to develop, these new ‘cracks’ come out faster than ever. Where pirates previously had to wait for weeks, they can now play pirated games within hours. That’s unprecedented.

Security Concerns

The hypervisor bypasses are a breakthrough, but they are not without concern. Right off the bat, critics warned that for them to work, pirates essentially have to turn off a key protection layer on their computer.

The bypasses are also plagued by hardware-specific problems and limitations that make them far from a simple patch. AMD systems are currently more stable, while Intel users face significant performance and stability issues, leading to other dangerous “tweaks”.

This cracking approach is still relatively young, and new developments surface nearly daily, with the game piracy forum Steam Underground (CS.RIN.RU) being a central hub.

The forum does not only facilitate pirate releases; it also offers detailed educational resources on potential security issues, warning that there are serious risks involved.

“[E]ven if you trust the authors of the hypervisor driver and even compile it yourself from source, a serious vulnerability in its code could instantly provide maximum and undetectable access to your system,” forum administrator RessourectoR writes.

The question remains, of course, whether the average game pirate will read these warnings at all.

Denuvo’s Response

The scale of the bypasses has not gone unnoticed. While pirates try to navigate the security issues, Denuvo is working on an update that will counter the new hypervisor ‘cracks’.

Denuvo’s parent company, Irdeto, informs TorrentFreak that they are actively working on a countermeasure to address the Denuvo bypasses.

“We’re already working on updated security versions for games impacted by hypervisor bypasses. For players, performance will not be compromised by these strengthened security measures,” says Daniel Butschek, Irdeto’s head of communications.

Further details on these countermeasures will come out in due course. Some have speculated that to counter hypervisor cracks Denuvo would also has to operate in Ring -1, under the Windows kernel, but that is not the case.

“Addressing hypervisor-based workarounds will not require Denuvo to move into Ring -1 or deeper kernel level, and that is not the direction we’re pursuing,” Butschek says.

Since people in the pirate ecosystem already warn about security issues, it is no surprise that Irdeto also highlights these concerns.

“Hypervisor‑based bypasses rely on installing a custom, self-signed hypervisor that operates below the Windows kernel, giving it far broader control than a normal driver,” Butschek notes, warning that this makes systems more vulnerable.

“To run, users must disable major Windows security protections such as Virtualization‑Based Security (VBS), Hypervisor‑Enforced Code Integrity (HVCI) and driver signature enforcement, which are designed to prevent kernel‑level malware, rootkits, and ransomware.”

FitGirl Embraces Hypervisor Bypasses

Initially, popular game repacker FitGirl was also rather cautious due to the widespread security concerns.

“You won’t see any HV-cracks repacks from me until you won’t need to actually disable security features,” FitGirl wrote in an early post, adding that no game is worth the potential irrecoverable damage it can do to one’s computer.

However, as bypass development by KiriGiri and the broader MKDEV team continued, the security situation improved. When the requirement to disable Secure Boot or use the EfiGuard tool was eliminated, FitGirl shifted their position, while recognizing the drawbacks.

FitGirl began publishing hypervisor repacks shortly after, tagging each one visibly with a HYPERVISOR label and committing to replace them with traditional cracks if and when those become available.

Speaking with TorrentFreak, FitGirl further pointed to the ongoing technical improvements, while remaining cautious.

“The team behind those cracks is now working on maturing both the VBS.cmd part and the cracks themselves,” they told us. “So I think that most of the issues coming from Intel or older CPU will be resolved shortly.”

“Caution is still needed with hypervisor bypasses. Mostly for what you download and run. But that is true for any download; it is not hypervisor-specific,” FitGirl adds.

Strict Rules

FitGirl notes that people should never run anything on their computer until they’ve verified that it’s from a trusted source. This raises the question of whether one can trust semi-anonymous pirate sources, but for now no major incidents have been reported linked to hypervisor bypasses.

What stands out is the high level of community rules and moderation. CS.RIN.RU has always been very strict, and with these hypervisor bypasses, forum administrator RessourectoR maintains oversight through detailed release requirements and best practices.

According to FitGirl, these strict rules are reassuring. However, trust can always be broken in the future, and that’s also a risk here.

“Trust can be broken, yes, but we’re not there yet. And hope we won’t, considering how strict rules for publishing those cracks on CS.RIN.RU now are,” FitGirl tells us.

The Cat-and Mouse Game Continues

While Irdeto has several options to respond, the exact countermeasures remain a question for now. Denuvo could check if third-party hypervisors are running by checking CPUIDs or measuring CPU latency, for example.

FitGirl suggested that Irdeto can also respond by shifting to daily license ticket checks, but that would be a nuisance to legitimate players while it may also be bypassed. Alternatively, the company might ask Microsoft for help by restricting Driver Signature Enforcement (DSE) mode, but that doesn’t seem viable either.

One thing is for certain: Denuvo will try to tackle the problem as best as they can, continuing the seemingly endless cat-and-mouse game. While Irdeto knows that it can’t defeat piracy, it would like to go back to the situation where games remained crack-free for weeks.

For now, however, the hypervisor bypasses have made Day-0 pirate releases a reality. For those who are willing to take the risk.

From: TF, for the latest news on copyright battles, piracy and more.