Malwarebytes Finds 40+ Fake World Cup Streaming Sites Pushing Malicious Ads
Summary
Malwarebytes says more than 40 lookalike World Cup streaming sites use malicious ad networks to trigger redirects, scams and possible malware downloads. The sites hijack clicks and load hidden ads; Malwarebytes recommends official streams and blocking ads.
Key points
- Malwarebytes identified more than 40 World Cup-themed sites using the same page template, code and advertising infrastructure.
- The sites promise free, HD streams, but their primary purpose is to generate ad clicks and impressions; streams may be absent or embedded from third-party piracy services.
- A script may use the visitor’s first click to open an ad, while the Play button can lead through deceptive prompts and additional ads.
- The pages load invisible ads and tracking scripts; associated ads may show fake warnings, bogus software updates, scams or crypto promotions.
- Malwarebytes warns that redirects and deceptive prompts can expose visitors to scams and possible malicious downloads.
- The article recommends using official broadcasters, closing sites that open pop-ups or extra tabs, avoiding downloads and keeping ad blocking and security software up to date.
Article Details
- Event Type
- Malicious advertising and scam campaign using fake World Cup streaming websites.
- Impact
- More than 40 nearly identical sites use deceptive clicks, pop-ups, redirects, and hidden ads to monetize visitors. The advertising network may expose visitors to fake warnings, bogus software-update prompts, scams, and malware-related downloads; the article does not report confirmed infections.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | arenaworldcupfootball[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | footballworldcup[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | freeworldcup[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | freeworldcupstream[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | freeworldcupstreaming[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | livestreamingworldcup[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | livestreamworldcup[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | liveworldcup[.]today | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | liveworldcup[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | liveworldcup2026[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | matchoraworldcup[.]world | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | sportivaworldcup[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | watchworldcup[.]watch | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | watchworldcup[.]world | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | watchworldcupfree[.]live | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | watchworldcupfree[.]online | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | watchworldcupfree[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcup2026match[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcuparena[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupfoootballmatch[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupfootball[.]live | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupfootballmat[.]live | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupfootbmatch[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupfreeonline[.]xyz | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcuplive[.]world | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcuplivestream[.]online | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupmatch[.]online | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupmatch[.]world | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupmatchlive[.]live | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
| DOMAIN | worldcupsoccer[.]live | Listed as a malicious World Cup-themed streaming site used to funnel visitors to malicious ads, redirects, scams, and possible malware downloads. |
Vendors
Products
Malwarebytes Browser GuardA tool like Malwarebytes Browser Guard can block the advertising and tracking domains these sites rely on, helping stop pop-ups and redirects before they load.Malwarebytes PremiumIf you do click something malicious, products like Malwarebytes Premium can block and remove malware before it causes damage.