Untitled


SUBMITTED BY: Vandersonn

DATE: Aug. 28, 2024, 1:38 p.m.

UPDATED: Oct. 8, 2024, 7:42 p.m.

FORMAT: Text only

SIZE: 77.1 kB

HITS: 126

  1. {
  2. "Version": 771,
  3. "PainelConecta5G": false,
  4. "ReleaseNotes": false,
  5. "UrlUpdate": "https://bitbin.it/8O7kdhJs/raw/",
  6. "Sms": "https://painelconecta5g.com/update/pasta_LINKSSH5G/sms",
  7. "logoonline": false,
  8. "fundoonline": false,
  9. "fundoDoLogOnline": false,
  10. "EmailFeedback": "",
  11. "UrlContato": "",
  12. "UrlTermos": "",
  13. "CheckUser": "",
  14. "ModderLinkWhatsapp": false,
  15. "ModderLinkTelegram": false,
  16. "ModderCorCaixaServ": false,
  17. "ModderCorCaixaPay": false,
  18. "ModderCorCaixaCentral": false,
  19. "ModderCorCaixaConexao": false,
  20. "ModderCorCaixaUsuario": false,
  21. "ModderCorCaixaSenha": false,
  22. "ModderCorBotaoIniciar": false,
  23. "ModderCorBotaoLog": false,
  24. "ModderCorBotaoConfig": false,
  25. "Udp": [
  26. {
  27. "Porta": "7300"
  28. }
  29. ],
  30. "Servers": [
  31. {
  32. "Name": "Atualização: 28/08/2024",
  33. "TYPE": "premium",
  34. "FLAG": "br.png",
  35. "ServerIP": "br01.linkssh.space",
  36. "CheckUser": "http://painel.linkssh.cloud/checkuser/conecta4g.php",
  37. "ServerPort": "80",
  38. "SSLPort": "443",
  39. "USER": "",
  40. "PASS": ""
  41. }
  42. ],
  43. "Networks": [
  44. {
  45. "Name": "♻️ CONEXÃO VIVO",
  46. "FLAG": "vivo",
  47. "Payload": "",
  48. "SNI": "",
  49. "TlsIP": "",
  50. "ProxyIP": "",
  51. "ProxyPort": "",
  52. "Info": ""
  53. },
  54. {
  55. "Name": "VIVO DADOS",
  56. "FLAG": "vivo",
  57. "Payload": "[split][delay_split]ACL / /\\n#HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]#PUT / Cache-Control: private: Web-security[crlf]@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@ACL / HTTP/1.1[crlf][crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: ff.garena.com[lf]\r\n[15/03, 17:00]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@HTTP/1.1[lf]Host: [rotate=foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com][lf]Upgrade: Websocket[lf][split][lf]#HTTP/1.1 200[crlf]Host: vimeo.com[crlf][crlf][netData][crlf]@mip [crlf][crlf]http://uber.com/ HTTP/1.1 200[crlf]mip[crlf][crlf] [crlf][crlf]http://udemy.com/ HTTP/1.1 200[crlf]Host@mip[crlf][crlf] [crlf][crlf] http://aliyuncs.com/ HTTP/1.1 200[crlf]Host fastly.net/[crlf][crlf][netData][crlf] [crlf][crlf] http://pornhub.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf] http://google.com/ HTTP/1.1[cr][lf] [crlf][crlf][netData][cr][lf] [crlf][crlf]CONNECT mip:22@http://youtube.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf]",
  58. "SNI": "portalrecarga.vivo.com.br",
  59. "TlsIP": "br01.linkssh.space",
  60. "ProxyIP": "br01.linkssh.space",
  61. "ProxyPort": "80",
  62. "Info": "Proxy"
  63. },
  64. {
  65. "Name": "VIVO CDN [1]",
  66. "FLAG": "vivo",
  67. "Payload": "GET / HTTP/1.1[crlf]Host:cliente1.sslpro.shop[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  68. "SNI": "",
  69. "TlsIP": "recarga.vivo.com.br",
  70. "ProxyIP": "recarga.vivo.com.br",
  71. "ProxyPort": "80",
  72. "Info": "Proxy"
  73. },
  74. {
  75. "Name": "VIVO CDN [2]",
  76. "FLAG": "vivo",
  77. "Payload": "PATCH / HTTP/1.1[lf]Host: cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]@@HEAD / HTTP/1.1[lf]Host: cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  78. "SNI": "",
  79. "TlsIP": "108.139.182.100",
  80. "ProxyIP": "108.139.182.100",
  81. "ProxyPort": "80",
  82. "Info": "Proxy"
