▶ Live Player
01 Stream Source
The channel is delivered as an HLS stream from a Cloudflare-fronted media server.
https://games1.elahmad.store/tv13_www_elahmad._lb2/index.m3u8?token=7a4d43792b008bff71b40eac190ae4f0ce1d7f91-afbd1f21eedaf1f8ceef8c75771ed4e4-1788192661-1788190861
02 Player Analysis
The page embeds a switchable multi-player. The default is the commercial RadiantMP HTML5 player. Several alternative players can be selected via the in-page player dropdown.
.m3u8 URL plays directly in any HLS-capable app
(VLC, mpv, ffplay, browser <video>).
03 Stream Specification
Master Playlist
# Top-level playlist pointing to a single rendition #EXTM3U #EXT-X-STREAM-INF:AVERAGE-BANDWIDTH=1160000,BANDWIDTH=1450000, RESOLUTION=1024x576,FRAME-RATE=25.000, CODECS="avc1.640029,mp4a.40.2" tracks-v1a1/mono.m3u8?token=...
Media Playlist (segments)
# Live, rolling TS segments with token appended to each
#EXTM3U
#EXT-X-TARGETDURATION:6
#EXT-X-VERSION:3
#EXT-X-MEDIA-SEQUENCE:360282
#EXT-X-PROGRAM-DATE-TIME:2026-08-31T14:00:44Z
#EXTINF:6.000,
2026/08/31/14/00/44-06000.ts?token=...
#EXTINF:2.000,
2026/08/31/14/00/50-02000.ts?token=...
04 URL Protection Scheme
The stream URL is protected by two layers plus several anti-abuse measures:
| Layer | Mechanism | Purpose |
|---|---|---|
| 1 — Encryption | AES-256-CBC + PKCS#7 padding |
Obscures the raw URL until decrypted client-side via crypto-js |
| 2 — Token | token=... query param on every .m3u8/.ts request |
Time-limited (~30 min); must refresh by re-running the extraction |
| 3 — CSRF | csrf_token required in the POST body |
Must extract from the <meta name="csrf-token"> tag |
| 4 — Referrer | Checks the Referer header (elahmad.ru) |
Only allows requests that appear to come from the site |
| 5 — Ad-block guard | Injects ads.vidoomy.com SDK; shows overlay if blocked |
Anti ad-blocker / monetisation |
my_crypt_new) uses
AES-256-CBC with a 32-byte hex key and 16-byte hex IV, Base64 ciphertext,
and PKCS#7 padding — the same scheme we replicate in the recipe below.
05 How to Extract a Fresh URL
Replicate this 4-step recipe whenever you need a fresh, non-expired stream URL:
-
Get the page & CSRF token
GET https://www.elahmad.ru/tv/mobiletv/glarb.php?id=lb2.
Read thecontentof the<meta name="csrf-token">tag. -
POST to the result endpoint
POST https://www.elahmad.ru/tv/result/embed_result_elahmad_81.php Content-Type: application/x-www-form-urlencoded Referer: https://www.elahmad.ru/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... id=lb2&csrf_token=<token-from-step-1>
-
Parse the JSON response
{ "link_4": "<base64 ciphertext>", "key": "<32-byte hex key>", "iv": "<16-byte hex iv>" } -
Decrypt with AES-256-CBC / PKCS#7
ciphertext = base64decode(link_4) key = bytes.fromhex(key) # 32 bytes -> AES-256 iv = bytes.fromhex(iv) # 16 bytes plaintext = AES_CBC_decrypt(ciphertext, key, iv) url = unpad_pkcs7(plaintext)
.m3u8 stream URL — ready to play.
06 How to Stream / View It
Drop the decrypted .m3u8 URL into any HLS-capable player:
Option A — VLC
Media > Open Network Stream → paste the .m3u8 URL → Play
Option B — mpv
mpv "<m3u8-url>"
Option C — ffplay (with referer header)
ffplay -referer "https://www.elahmad.ru/" -i "<m3u8-url>"
Option D — Record to file (ffmpeg)
ffmpeg -referer "https://www.elahmad.ru/" -i "<m3u8-url>" -c copy /tmp/lb2-tv.ts
07 Executive Summary
LBC (LB2) is a Lebanese live TV channel served as
HLS (1024×576, H.264 + AAC) from
games1.elahmad.store through
Cloudflare. The embedding site uses
RadiantMP as its default player. The stream URL is protected
by AES-256-CBC encryption plus a
time-limited token. No special player is needed — simply
decrypt the URL (section 05) and play it in VLC / mpv / ffplay / ffmpeg.