A $15/Month Piracy Empire: New Report Exposes a Global IPTV Network

Silent Push Threat Analysts have uncovered a sprawling IPTV-based piracy network that has quietly operated for years, affecting over 20 major media brands worldwide and involving more than 10,000 IP addresses and 1,100 domains. The investigation ties the operation to two companies—XuiOne and Tiyansoft—and at least one individual: Nabi Neamati, reportedly based in Herat, Afghanistan, who allegedly manages IPTV sites and owns Tiyansoft. One site, JVTVlive, boasts of “2,000 servers in 198 countries,” a claim Silent Push analysts assessed as accurate based on their infrastructure mapping.

The network engages in illegal restreaming of licensed channels and subscription fraud, with promotional material advertising “$15/month for 22,500 channels and 100,000 Movies & TV Shows.” Infrastructure analysis links the operation to domains such as xuione[.]com, jvtvlive[.]xyz, and tiyanhost[.]com, all on overlapping IP ranges, with xuione[.]com initially listing Herat registration data before swapping to a generic U.S. address in 2025. Silent Push notes that much of the network’s content is unlicensed, though verification requires responses from the affected brands.