When a federal judge in Washington state awarded Aylo—a major adult content publisher—only $4.2 million instead of the requested $84 million in a piracy case, the decision signalled something important: courts are becoming more sceptical of inflated statutory damages claims, even when previous rulings seemed to establish a precedent.
The Statutory Damages Formula Under Pressure
Copyright holders have long relied on the statutory damages framework in US law, which allows awards of $750 to $30,000 per work infringed, or up to $150,000 for willful infringement. Aylo's counsel cited a previously approved formula of $15,000 per work and applied it mechanically to over 5,600 works allegedly hosted on Pornhits, resulting in the $84 million demand.
Judge Benjamin Settle rejected this approach, awarding instead the statutory minimum of $750 per work—roughly $4.2 million across the board. More tellingly, he characterised anything above the minimum as a potential "windfall" given the defendant's apparent insolvency and the difficulty of collecting a judgment. This reasoning reflects growing judicial wariness of using copyright law as a blunt instrument for disproportionate penalties, particularly against operators who may lack meaningful assets.
For hosting and domain infrastructure operators, this matters. When regulators or copyright holders push for stricter enforcement, they often assume statutory damages will be astronomical. Courts are now pushing back on that assumption.
Domain Transfer Emerges as the Real Enforcement Lever
What Aylo did secure—and what may prove more valuable than any judgment—was a domain transfer order. The court directed the registrar to transfer the domain away from the current operator, effectively killing the site's primary access point.
This is the mechanism that actually works. A multi-million-dollar judgment against an anonymous or judgment-proof operator is symbolic; a domain transfer is operational. For registrars, this creates a direct, on-demand compliance obligation. It also explains why copyright holders pursue domain seizure so aggressively, sometimes as their primary remedy rather than a secondary one.
Registrars and hosting providers now occupy the frontline of copyright enforcement, whether they choose to or not. A court order to transfer a domain is enforceable under threat of contempt, making it far more potent than a monetary judgment that may never be collected.
Implications for Registrar Policy and Jurisdiction
Domain transfer orders work only if a registrar is subject to US court jurisdiction and complies. This is one reason why some operators have historically used registrars based outside the US or chosen to register domains in jurisdictions with weaker enforcement infrastructure.
For offshore hosting and domain operators, the lesson is mixed. On one hand, courts are becoming more restrained about damages, which slightly reduces the financial exposure from copyright litigation. On the other hand, domain seizure as a tool is becoming the preferred enforcement mechanism precisely because it bypasses the damages problem entirely. An operator can avoid a $4.2 million judgment but will still lose the domain if they fail to comply with a transfer order.
Registrars that value their ability to operate in US-regulated markets will comply. Registrars operating in jurisdictions without US recognition will ignore such orders—but they also face exclusion from the mainstream domain ecosystem.
What Comes Next
The Pornhits ruling does not represent a wholesale rejection of copyright enforcement; rather, it reflects judicial unwillingness to award crushing damages against defendants who cannot pay. Copyright holders will continue to pursue domain transfers, which remain the most reliable remedy. They may also begin to focus less on maximum statutory damages and more on achieving immediate, tangible operational impact through domain and hosting seizures.
For infrastructure operators and domain registrars, the takeaway is clear: statutory damages clauses are becoming less predictable, but domain compliance obligations are hardening. Legal exposure has shifted from financial uncertainty to operational certainty—a domain transfer order will be enforced, and resisting it carries institutional risk. That shift will shape policy and infrastructure decisions for years to come.
