Request Flow — What Happens When You Click a Match
[1] USER CLICKS MATCH
│
▼
[2] FRONTEND BUILDS REDIRECT URL
│ Pattern: https://xyz-{site}.{live_domain}/redirect.html?d={live_domain}&m={matchId}&lang=ar
│ Example: https://xyz-yallalives-net.roboora.online/redirect.html?d=roboora.online&m=31524&lang=ar
│
▼
[3] REDIRECTUS.NET TRACKING
│ The redirect domain (xyzyallalives-net.redirectus.net) logs the click
│ This is analytics/tracking, not content delivery
│
▼
[4] PLAYER PAGE LOADS
│ Real URL: https://roboora.online/kora.html?m=31524
│ Local URL: player.html?m=31524
│ The "m=" param is just the numeric match ID from the API database
│
▼
[5] PLAYER CALLS STREAMING API
│ GET https://ws.kora-api.top/api/matche/{matchId}/en?t={timestamp}
│ Returns: stream URLs, edge server list, match metadata
│
▼
[6] EDGE SERVER SELECTION
│ Player picks random edge from list:
│ https://a11.kora-plus.app/frame.php
│ https://a12.kora-plus.app/frame.php
│ https://a13.kora-plus.app/frame.php
│
▼
[7] HLS STREAM PLAYS
Clappr.js player loads the HLS stream from the edge server
The edge server proxies/streams the actual copyrighted content
Infrastructure Stack
Data Layer
cdn.kora-api.org — Match listings
ws.kora-api.top — Stream URLs
XOR encryption with exposed key
Frontend Layer
yallalives.net — Arabic UI
roboora.online — Player page
enerora.online — Alternate domain
Delivery Layer
a1-a13.kora-plus.app — Edge servers
redirectus.net — Click tracking
Clappr.js — HLS video player
Raw API Response Inspector
See exactly what the API returns before and after decryption.
RAW (Encrypted)
Click "Fetch" to see raw response...
DECRYPTED (JSON)
Decrypted data will appear here...
XOR Decryption Tool
Paste any encrypted response and decrypt it with the exposed key.
Decrypted result will appear here...
Match Data Inspector
Click any match above to inspect its full JSON data. All fields, images, logos, channel info — everything the API returns.