This week agents from the US Customs and Homeland Security agencies seized assets (including DNS domain names) from fifteen streaming Internet video companies, including PlanetMoviez.com, Movies-Links.tv, Filespump.com, Now-Movies.com, ThePirateCity.org, NinjaVideo.net, NinjaThis.net and TVshack.net.

The below graphic shows the colorful DOJ / ICE warning now greeting visitors to these disabled domains. We include the previous homepage for tvshack.net below (note: from a personal viewpoint, I think showing a Knight’s Tale is a crime in itself).


The US government complaint alleged that these web sites illegally distributed pirated first-run movies and television shows in exchange for small subscription fees and advertisement revenue.

In addition to domain names, US officials also seized bank accounts and executed search warrants in four states.

The video sites reportedly collectively enjoyed more than 7 million unique visitors per month and all ranked in the Alexa Top 10,000 (Tvshack.net ranked 1,762).

Though the actual servers hosting the alleged pirate web sites resided in different countries (including the Netherlands and Germany), the video sites registered the domain names using US based companies.

Which all brings up some interesting questions.

Jurisdiction and policy are tricky things in this age of a global Internet.

In particular, government and court jurisdiction over virtual global Internet shared resources pose interesting extra territorial jurisdiction and sovereignty questions.

In the specific case of civil commercial trademark and copyright disputes, the Internet benefits from a long international intellectual property legal tradition with the ICANN Uniform Dispute Resolution Policy. While imperfect, the UDRP process works and has resolved thousands of commercial domain name intellectual property disputes.

But beyond UDRP settlements, criminal jurisdiction over DNS and other shared global Internet resources remains a murky and rapidly evolving virgin legal territory. We’ll explore a few recent cases:

And if DNS domains for foreign companies using .net or .com can be seized by the US, do foreign governments have jurisdiction over gTLDs managed by a registrar incorporated in their countries? In theory, ICANN insists top level domain registrars do not “own” domains, but act as trustees for their delegations with “a duty to serve the community.”

Even more interesting, if DNS domain names are property then do the courts have jurisdiction over the root servers or over other ICANN and regional registry (i.e. ARIN, RIPE, APNIC) number allocations? Could a foreign court order US providers to stop accepting BGP ASNs or revoke IPv4 address assignments?

Or maybe the legal issues are an intellectual curiosity but not terribly important from an operational perspective.

The real question is did the US Customs and Homeland Security domain seizure have an impact on the steady flood of illegal movie downloads / streaming?

Tvshack (as well as several other movie sites) uses a Dutch Hosting provider, Ecatel (AS29073), with multiple data centers in Amsterdam, The Hague and Stockholm. Ecatel uses GlobalCrossing and Terremark for upstreams and maintains dozens of smaller peering sessions at the AMS and NS exchange.

The graph below shows traffic from five North American consumer providers with Ecatel between June 27 and July 2. All times are EDT.

While Ecatel has many other hosting customers besides Tvshack, few are likely as large. You can see the impact of the Wed June 30th tvshack domain seizure on AS29073 traffic above. Within hours of the takedown, Ecatel traffic dropped by more than 25%.


During the Wednesday press release announcing the US government action, ICE Assistant Secretary John Morton declared
“I don’t think we’ve stopped Internet piracy in a day”.

It turns out Mr Morton was right.

The seizure did not stop piracy within a day — not even half a day.

Four hours after the seizure, tvshack administrators registered a new domain name. But this time, tvshack selected a Chinese registrar and a Cocos Islands ccTLD.

Traffic is now rapidly climbing to the renamed tvshack.cc site.


9 Responses to “Takedown”

July 02, 2010 at 12:48 pm, Brian said:

Curious about how this was implemented, which I think is part of the legality question. Some of the seized domains point to a 1and1.com ip address, which is apparently also hosting a number of sites that weren’t seized (or at least don’t have the fancy DoJ welcome message):


There’s no redirect or anything either – it looks like is serving up the DoJ notice. So they “seized” the domain but still leave it running on a private hosting company rather than a government server? Odd.

July 05, 2010 at 6:59 am, Michael said:

More interestingly, the US seized the complete Afghanistan and Iraq zones and imprisoned the (US based) people for “cooperation with a terrorist regime”…

Also, DNSSEC. Look at DNSSEC. It is seldomly discussed, but the root certificates are generated by a US institution, and so are revocation certificates…

July 06, 2010 at 1:54 pm, The Vast Jeff Wing Conspiracy said:

[…] federal government takedown of pirate Internet domain names succeeded… for a few hours. This site has an interesting review of the jurisdictional and legal issues raised by the case—and […]

July 06, 2010 at 2:01 pm, US Pirate Movie Site DNS Seizure Fail | JetLib News said:

[…] perhaps the state of Kentucky can seize domain names for foreign companies?), this study shows the legal issues may be moot — the raids mostly failed. Within hours of domain name seizure, tvshack.cc was back up and running (but this time using a […]

July 06, 2010 at 3:03 pm, Chris said:

And the U.S. wonders why the world has such strong feelings against them. They’re trying to police the world as well as the internet.

This article brings forth some excellent points from a legal perspective; if the U.S. thinks they can operate in the manor they currently are; they’re going to have a rude awakening when other countries do the same thing.

The negative impact that the recent actions of the U.S is going to have cannot be seen to their full extent right now (in regards to internet issues and foreign policy issues), but rest assured, they will make their way to the public’s eye; but probably not before it is already to late.

July 06, 2010 at 9:11 pm, MikeFM said:

So the end result will be the replacement of the DNS system with a fully distributed decentralized system and the government will once again have just painted itself into a corner?

There are real criminals out there raping, murdering, kidnapping, torturing, and using Internet Explorer. Why don’t we spend tax dollars stopping these dangerous people instead of keeping my neighbor from downloading Alf?

July 08, 2010 at 8:33 am, Amerykanie przejmujÄ… pirackie domeny. Piraci wracajÄ… na innych – vBeta.pl – blog o internecie, baza wiedzy o nowych programach, Web 2.0 said:

[…] korzystajÄ…c z pirackich filmów. Strony te już wróciÅ‚y do sieci pod nowymi adresami.Jak podane Arbor Networks z sieci znikÅ‚y PlanetMoviez.com, Movies-Links.tv, Filespump.com, Now-Movies.com, […]

July 18, 2010 at 12:36 am, Someonwwhocares said:

What a waste of time and money to close harmless sites that does no harm to you or your family. Yet the government is now dictating what you should watch or listen to line, meanwhile you have in our country…sleeper terrorists, racists. gangs. mobsters, rapists and the list goes on but yet our government is only focused on the internet. Well for starters they should remove all jerk off websites that a child could access easily then next put back all those sites that they taken off line and let americans watch what they want to watch. It’s not illegal to watch a movie on line if it came out 2 days ago for a small price just as long the online streaming is in hd, then again who wants to go to a movie these days and pay $15.00 for a movie that that probably suck anyway and pay $10 for popcorn that has way to much butter & salt.

September 19, 2010 at 10:47 pm, xpda said:

[…] /blog/asert/2010/07/takedown/ […]

Comments are closed.