Football clubs have become prime targets for cybersquatters, but abusive domain names are no longer used merely to divert web traffic or exploit a club's reputation. Increasingly, they form part of a broader criminal infrastructure supporting phishing campaigns, counterfeit merchandise, fake ticket sales, fraudulent streaming platforms, cryptocurrency scams and other forms of online fraud. Drawing on an analysis of more than one hundred UDRP decisions involving football clubs from around the world, this article identifies the principal patterns of abuse, the domain name strategies adopted by cybersquatters, and the legal reasoning developed by UDRP panels. It highlights how attackers exploit supporters' trust by combining famous club names with terms relating to tickets, official stores, memberships, academies, streaming services or digital assets. Beyond the case law, the article argues that domain names have become a critical component of cybercrime ecosystems. It therefore examines the practical implications for brand owners and rights holders, emphasizing the importance of proactive domain name strategies, continuous monitoring and rapid enforcement mechanisms. The article concludes with practical recommendations to help football clubs and other rights holders strengthen their online brand protection in an increasingly complex digital environment.