Under U.S. law, rightsholders have an option to identify alleged copyright infringers, without having to file a lawsuit.
Instead, they can request a DMCA subpoena. These documents are typically signed by a court clerk and don’t require any judicial oversight.
These DMCA subpoenas allow rightsholders to obtain the personal details of anonymous alleged infringers through third-party service providers. In recent years, this legal shortcut has shown to be a capable OSINT tool, with the Alliance for Creativity and Entertainment (ACE) as the most avid user.
This week, the Motion Picture Association, representing ACE, filed two new subpoena requests at federal courts in California. The first subpoena targets Internet infrastructure company Cloudflare and the second targets Discord users who allegedly operate pirate servers.
Miruro.to, Aniworld.to, and 47 Other Domains
The first request, filed at the Central District of California, lists 49 domain names. On behalf of ACE members including Disney, Netflix, Warner Bros., Universal, Paramount, and UEFA, the MPA asks Cloudflare to identify the people who run the associated accounts.
Three domains clearly stand out. The anime network Miruro is in the lead per Similarweb’s data, with 45 million monthly visits for the .to domain, and 37 million for the .tv variant. The German-language anime and television site Aniworld.to draws an estimated 23 million visits a month, most of them from Germany.
The rest reads like an international tour of well known streaming piracy brands. There are clones trading on the 123movies, Fmovies, and SolarMovie names, Spanish-language Pelisflix mirrors, the Chinese-language Gimy network, Hindi download portals, and some StreamEast-branded sports streaming portals that show matches from ACE member UEFA’s competitions.
A full list of all domain names is available below. These include many mirror and copycat sites that only have minimal traffic.
For every domain, ACE wants Cloudflare to hand over names, physical addresses, IP addresses, phone numbers, email addresses, payment details, and account histories. Whether this will yield any usable intel has yet to be seen, as pirate site operators tend to register false information. However, ACE hopes it points to at least some of the people involved.
Two Discord Servers
The second subpoena targets Discord and is filed at the Northern District of California. On behalf of ACE members, the MPA is requesting information linked to two servers and two accounts. These servers allegedly posted links to pirated copies of films including Wreck-It Ralph and Shutter Island, as well as episodes of Invincible and The Pitt.
The legal paperwork isn’t very informative as it only lists numeric server, account, and channel IDs, without any server or usernames attached. We could not link this information to any server names, but we do know when they were created.
Every Discord ID is stamped with the moment it was created. For one of the servers, the user, channel and server were all created in September 2025, in the span of roughly half an hour. After that, it remained active until earlier this month.
The second server is much older. It was created in September 2020, while the account flagged alongside it was created last November. This means that the account that allegedly posts the content isn’t the one that created the server.
The Servers are Gone
At the time of writing, both servers have already been deleted. Whether Discord pulled the servers or the operators deleted them first is not clear, but MPA specifically asked Discord to take action in a separate takedown notice.
MPA informed Discord that the sole purpose of these servers is to “link Discord users to an online service” that provides access to pirated movies and series. This suggests that the Discord server was linked to a pirate streaming portal.
“We request that Discord remove or otherwise disable access to the server,” MPA’s notice reads.
Notably, the subpoena request is much more targeted than the DMCA subpoena Take-Two requested in its search of the GTA 6 leaker. That subpoena requested information of thousands of users connected to three servers. Here, it only seeks identifying information on the operators of the two servers and two specific accounts.
The DMCA subpoena requests have yet to be signed off by a court clerk, which means that the subpoenas have yet to be issued.
The Cloudflare DMCA subpoena request, filed at the U.S. District Court for the Central District of California, is available here (pdf). The Discord subpoena request is available here (pdf) and was filed at the Northern District of California.
The 49 domains named in the Cloudflare subpoena are:
Aniworld.to, miruro.tv, flixbaba.mov, flixbaba.is, flixmomo.tv, encontrei.info, fastflix.top, seeflix.to, empire-streaming.us, fmoviess.org, yesmovies.ag, tinyzone.org, solarmovie2.com, streamzy.org, watchnest.to, watchnest.org, indexflix.to, indexflix.org, imdb.su, streamimdb.ru, miruro.ru, pelisflix200.work, pelisflix200.club, pelisflix200.best, pelisflix1.cc, pelisflix1.bio, pelisflix1.de, coflix.esq, gimy.tv, gimy.now, gimyv.com, 94580.net, movieffm.net, gimytv.biz, gimytube.com, miruro.to, miruro.bz, repelisplus.my, 94itv.app, 99itv.net, solarmovies.co, 123moviesfun.is, moviesmod.at, moviesmod.zone, nupload.top, thestreameast.fun, direttecommunity.online, livetv903.me, streameasti.is.
From: TF, for the latest news on copyright battles, piracy and more.
Powered by WPeMatico
