Operation Offsides: Justice Seizes Digital Domains Targeting World Cup Streaming
The fight against digital piracy just got a global makeover. In a massive crackdown aimed at protecting intellectual property and viewer safety, the U.S. Department of Justice has announced the seizure of nearly 400 internet domains used to illegally stream live matches from the 2026 FIFA World Cup.
Dubbed Operation Offsides, this intensive effort is a collaboration between the National Intellectual Property Rights Coordination Center and Homeland Security Investigations. Authorities have filed seizure warrants in the Eastern District of Virginia, marking a significant escalation in how law enforcement tackles transnational online piracy.
The scope of the operation underscores the serious risks involved. The number of domains taken down to date is roughly five times the volume removed during the 2022 Qatar tournament alone. This vast takedown effort demonstrates a commitment to disrupting criminal networks that operate across multiple jurisdictions.
Because the 2026 tournament is co-hosted by the United States, Canada, and Mexico, U.S. authorities have stronger jurisdiction than they held during the previous event, allowing for a more coordinated international pursuit of these illegal activities.
Investigators traced the streaming infrastructure to servers scattered across continents, including locations in Peru and Bulgaria, with supporting takedowns also occurring in Croatia, Romania, Poland, and Colombia. This intricate web highlights the sophisticated, yet vulnerable, nature of modern digital crime.
The effort was supported by various stakeholders, including FIFA, beIN Media Group, the Motion Picture Association’s Alliance for Creativity and Entertainment, the UFC, and Warner Bros., all providing critical information to aid the investigation.
Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division emphasized that these seizures reflect the country’s duty to protect the World Cup from criminals. He noted that domain seizures are a limited tool against operations that constantly rotate addresses and rely on redundant copies, necessitating a mass approach.
But the threat goes far beyond simple copyright infringement. Analyses of illegal sports-streaming sites reveal a disturbing reality: 92% carried some form of malicious content, often delivered through ad networks funding the illicit operation. This exposure is not just about piracy; it’s about digital safety.
In fact, sophisticated tracking has shown that these sites pose significant security risks. Microsoft Threat Intelligence traced a deceptive advertising campaign in late 2024 that reached nearly one million devices. Redirectors embedded within video frames funneled users through multiple hops to information stealers like Lumma and Doenerium hosted on GitHub, capable of compromising both consumer and enterprise machines.
These infection chains are often insidious: a simple click on a play or unmute button can initiate the redirect chain, leading to data theft without requiring any download prompt or login credentials. Operation Offsides remains active, demonstrating that while legal frameworks evolve—with courts increasingly ruling that ISPs are not liable for user infringement—the hunt for digital criminals continues unabated.
Credit: Tom’s Hardware
