Wednesday, December 28, 2022

TorrentFreak's Latest News

 

Analysis of U.S. Pirate Site Domain Seizures During FIFA World Cup 2022
Andy Maxwell, 28 Dec 10:33 AM

ball oldAfter gathering data and in the absence of announcements by U.S. law enforcement agencies, on December 10 TorrentFreak reported on a wave of domain seizures.

Many of the affected sites displayed a banner indicating the involvement of three government agencies – IPR Center, Homeland Security Investigations, and the Department of Justice.

Data clearly showed that the domains were all connected to illicit live sports streaming, but it took another three days for that to be officially confirmed.

On December 13, the United States Attorney for the District of Maryland confirmed that more than 50 domains had been seized to protect FIFA World Cup 2022. None of the domains were mentioned by name, but TorrentFreak independently identified just over three dozen.

Less than a week later, with some sites using backup domains and some investing in replacements, U.S. law enforcement followed up with a new wave of seizures that attempted to whack-the-moles as they resurfaced.

The Domain Seizure Mystery

At least for the time being, the domain seizures appear to have stopped, but that in itself only adds to the growing list of questions.

Why seize these domains and not others? Why seize domains to protect FIFA when a) football isn't exactly popular in the U.S. and b) there are plenty of bigger sites covering NFL/NBA/NHL/UFC etc, and continue to do so? Why not seize domains every month, every week, or even every day?

We don't have definitive answers on any of these questions, but data collected by TorrentFreak on close to 70 seized domains (listed at the end of this article) offers pointers on why some domains could be more vulnerable than others. The bigger picture over millions of domains suggests that many pirate sites are already vulnerable to domain seizures.

Seizures Targeted Some High Traffic Domains

The live sports streaming piracy market is both huge and global. Public streaming websites are just a part of a larger picture where even the seizure of 70+ domains has limited impact, despite inconveniencing hundreds of millions of monthly visitors.

The chart below shows the seized domains that enjoyed the most traffic, measured by their visits in November 2022, before the seizures began. The list started as a 'Top 10' but due to some replication of traffic across WeakStreams and SoccerStreams, one of the domains was excluded.

seized domains fifa by traffic x-2022

Given that the United States is behind these domain seizures, we wanted to determine where these sites were (and in some cases still are) most popular. The domains listed below are followed by monthly visits data for November 2022 (SimilarWeb data, rounded), their five most popular visitor countries, and the percentage of each domain's total traffic they accounted for.

Librefutbol.com – 70m – Argentina 45%, Peru 14%, Columbia 9%, Mexico 5%, Chile 4%
Score808.com – 32.1m – Malaysia 9%, Kenya 9%, Indonesia 6%, Nigeria 5%, UAE 5%
Hesgoal.com – 30.1m – UK 14%, U.S. 11%, Belgium 6%, Sweden 6%, Netherlands 4%
Freestreams-live1 – 21.1m – U.S. 23%, UK 13%, Canada 9%, Poland 3%, Germany 3%
Soccerstreams.net – 16.4m – U.S. 22%, Canada 12%, UK 12%, Portugal 6%, India 3%
istream2watch.com – 10.8m – U.S. 26%, Canada 9%, UK 6%, Portugal 5%, Germany 3%
Rojadirectatv.tv – 11.7m – Spain 32%, Columbia 17%, Mexico 14%, Argentina 8%, Chile 8%
Steamlivenow.me – 10.7m – U.S. 28%, Canada 9%, UK 6%, Portugal 5%, Germany 4%
Yalla-Shoots.com – 8.4m – Egypt 19%, Morocco 15%, Algeria 9%, UAE 6%, Germany 6%

While visitors from the U.S. account for around a quarter of visits to three of the most popular domains in the list, Argentina's love for Librefutbol.com amounted to 31.5m visits per month in November alone – in a nation of fewer than 46 million people.

New domains for the site are reportedly in operation, but the seizure will have had a significant effect on traffic, at the worst possible time for Argentinian football fans.

Domain Registrars

The domains listed above show a reasonable spread of extensions – from .com to .tv, through .net and .me – but the full list offers even more variety and clearly no better protection against seizure.

Despite having a reputation for being at least a little more resilient than most, a pair of .to domains also found themselves directed toward U.S. Government servers. A pair of domains registered with Sarek Oy stood up no better, despite the registrar having a reputation for being an awful lot more resilient than others.

Nearly 15% of the seized domains were registered with GoDaddy, but with 4.4m domains and almost 15% of the domain market overall, that looks normal. NameCheap-registered domains accounted for almost 27% of seizures against its 14% market share but with 4.06m domains overall, anything could happen if another 50 or 100 domains were added to the seizure list.

After examining close to 70 domains in search of a pattern or anomaly, little about the domains suggest anything out of the ordinary. All are clearly susceptible to seizure whenever U.S. authorities decide that's the appropriate course of action.