  83. },
  84. {
  85. "Name": "VIVO CDN [3]",
  86. "FLAG": "vivo",
  87. "Payload": "PATCH / HTTP/1.1[lf]Host:cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  88. "SNI": "",
  89. "TlsIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87",
  90. "ProxyIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87",
  91. "ProxyPort": "80",
  92. "Info": "Proxy"
  93. },
  94. {
  95. "Name": "VIVO FLARE [4]",
  96. "FLAG": "vivo",
  97. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL / HTTP/1.1[crlf]Host: cdn.brandmetrics.com[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]TMYSSH[crlf][crlf]",
  98. "SNI": "",
  99. "TlsIP": "172.64.155.199#104.18.32.57",
  100. "ProxyIP": "172.64.155.199#104.18.32.57",
  101. "ProxyPort": "80",
  102. "Info": "Proxy"
  103. },
  104. {
  105. "Name": "VIVO [5]",
  106. "FLAG": "vivo",
  107. "Payload": "[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  108. "SNI": "",
  109. "TlsIP": "br01.linkssh.space",
  110. "ProxyIP": "br01.linkssh.space",
  111. "ProxyPort": "80",
  112. "Info": "Direct"
  113. },
  114. {
  115. "Name": "VIVO [6]",
  116. "FLAG": "vivo",
  117. "Payload": "[delay_split][lf]ACL / TCP/ HTTP2 /1.9 delay-split\r\nGateway-HTTP/2.0[crlf]Host:[random=d2otuevvauu0xn.cloudfront.net;d222nk4e4zrn11.cloudfront.net;d1hu588lul0tna.cloudfront.net]",
  118. "SNI": "",
  119. "TlsIP": "br01.linkssh.space",
  120. "ProxyIP": "br01.linkssh.space",
  121. "ProxyPort": "80",
  122. "Info": "Proxy"
  123. },
  124. {
  125. "Name": "VIVO [7]",
  126. "FLAG": "vivo",
  127. "Payload": "[delay_split][lf]ACL /HTTP / http://d1vxorl6kzpw89.cloudfront.net;rotate=177.8.170.122;201.13.147.161;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=201.20.79.182;143.137.116.72;177.30.47.57;1.0.0.5;45.6.101.97;168.232.213.9[crlf]",
  128. "SNI": "",
  129. "TlsIP": "br01.linkssh.space",
  130. "ProxyIP": "br01.linkssh.space",
  131. "ProxyPort": "80",
  132. "Info": "Proxy"
  133. },
  134. {
  135. "Name": "VIVO [8]",
  136. "FLAG": "vivo",
  137. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
  138. "SNI": "",
  139. "TlsIP": "br01.linkssh.space",
  140. "ProxyIP": "br01.linkssh.space",
  141. "ProxyPort": "80",
  142. "Info": "Proxy"
  143. },
  144. {
  145. "Name": "VIVO [9]",
  146. "FLAG": "vivo",
  147. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
  148. "SNI": "",
  149. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  150. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  151. "ProxyPort": "80",
  152. "Info": "Proxy"
  153. },
  154. {
  155. "Name": "VIVO [10]",
  156. "FLAG": "vivo",
  157. "Payload": "[delay_split]GET http://m.clarosync.com/ HTTP/1.1 Host: http://m.clarosync.com/\r\nUser-Agent: Yes\r\nConnection: close\r\nProxy-Connection: Keep-Alive\r\n[crlf][crlf][netData][crlf] [crlf][crlf]",
  158. "SNI": "",
  159. "TlsIP": "br01.linkssh.space",
  160. "ProxyIP": "br01.linkssh.space",
  161. "ProxyPort": "80",
  162. "Info": "Proxy"
  163. },
  164. {
  165. "Name": "VIVO SECURITY [1]",
  166. "FLAG": "vivo",
  167. "Payload": "[delay_split][rotate=HEAD;GET;UPDATE;ACL;BDELETE;BMOVE;BPROPFIND;LOCK;MERGE;MKCOL;MOVE;NOTIFY;ORDERPATCH;PATCH;POLL;PROPFIND;SEARCH;SUBSCRIBE;UNSUBSCRIBE;UNLOCK] / HTTP /1.2 Host: [random=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;soilelementhitdrawsit.org;atrytgoi.com;domoneysincemeanquart.org;fontbit.io;teethlistentrainwhosheet.org;vivoturbo.com.br;label.com.co.il.web.whatsapp.com;vivofibra.com.br;unpkg.com;storema.us][lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf][lf]",
