TunelineTuneline
All posts
Education·7 min

By Shamir

What Is Stalker Portal? A Plain-English Guide

Half of all IPTV subscriptions in the wild use Stalker portals, and almost none of them are explained anywhere accessible. You buy a sub, the reseller emails you a "portal URL" and a "MAC address," and you're expected to figure out what to do with that.

This post unpacks Stalker portals in plain English: what they are, where they came from, why they're tied to a MAC address, and how to use them in a player like Tuneline that actually supports them properly.

If you're already past the conceptual part and just want a player that handles Stalker without the usual setup pain, grab Tuneline — Stalker is a first-class playlist type alongside M3U and Xtream Codes.

Stalker, Briefly

Stalker is the middleware platform that originally shipped with MAG-series IPTV set-top boxes — the small Linux STBs sold by Infomir starting around 2012. The middleware was designed to deliver live channels, VOD, EPG, and a TV portal UI to those boxes from a centralized server.

The "portal" in "Stalker portal" is literally the URL of that middleware. The boxes hit the URL, the middleware authenticates the box by its MAC address, and serves it a JSON-driven channel list and stream URLs.

Two things made Stalker spread far beyond MAG hardware:

  1. The protocol was reverse-engineered. Software clients started emulating the MAG handshake, letting any device pretend to be a MAG box.
  2. Resellers liked it. MAC binding gave them a simple way to enforce one-device-per-subscription without the hassle of credential management.

Today most Stalker subs aren't sold to MAG box owners — they're sold to PC, phone, and TV users running Stalker-aware players.

The platform got rebranded to Ministra by Infomir around 2019. They're effectively the same thing for end users: same handshake, same MAC binding, mostly compatible.

What You Get From the Reseller

A Stalker subscription typically gives you four things:

  1. Portal URL. The middleware endpoint, usually shaped like http://portal.example.com:8080/c/ or http://portal.example.com:8080/stalker_portal/c/.
  2. MAC address. A simulated MAC like 00:1A:79:XX:XX:XX. This is the identity your "device" uses against the portal — even if no actual hardware has that MAC.
  3. Optional username/password. Some Stalker installations also require credentials on top of MAC binding. Most don't.
  4. Subscription window. Date range during which your MAC is authorized.

The MAC is the key. The portal cares about which device is connecting (identified by MAC), not who you are.

Why MAC Binding Is a Pain (And a Feature)

For the reseller: MAC binding is enforcement. One MAC = one device = one subscription. Easy to manage.

For you: it's a constraint. If you want to watch the same sub on your phone and your laptop, you need either two subscriptions or a player that can "spoof" the MAC. Most modern Stalker-aware players can present whatever MAC the user enters — Tuneline included.

In Tuneline, the Stalker setup form has a MAC field where you paste exactly what your reseller gave you. The player presents that MAC to the portal during the handshake. The portal authenticates as if you were the MAG box it was originally sold for.

Catch: most resellers' terms allow this on a single device at a time. If two devices try to authenticate with the same MAC simultaneously, the portal rejects the second one. So MAC sharing across multiple devices is fine in principle but enforces the same one-stream-at-a-time behavior the reseller wanted.

How to Use a Stalker Portal in Tuneline

Setup is the same friction as Xtream Codes:

  1. Install Tuneline for your platform.
  2. Click "Add Playlist" and pick "Stalker Portal" as the type.
  3. Fill in:
    • Portal URL (paste exactly what your reseller sent — include the trailing /c/ if it was given).
    • MAC Address (paste the MAC, with or without colons — Tuneline normalizes it).
    • Username/Password if your reseller requires them. Most don't.
  4. Save.

Tuneline performs the Stalker handshake (handshake → profile → channel list → genres → EPG), parses the JSON responses, and populates the sidebar. Within seconds you have channels grouped by genre, EPG-aware program info, and VOD/Series catalogs if your portal exposes them.

Why Most Players Are Bad At Stalker

Three reasons most IPTV players fail at Stalker even when their M3U / Xtream support is fine:

  1. Multi-step handshake. Stalker isn't one HTTP call. It's handshake → token → get_profile → get_genres → get_all_channels → repeat with token rotation. Players that don't implement the full sequence get partial data or fail entirely.
  2. Token refresh. The Stalker token expires periodically and has to be refreshed mid-session. Players that miss this start getting 403s after an hour and silently break.
  3. MAC handling quirks. Some portals are case-sensitive on the MAC, some require uppercase, some normalize automatically. A player that sends the MAC the wrong way gets rejected at handshake.

Tuneline's Stalker support handles all three — full handshake sequence, automatic token rotation, MAC normalization. We built it because half the early-access user surveys had Stalker subs they couldn't get working in their existing player.

Stalker vs Xtream vs M3U: Quick Mental Model

  • M3U: a flat text playlist. Easiest. Least metadata. (Setup guide.)
  • Xtream Codes: a structured JSON API. Live channels + VOD + Series + EPG, all categorized. Authenticated by username/password. (Login troubleshooting.)
  • Stalker / Ministra: a structured JSON API similar in spirit to Xtream but with the multi-step handshake and MAC binding. Often comes with VOD/Series catalogs.

Most providers offer two or three of these against the same backend. If your reseller only mentioned Stalker, ask if they have an Xtream alternative — it's often easier to set up. (Format comparison.)

What Tuneline Adds On Top of Stalker

  • Cross-device sync. Add the Stalker portal once on a laptop; sign in on your TV; the portal config is already there. Saves you re-pasting MAC addresses on a TV remote, which is a nightmare.
  • Token auto-refresh. Tuneline handles the token rotation invisibly. You don't see 403s, you don't have to restart the app.
  • MAC override. If your reseller issued a new MAC to clear a bind, paste the new one and Tuneline reconnects without a full re-import.
  • Catch-up support over Stalker. Stalker exposes catch-up via archive_get_url. Tuneline calls that endpoint when you click a past program in the EPG, and you get timeshifted playback. (Catch-up explained.)

FAQ

Do I need a MAG box to use Stalker?

No. The MAC address you use is virtual. Any Stalker-aware player on a regular phone, TV, laptop, or Android box authenticates the same way a MAG box would.

Is "Stalker" the same as "Ministra"?

Effectively yes for users. Ministra is the rebranded successor; the protocol is backward-compatible. If your reseller mentions either, the same setup works.

Will Stalker work on iOS / Apple TV?

Stalker is a network protocol, not an OS thing — it works wherever you have a Stalker-aware player. iOS native Tuneline is in submission to the App Store; until it's live, the practical iOS path is to use AirPlay from a Mac.

Why does my MAC address look like 00:1A:79:...?

00:1A:79 is Infomir's OUI — the MAC prefix registered to MAG hardware. Resellers issue addresses in this range to make the portal authentication look like it's coming from a real MAG box.

Can I share a Stalker subscription with family on different devices?

Technically yes — paste the same MAC into Tuneline on each device. Whether your provider allows simultaneous streams depends on their concurrent-connection limit. Most enforce one-stream-at-a-time at the portal level.

Stop fighting your Stalker subscription. Install Tuneline, paste the portal URL and MAC, and the handshake just works.

— Shamir