Location, Location, Location

One thing is glaringly obvious, however. When U.S. authorities need something done, it certainly doesn't hurt when domain companies are on home soil. And they are, overwhelmingly so.

Of all domains seized in December based on allegations of illegal streaming, almost 69% were registered with US-based companies. The runner-up with just over 13% of the domains was India-based PDR Ltd, but ultimately even that has US-based owners.

That leads to the biggest question of all: if 70 or so domains can be seized in the blink of an eye, why can't 700 or 7,000? Even if the domains were seized as part of an adversarial legal process, the chances of any domain owners appearing in the U.S. to fight for their return are vanishingly small. And that means only one thing – more domain seizures.

Given the tendency towards symbolism, a new wave of seizures may coincide with a major sporting event or a notable date in Hollywood's diary. Precisely when is unknown but one thing is certain; any domain with a connection to the U.S. is vulnerable and finding alternatives may not be as easy as it sounds.

Suggestions That .org Domains Are 'Safe'

The Pirate Bay has operated from thepiratebay.org for years, which may be seen as a plus for domains with a .org extension. Indeed, it appears that operators of a handful of the sports streaming sites listed below have switched to a .org variant, despite the controlling Public Interest Registry and parent Internet Society both having a base in Virginia, United States.

Indeed, when more than 240 Z-Library domains were seized last month, among them were z-lib.org, b-ok.org, book4you.org, hk1lib.org, art1lib.org, ca1lib.org, eg1lib.org, and at least two dozen more with a .org extension.

For reference, we compared the WHOIS records of thepiratebay.org (registrar easyDNS Technologies – Canada) with the WHOIS records of ten random Z-Library .org domains that currently have DNS records pointing to SeizedServers.com.

Book4you.org is the only domain with a registrar in the United States (GoDaddy.com, LLC). The next seven – b-ok.org, zlib.org, hk1lib.org, cl1lib.org, art1lib.org, ca1lib.org, eg1lib.org and au1lib.org – were all registered with Canada-based Tucows Domains.

2lib.org was also registered with Tucows, with Njalla-owner 1337 Services LLC as the registrant. Privacy was most likely maintained but the domain was still seized, unlike The Pirate Bay's which appears impossibly bulletproof. For now, at least.

Domains Seized By U.S. Authorities (December 2022, list may be incomplete)

– 222live.com
– 247football.net
– 88kanqiu.tv
– 88zhibo.net
– 9goal.tv
– 9goaltv.cc
– 9goaltv.to
– acrackstreams.com
– ajsports.tv
– amzfootball.com
– beeduball.com
– bongtron1.live
– cado89.com
– crichd.pro
– eplsite.football
– extremotvplay.com
– freestreams-live1.com
– futbollatam.com
– futbollatin.com
– futboltv-envivo.com
– futboltv.biz
– futboltv.live
– ghiban1.live
– ghiban2.com
– goaltime.tv
– guduballs.com
– hesgoal.com
– hesgoal.me
– hesgoal.pro
– hesgoal.tv
– ijube.com
– istream2watch.com
– juventus-live-stream.com
– koragol.com
– librefutbol.com
– live-sports-stream.net
– livetv605.me
– mythethao.com
– mythethao.live
– ovopremium.com
– polysportstv.info
– releasesky.com
– rojadirecta-futbol.live
– rojadirecta.global
– rojadirecta.me
– rojadirecta.vip
– rojadirectaliga.com
– rojadirectatv.tv
– rojadirectatvlive.com
– rojadirectatvonline.net
– score808.com
– soccer24hd.com
– soccerstreams.net
– soccerstreams.to
– sportstream.tv
– streamlivenow.me
– tarjetarojaonlinetv.com
– tenorsky.com
– toplivematch.com
– toplivematch.net
– tructiep99.com
– tvrojadirectaonline.net
– vipleagues.net
– weakstream.net
– weakstreams.com
– wizwig1.com
– yalla-shoots.com

From: TF, for the latest news on copyright battles, piracy and more.

U.S. Marshals Will Sell Pirate IPTV Owner's House, 'Only' $99m Still to Pay
Andy Maxwell, 27 Dec 09:45 PM

IPTVSome players in the pirate IPTV market view subscription sales as little more than a side hustle, one that brings in a few dollars here, and a few dollars there. No big deal.

That may well be the case but elsewhere in the chain, people are making serious money. Bill Omar Carrasquillo, aka Omi in a Hellcat, openly admits that he made multiple tens of millions from his service, Gears TV. The operators of Nitro TV didn't make that much, but the amount still contained one or two digits followed by six zeros.

In common with Carrasquillo, legal problems also engulfed Nitro operator Alex Galindo and several members of his family. After being sued in 2021 by US broadcaster DISH Network, Sling and NagraStar, in June 2022 a court ordered Nitro's operators to pay more than $100m in damages, a staggering amount that won't ever be recovered in full.

