The situation
An intellectual property lawyer needed to identify the operators behind video streaming servers that were infringing copyright. The servers delivered content through a content delivery network (CDN), which obscured the true location and ownership of the streaming infrastructure. Without identifying the responsible party, legal action could not proceed.
Details in this case study have been altered to protect client confidentiality. The core facts, forensic methodology, and outcomes are accurate.
What we found
The streaming infrastructure was distributed across multiple jurisdictions, with the CDN layer designed to mask the origin servers. NDF’s forensic analysis of the technical infrastructure, combined with financial record examination, identified the company operating the infringing service.
How we responded
NDF conducted a multi-layered investigation:
- Infrastructure analysis to trace the streaming servers behind the CDN and identify the origin of the content delivery
- Ownership research to establish authoritative records of website and streaming infrastructure ownership across the relevant jurisdictions
- Financial record analysis to pinpoint the company responsible for operating the infringing service
- Reporting that provided the IP lawyer with the evidence needed to pursue legal remedies
The outcome
NDF delivered authoritative ownership records linking the streaming infrastructure to a specific company. The forensic analysis of financial records provided the conclusive identification that technical infrastructure tracing alone could not achieve. The IP lawyer was able to proceed with legal action against the identified entity.
Lessons for similar organisations
- CDNs obscure but do not eliminate ownership trails. Content delivery networks add a layer of indirection, but forensic investigation can trace through them to the origin infrastructure.
- Financial records are often the key. When technical infrastructure is deliberately obscured, following the money can identify the responsible party more reliably than network analysis alone.
- Cross-jurisdictional expertise matters. Streaming infrastructure rarely sits in a single country. Investigators need to work across jurisdictions to build a complete picture.