Threat intelligence platform Silent Push combines the essence of these tools into a graphical interface that does much more than the sum of its parts. Historical data, for example, allows connections to be built in cases where evidence no longer exists on the ‘live’ web. Straightforward tasks such as WHOIS lookups, on the other hand, only rarely look this good.
According to Silent Push researchers (SPR), the platform makes it easy to “map out the entire infrastructure supporting IPTV networks” by “combining just a few technical fingerprints.” The results of an investigation published today claim to identify a major IPTV network and an individual the researchers claim is closely involved.
A Domain Name Gets Things Rolling
SPR say their investigation began with a domain name – premiumplustv[.]xyz – which had been reported as hosting pirated content. Using the Silent Push Web Scanner they were then able to connect the service to 10,000 IP addresses and 1,100 domains, with one standing out in particular.
“The xuione[.]com website, seen below, is a massive IPTV provider that appears to support numerous pirated content schemes – confirming the initial suspicions of our research partner,” SPR write.
SPR Identify an Individual With Close Links to the Network
SPR’s investigation led them to identify an individual that they believe is closely linked to the pirate IPTV network, who is also the “likely” operator of the pirate IPTV service at jvtvlive[.]xyz.
That service allegedly exploits content from the world’s leading entertainment and sports brands including Prime Video, Bein Sports, Disney Plus, NPO Plus, Formula 1, HBO, Viaplay, Videoland, Discovery Channel, Ziggo Sports, Netflix, Apple TV, Hulu, NBA, RMC Sport, Premier League, Champions League, Sky Sports, NHL, WWE, and UFC.
While that individual may indeed be everything SPR say he is, an OPSEC note accompanying the investigation notes that the methods used by the team to enumerate the piracy network, and the process used to identify the individual “cannot be shared publicly.”
We have no reason to doubt their findings, but there’s no replacement for seeing the evidence first hand.
SPR were able to link the domain xuione[.]com to an IP address – 158.220.114[.]199 – used by many apparent IPTV-linked services [here] including streamxpert[.]net, and jvtvlive[.]xyz.
Update: SPR ultimately identified an individual and were “comfortable assessing his involvement” in the pirate network’s operations. However, as the series of updates below suggest, not everything is straightforward and sometimes the level of proof required falls short of 100%.
_____________________________________________
Update: The individual mentioned in the original Silent Push report (who TorrentFreak did not name at any point) reached out to us November 11 with the statement below. After subsequent correspondence with Silent Push, the individual informed us that Silent Push had removed all references to both him and his company from their reporting. Since the individual’s comment to us contains their company name, we have redacted those details from the comment below and anywhere else it may have been mentioned, since we are now unable to cite a live source for that information.
_____________________________________________
Update: November 11, 2025 – Statement from Individual Mentioned By Silent Push
“[Redacted] is a small web-hosting provider. We offer shared hosting services for clients through our public website where anyone can register and purchase low-cost hosting packages. Like many hosting companies, we do not control or monitor customer-uploaded content beyond standard abuse and compliance procedures. We are in no way involved in, nor do we support, any piracy or illegal streaming activities.”
_____________________________________________
Update: December 8, 2025 – Statement from SilentPush “The individual previously mentioned as connected to the network infrastructure referenced [in our original] report reached out to us to confirm that neither they nor their company had any involvement in IPTV activities. At the individual’s request, and as they have denied knowledge of, or direct participation in, the copyright infringement outlined [in our report], we have removed all references to them in [our report].”
Food For Thought
Exactly what additional evidence was obtained by the researchers is unknown, but we assume that it’s pretty compelling after naming the individual in public. It also seems reasonable to assume that information has been shared with anti-piracy companies and other interested parties in advance.
If not, publication of the research is a pretty loud ‘headsup’ for those involved. Yet, as far as we know, the service remains active.
Silent Push (Community Edition) is available for free here (pdf). The investigation report is available here