Recovery in part can't be ruled out, however.

Plaintiffs Go After the Money

In July 2022, the plaintiffs stepped on the gas by requesting several writs of garnishment at a Texas district court. Believing that the Galindos had squirreled away several million dollars in various bank accounts, the plaintiffs sought permission to find out exactly how much was involved and where it could be found.

Among those contacted were Wells Fargo Bank, Woodforest National Bank, JPMorgan Chase Bank, Bank of America, and Capital One (example response below)

cap-one-bank

All responses received amounted roughly to the same thing – if there was ever any money, it's all gone now. In October 2022, the plaintiffs updated the court on their findings, noting that more than $10 million had been spent, relocated, or otherwise disappeared.

Disappearing Millions

Referring to Nitro TV defendants Alejandro (Alex), Anna, Martha, and Osvaldo Galindo as "Judgment Debtors", the plaintiffs reminded the court of ignored pre-lawsuit cease-and-desist correspondence, failure to shut down Nitro TV after the lawsuit was filed, and destruction of evidence while it was underway.

Then came details of the bank accounts;

– $5.8m deposited into Martha and Osvaldo Galindo's Chase accounts. Balance: $49.22.
– $3.0m deposited into Martha's Capital One account. Response: No active accounts
– $1.0m deposited into Anna's Woodforest account. Balance: unspecified negative sum
– $164k deposited into Alex's Wells Fargo account. Response: No active accounts

"All told, the entirety of the $10 million that Judgment Debtors are known to have received from their sale of Device Codes has been removed from Judgment Debtors' accounts," DISH and Nagra informed the court.

"More than $1.5 million of those funds was transferred to a Galindo family member in Mexico and another $181,730.00 was transferred to Alejandro Galindo's ex-wife, further demonstrating that Judgment Debtors have taken steps to conceal their illicit proceeds and prevent Plaintiffs from enforcing the Judgment."

Some assets are less easily relocated, however.

A Very Nice House in Texas

While protection varies from state to state, a homestead exemption can limit creditors' access to equity held in a home. A property identified by the plaintiffs in Friendswood, Texas, does not enjoy any protection, the plaintiffs informed the court.

"The Friendswood Property was purchased using funds that Judgment Debtors wrongfully acquired from their sale of Device Codes [pirate IPTV subscriptions]," the companies said, referencing the property in the video below.

The plaintiffs said that customer IPTV subscription payments totaling $5.5m were paid into a Paymentech account. Around $5.4m was transferred to a Chase account operated by Martha Galindo, with $925,913 ultimately financing the house in Friendswood, under Alex Galindo's name.

No Protection, Court Orders Sale of Property

"The Friendswood Property does not qualify for homestead protection under this well-established Texas law because the property was purchased using wrongfully acquired funds that Judgment Debtors received from their infringing Nitro TV service," the plaintiffs informed the court.

The Galindos could have objected, but did not. On November 30, 2022, the court ordered the United States Marshal Service to levy and sell the property, and apply the proceeds towards satisfaction of the judgment.

The Marshal Service visited the house on December 9, 2022. According to court records, someone inside responded to the official's knock and ring, but he wasn't invited into the property. A Notice of Sale was posted on the front door.

A formal notice was later published by The Daily News, the oldest newspaper in Texas. It has since been removed but the key details are as follows:

[The U.S. Marshals Service] will proceed to sell, without appraisement, for cash, to the best and highest bidder, on the first Tuesday in January 2023, that being the 3rd day of January 2023, at Public Auction at the Galveston County Courthouse located at 722 Moody Ave., Galveston, TX 77550 in the commissioner's court, between the hours of 10a.m. and 4p.m., all the right, title and interest of the defendant(s) in the real property as described below in order to satisfy the judgment issued in the above mentioned action.

At the start of the sale, the Marshal shall set the minimum bid and bid increments, if any. At the conclusion of the sale the winning bidder shall provide the U.S. Marshal with a deposit of ten percent (10%) of the winning bid and the remaining ninety percent (90%) shall be paid within seven (7) days thereafter, excluding Saturdays, Sundays, and holidays.

While large damages awards are often the outcome of pirate IPTV lawsuits in the United States, their scale can at times render them ridiculous to most ordinary people.

The persistence of DISH, Sling and Nagra, shows that while the amounts can be unbelievable, the consequences live on, long after the headlines have been forgotten.

The potential for the consequences to drag on in this matter seems considerable. Even if the property sells for $1 million, the amount outstanding on the damages award will still exceed $99 million.

Related court documents can be found here (1,2,3, pdf)

From: TF, for the latest news on copyright battles, piracy and more.

 
 
Powered by Mad Mimi®A GoDaddy® company

No comments: