Having trouble finding a free 📺 streaming site for World Cup 🏟️ matches? This threat actor has you covered with thousands of websites for all 104 matches! ⚽

We've been tracking a likely Vietnam-based actor that mass purchases expired domains (we call these dropcatch) and repurposes their existing web traffic to funnel visitors into illegal sports streaming sites, and then straight into a betting platform the same actor operates. The domain portfolio is a graveyard of real internet history: 2026worldcupnorthamerica[.]com (once cited by the Dallas Morning News and the US Men's National Team Facebook fan page), childreninachangingclimate[.]org (formerly a children's aid program), thebreastcancercharities[.]org (formerly non-profit The Breast Cancer Charities of America), and a domain officially used by major US grocery store chains involved in a large proposed merger. Collectively, this actor has spent hundreds of thousands of dollars acquiring dropcatch domains alone — a strong signal that dropcatching is a genuinely effective vehicle for cyber fraud. Behind all of it sits a staggering tech stack operated by a single actor: 5,000+ domains, illegal streaming services, CDNs, TDSs, trackers, cloakers, betting platforms, and mobile apps. That's not a side hustle, that's an enterprise. 🏗️

While the platform largely targets Vietnamese-speaking users, as well as others in Asia and Oceania, the financial damage reaches much further. Sports authorities and broadcasters worldwide are 📉 losing revenue every time someone watches a live NBA 🏀 , MLB ⚾ :, esports 🎮 , poker 🃏 , or World Cup 🏆 match for free on one of these sites, and this actor has all of them covered.

Some examples from the domains we've uncovered so far:

:Dropcatch domains host or redirect to illegal streaming services

autoredistrict[.]org
childreninachangingclimate[.]org
2026worldcupnorthamerica[.]com
folsomprisonmuseum[.]org
allaboutbasketball[.]us
thebreastcancercharities[.]org

:Fraudulent domains host or redirect to illegal streaming services

90phutaa[.]cc
90phutab[.]cc
90phutac[.]cc
xoilaczzzzw[.]tv
xoilaczzzzt[.]tv
xoilaczzzzh[.]tv

:Lookalike domains used by the betting platforms

fifa001[.]com
fifa002[.]com
fifa02[.]com
worldcup00[.]com
worldcup000[.]com
worldcup02[.]com

#dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #dropcatch #malvertising #illegalstreaming #sportsbetting #domainabuse #vietnam #worldcup #asia #fifa #streaming #betting #2026worldcup #charities #nonprofit #lookalike #xoilac #90phut

https://winbuzzer.com/2026/06/07/europol-operation-dismantles-illegal-streaming-networks-xcxwbn/

Europol has dismantled nine illegal streaming crime groups, exposing how piracy networks move domains, servers, and payment routes across borders.

#IllegalStreaming #OperationKRATOS2 #Europol #Streaming #VideoStreaming #Piracy #CopyrightInfringement #Cybercrime #Europe

Europe Cracks Down on Illegal Streaming Networks, Arrests 29

Behind the scenes of cheap streaming deals, complex crime networks are at work - but thanks to Operation Kratos 2, 29 alleged cybercriminals have been arrested and nine organized crime groups dismantled. This major crackdown on illegal streaming networks marks a huge win for European law enforcement.

https://osintsights.com/europe-cracks-down-on-illegal-streaming-networks-arrests-29?utm_source=mastodon&utm_medium=social

#OrganizedCrime #IllegalStreaming #Europe #OperationKratos2 #Europol

Law Enforcement Disrupts Nine Illegal Streaming Crime Groups

In a major crackdown on illegal streaming crime, authorities have dismantled nine organized crime groups and made 29 arrests in a seven-month operation that targeted the entire criminal ecosystem. The coordinated effort, involving 13 countries, identified 86 suspects and referred 59 cases to judicial authorities.

https://osintsights.com/law-enforcement-disrupts-nine-illegal-streaming-crime-groups?utm_source=mastodon&utm_medium=social

#OperationKratos2 #LawEnforcement #OrganizedCrime #IllegalStreaming #Europe

Pirate Site Operator’s Appeal Goes Bad, Court Extends Prison Term By 50%

https://torrentfreak.com/pirate-site-operators-appeal-goes-bad-court-extends-prison-term-by-50-251128/

#IPTVandStreaming #Illegalstreaming #SouthKorea #Lawsuits #nunutv

Piracy Shield Study Reveals Massive Overblocking & Collateral Damage

https://torrentfreak.com/piracy-shield-study-reveals-massive-overblocking-collateral-damage-250909/

#Illegalstreaming #PiracyResearch #PiracyShield #SerieA #AGCOM #italy #iptv

Dynamic Pirate Site Blocking Injunctions and the Transparency Illusion

https://torrentfreak.com/dynamic-pirate-site-blocking-injunctions-and-the-transparency-illusion-250907/

#Illegalstreaming #OpinionArticles #siteblocking #transparency #DAZN #iptv

Live Sports Piracy: France ‘Contained’ Illegal IPTV & Illicit Streaming in 2024

https://torrentfreak.com/live-sports-piracy-france-contained-illegal-iptv-illicit-streaming-in-2024-250521/

#Illegalstreaming #sportsstreaming #PiracyResearch #siteblocking #ARCOM #iptv

Pirate IPTV Users Largely Face No Risk of Arrest, UK’s Top Piracy Cop Concedes

https://torrentfreak.com/pirate-iptv-users-largely-face-no-risk-of-arrest-uks-top-piracy-cop-concedes-250423/

#FederationAgainstCopyrightTheft #Illegalstreaming #Anti-Piracy #firestick #PIPCU #iptv