The U.S. Department of Justice (DOJ) has announced the seizure of nearly 400 internet domains used to stream FIFA World Cup 2026 matches illegally.
This operation represents one of the largest coordinated anti-piracy enforcement actions related to a global sporting event.
Conducted under the title “Operation Offsides,” it targeted websites that were distributing real-time broadcasts of World Cup matches without authorization, violating U.S. copyright law and enabling the illegal monetization of content through advertisements, subscriptions, and redirected malicious traffic.
Authorities confirmed that many of these domains were actively streaming live matches at the time of their seizure, based on evidence detailed in an affidavit filed in the Eastern District of Virginia.
DOJ Seizes Nearly 400 Domains
The DOJ’s Criminal Division led this enforcement effort in coordination with Homeland Security Investigations (HSI) and the National Intellectual Property Rights Coordination Center (IPR Center).
Officials emphasized that, beyond copyright infringement, these platforms often serve as channels for cyber threats, exposing users to malware, phishing schemes, and credential theft.
Security experts and law enforcement agencies have warned that illegal streaming ecosystems often incorporate harmful scripts, rogue advertisements, and exploit kits that compromise user devices and steal financial information. This aligns with findings from broader threat intelligence indicating that piracy domains are commonly used as initial access points in cybercrime.
The seized domains were identified with the support of various private-sector organizations, including FIFA, beIN Media Group, NBC Universal, Warner Bros., the Motion Picture Association’s Alliance for Creativity and Entertainment (ACE), and the UFC.
These organizations provided crucial intelligence on streaming patterns, domain infrastructure, and traffic behavior, allowing investigators to trace the underlying distribution networks.
From a technical perspective, many of the targeted sites employed distributed hosting infrastructure, fast-flux DNS techniques, and content delivery obfuscation to evade detection and takedown efforts, indicating a level of operational sophistication typical of organized cybercriminal groups.
The crackdown extended beyond U.S. borders through coordinated international actions, facilitated by the International Computer Hacking and Intellectual Property (ICHIP) program.
Enforcement activities took place in multiple jurisdictions, including Peru and Bulgaria, both identified as piracy infrastructure hubs, as well as Croatia, Romania, Poland, and Colombia.
U.S. authorities shared intelligence leads to help foreign partners identify associated domains and backend servers. This multinational effort highlights the transnational nature of digital piracy networks and their connections to broader cybercrime ecosystems.
Officials noted that domain seizures usually redirect users to law enforcement notices, effectively disrupting traffic and dismantling revenue streams.
However, analysts caution that such operations often prompt threat actors to reconstitute using new domains and infrastructure rapidly. Therefore, continuous monitoring, DNS intelligence, and collaboration with registrars and hosting providers remain vital for sustaining disruption.
The DOJ reiterated its commitment to protecting intellectual property and reducing cybersecurity risks for consumers, especially during high-profile events like the World Cup. Authorities also urged users to use legitimate streaming platforms to avoid both legal consequences and cybersecurity threats associated with illicit services.
Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.
 has announced the seizure of nearly 400 internet domains used to stream FIFA World Cup 2026 matches illegally.){kind=link}