Security researcher identifies more than 40 World Cup-themed streaming sites that use football as bait to push scam ads, fake alerts, redirects, and other potentially malicious content.