Having trouble finding a free 📺 streaming site for World Cup 🏟️ matches? This threat actor has you covered with thousands of websites for all 104 matches! ⚽

We've been tracking a likely Vietnam-based actor that mass purchases expired domains (we call these dropcatch) and repurposes their existing web traffic to funnel visitors into illegal sports streaming sites, and then straight into a betting platform the same actor operates. The domain portfolio is a graveyard of real internet history: 2026worldcupnorthamerica[.]com (once cited by the Dallas Morning News and the US Men's National Team Facebook fan page), childreninachangingclimate[.]org (formerly a children's aid program), thebreastcancercharities[.]org (formerly non-profit The Breast Cancer Charities of America), and a domain officially used by major US grocery store chains involved in a large proposed merger. Collectively, this actor has spent hundreds of thousands of dollars acquiring dropcatch domains alone — a strong signal that dropcatching is a genuinely effective vehicle for cyber fraud. Behind all of it sits a staggering tech stack operated by a single actor: 5,000+ domains, illegal streaming services, CDNs, TDSs, trackers, cloakers, betting platforms, and mobile apps. That's not a side hustle, that's an enterprise. 🏗️

While the platform largely targets Vietnamese-speaking users, as well as others in Asia and Oceania, the financial damage reaches much further. Sports authorities and broadcasters worldwide are 📉 losing revenue every time someone watches a live NBA 🏀 , MLB ⚾ :, esports 🎮 , poker 🃏 , or World Cup 🏆 match for free on one of these sites, and this actor has all of them covered.

Some examples from the domains we've uncovered so far:

:Dropcatch domains host or redirect to illegal streaming services

autoredistrict[.]org
childreninachangingclimate[.]org
2026worldcupnorthamerica[.]com
folsomprisonmuseum[.]org
allaboutbasketball[.]us
thebreastcancercharities[.]org

:Fraudulent domains host or redirect to illegal streaming services

90phutaa[.]cc
90phutab[.]cc
90phutac[.]cc
xoilaczzzzw[.]tv
xoilaczzzzt[.]tv
xoilaczzzzh[.]tv

:Lookalike domains used by the betting platforms

fifa001[.]com
fifa002[.]com
fifa02[.]com
worldcup00[.]com
worldcup000[.]com
worldcup02[.]com

#dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #dropcatch #malvertising #illegalstreaming #sportsbetting #domainabuse #vietnam #worldcup #asia #fifa #streaming #betting #2026worldcup #charities #nonprofit #lookalike #xoilac #90phut

SABA-170: Akira Kanagawa’s Amateur Debut in Creampie POV

Explore SABA-170, where Akira Kanagawa delivers a raw amateur debut in a steamy creampie POV. Dive into the scene now and feel the intensity.

https://jav.do/videos/saba-170-saba-170-akira-kanagawas-amateur-debut-in-creampie-pov

#Creampie #POV #Amateur #Lookalike #AkiraKanagawa

NIRVANNA THE BAND THE SHOW THE LOOKALIKE CONTEST

In a corner of Waterloo Park on a windy and rainy May 3, 2026 afternoon, over two dozen people formed a semi-circle around a picnic table. Some came wearing various shades of brown and beige blazers, some dragging long extension cords behind them and one even had their own crocheted fedora. The plan: put on the best Nirvanna the Band the Show lookalike contest Waterloo Region has ever seen. […]

𝗠𝗔𝗙𝗦-𝗸𝗶𝗷𝗸𝗲𝗿𝘀 𝘀𝗽𝗼𝘁𝘁𝗲𝗻 𝗹𝗼𝗼𝗸𝗮𝗹𝗶𝗸𝗲 𝘃𝗮𝗻 𝗞𝘆𝗹𝗲 𝗶𝗻 𝘀𝗲𝗿𝗶𝗲𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝗴𝗲: '𝗗𝗲 𝘃𝗲𝗿𝗹𝗼𝗿𝗲𝗻 𝘇𝗼𝗼𝗻'

De deelname van Kyle aan 'Married at First Sight' houdt de gemoederen flink bezig op social media. Terwijl hij zelf nog zoekt naar zijn gevoelens voor Danique, zien kijkers op X vooral een opvallende gelijkenis met een wereldberoemd seriepersonage.

https://www.rtl.nl/boulevard/artikel/5596635/mafs-kijkers-vinden-look-van-kyle-seriepersonage

#MAFS #lookalike #verlorenzoon