With the FIFA World Cup being partially hosted by the United States, the chance of a U.S.-led pirate domain seizure round was significant.
In 2022, the U.S. government already carried out a similar World Cup-themed enforcement action, which was repeated yesterday at roughly five times the scale.
The Department of Justice announced that it had seized nearly 400 domains that were used to illegally stream the 2026 FIFA World Cup. The action, branded “Operation Offsides 2026”, was led by the National Intellectual Property Rights Coordination Center with HSI Washington and the Computer Crime and Intellectual Property Section.
“We have seized hundreds of domains, used to illegally stream World Cup matches for profit, to disrupt the international networks that profit from the global popularity of the World Cup,” said Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division.
Seizures with Broad Support
This is far from an isolated action. The DOJ credits FIFA as the lead rightsholder, with supporting information from beIN Media Group, NBCUniversal, the MPA’s Alliance for Creativity and Entertainment, the Ultimate Fighting Championship, and Warner Bros.
The seizure banner, shown below, also reveals support from a variety of foreign organizations and authorities, including Europol, City of London Police, Ecuador’s SENADI, Argentina’s Ministerio Público Fiscal, the NCFTA, as well as anti-piracy outfit FriendMTS.
The seizure banner
In addition to the domain seizures, international coordination through the ICHIP network also targeted pirate streaming services in various other countries.
“Servers and domains linked to illegal streaming of World Cup games were targeted in Peru and Bulgaria, two known centers of online piracy activity. Additional ICHIP-supported disruptions took place in Croatia, Romania, Poland and Colombia,” the press release states.
Tracing the Seized Domains
The DOJ released no list of seized domain names. However, DNS data shows that dozens of new domain names have added seizedservers.com nameservers in the past 24 hours. These nameservers are used in the U.S. government’s seizure actions for well over a decade.
The domains we traced include kooora365.com, kora-shoot.com, bein-match-worldcup.com, beinmatchtv.com, rojadirectastv.org, pelotalibrehd.org, futbollibreusa.com, viper-play.org, and redditsoccerstreams.name. A non-verified and non-exhaustive list of domains can be found below.
These domains all use popular brands, either from beIN as a broadcaster, or popular pirate brands such as rojadirecta and futbollibre. That doesn’t necessarily mean that these domain names were popular, as most appear to be copycats.
For example, the seizure action targeted futbollibreonline.com, which had just over 166,000 visits last month, while futbol-libre.su remains online with more than 73 million monthly visits. A likely explanation is that domains operated by foreign registries, such as the Russian-operated .su, typically don’t fall under U.S. jurisdiction.
The seized domain names we identified all use .com, .name, and .org domains, which are maintained by the American organizations Verisign and the Public Interest Registry. The affidavit from the first Operation Offsides targeted both registries and registrars.
A Fitness Blog and a CBD Site
At first glance, the list of seized domains includes several unusual targets. fitforcedaily.com, for example, was a site that presented itself as a fitness blog with articles on insulin sensitivity, strength training, and pregnancy workouts. But there was more going on under the hood, as the domain’s main referral traffic came from a Rojadirecta site.
Several other entries in the slice appear to be expired and reused domains. Freedomgloryproject.com was originally an Iranian-American music activism site, last updated in 2015. Gonutradeal.com hosted CBD wellness content as recently as 2023. Interoutemediaservices.com matches the brand of a European telecom, Interoute, acquired by GTT Communications in 2018 and retired shortly after.
This is not as unusual as it seems, as pirate site clone operators often buy lapsed domains to leverage their existing search-engine credibility.
Since the news broke hours ago, it is possible that the seizure actions are ongoing, so more domains, including different gTLDs, may be added as well. We will update this article if new information becomes available.
—
The DOJ press release for Operation Offsides 2026 is available here. The seizure warrant and affidavit, filed in the Eastern District of Virginia, were not immediately available to us on PACER.
A list of several domain names that added seizedservers nameservers in the past 48 hours is available below. These are traced by TorrentFreak, not confirmed by the authorities.
viper-play.org surfg.org rojadirectastv.org pelotalibrestv.org pelotalibrehd.org pelota-libretv.org kora-yalla.org kevinsport.org futbollibrehd.org futbol-libres.org kora999live.com kora999.com kora999-live.com kora48.com kora360-tv.com kora360-lives.com kora360-live.com kora1lives.com kora-show.com kora-shoot.com kora-onlineone.com kora-online24.com kora-live4k.com kora-gol.com kora-city.com kora-999.com koorati.com koorallive24.com kooraliveworldcup.com kooralive69.com kooralite.com kooragol-live.com kooragoal24.com kooraa4live.com koora4livehd.com koora48.com koora1live.com koora-tv.com koora-live-live.com koooraa4live.com kooora4livetv.com kooora365.com kooora-sport.com kooora-sia.com kooora-mobashir.com kevinsport.com interoutemediaservices.com hdlive7.com hd7-new.com hayasport.com gosporttv.com gonutradeal.com golygoal.com gollibre.com golkoora.com goheali.com goalkora.com go4koraa.com go4kora.com fuutbollibre.com futbollibreusa.com futbollibreonline.com futbollibre-tv.com futbollibre-hd.com fullmatch-hd.com freekora.com freedomgloryproject.com fotytv.com flixmv.com fitforcedaily.com ekoralive.com egynoww.com deportelibretv.com deportelibree.com defendersportstreams.com crichdbest.com childluresprevention.com cagesharkdive.com bolasrolando.com beinmatsh.com beinmatchtv.com beinmatch26.com bein4kora.com bein-mattch.com bein-match.com bein-match-worldcup.com bein-live.com beiin-match.com alwansport.com alkooralive.com akora-live.com ahsa-news.com 808ball13.com 360koratv.com 360kora.com 360koora-live.com 360kkora.com 1kora.com 11kora.com redditsoccerstreams.name
Instagram Engineering
Shopify Engineering