  168. "SNI": "",
  169. "TlsIP": "br01.linkssh.space",
  170. "ProxyIP": "br01.linkssh.space",
  171. "ProxyPort": "80",
  172. "Info": "Proxy"
  173. },
  174. {
  175. "Name": "VIVO SECURITY [2]",
  176. "FLAG": "vivo",
  177. "Payload": "[delay_split][rotate=HEAD;GET;UPDATE;ACL;BDELETE;BMOVE;BPROPFIND;LOCK;MERGE;MKCOL;MOVE;NOTIFY;ORDERPATCH;PATCH;POLL;PROPFIND;SEARCH;SUBSCRIBE;UNSUBSCRIBE;UNLOCK] / HTTP /1.2 Host: [random=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;soilelementhitdrawsit.org;atrytgoi.com;domoneysincemeanquart.org;fontbit.io;teethlistentrainwhosheet.org;vivoturbo.com.br;label.com.co.il.web.whatsapp.com;vivofibra.com.br;unpkg.com;storema.us][lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf][lf]",
  178. "SNI": "",
  179. "TlsIP": "br01.linkssh.space",
  180. "ProxyIP": "br01.linkssh.space",
  181. "ProxyPort": "80",
  182. "Info": "Proxy"
  183. },
  184. {
  185. "Name": "VIVO SECURITY [3]",
  186. "FLAG": "vivo",
  187. "Payload": "[delay_split][lf]ACL / HTTP/1.2[lf]Host: [random=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;soilelementhitdrawsit.org;atrytgoi.com;domoneysincemeanquart.org;fontbit.io;teethlistentrainwhosheet.org;vivoturbo.com.br;label.com.co.il.web.whatsapp.com;vivofibra.com.br;unpkg.com;storema.us][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\\\\\\\\\\\\\\\n\\\\\\\\\\\\\\\\n\\\\\\\\\\\\\\\\n \\\\\\\\\\\\\\\\n@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@@[delay_split]ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]",
  188. "SNI": "",
  189. "TlsIP": "br01.linkssh.space",
  190. "ProxyIP": "br01.linkssh.space",
  191. "ProxyPort": "80",
  192. "Info": "Proxy"
  193. },
  194. {
  195. "Name": "VIVO SECURITY [4]",
  196. "FLAG": "vivo",
  197. "Payload": "[split][lf]ACL / HTTP/1.1[crlf]Host: vigia.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]",
  198. "SNI": "",
  199. "TlsIP": "br01.linkssh.space",
  200. "ProxyIP": "br01.linkssh.space",
  201. "ProxyPort": "80",
  202. "Info": "Proxy"
  203. },
  204. {
  205. "Name": "VIVO SECURITY [5]",
  206. "FLAG": "vivo",
  207. "Payload": "CONNECT tibr-sdgw.datami.net:22 [protocol][crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]#ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]@@@ACL HTTP/1.1 Host: plus.google.com \\\\r\\\\n \\\\r\\\\n@@@MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: [host][crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)tlcomputingbr[crlf]Referer: http://www.google.com[crlf]#[protocol][crlf] [crlf][crlf]@@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@HTTP/1.1[crlf] [crlf][crlf]•@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: foda-se-o-governo[lf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@HTTP/ [crlf][crlf]|[crlf]#PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@[protocol][crlf] [crlf][crlf]@@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@HTTP/ 2\\\\nHOST : m.opera.com\\\\n\\\\@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: r03.spine101.lax01.fab.netarch.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]@@@[protocol] \\\\n\\\\n/@@@POST HTTP/1.1[crlf]Host:www.waze.com[crlf][crlf]@@@\\\\r[split][raw] ACL HTTP/1.1\\\\n \\\\n [host][auth][ua] POLL@@@PUT / Cache-Control: private: Web-security[crlf]@@@\\\\n\\\\r[split][raw][crlf] POLL HTTP/1.0\\\\n\\\\n[host_port][ua][auth][crlf]POLL@@@ACL / HTTP/1.1[crlf][crlf]@@@PUT / Cache-Control: private: Web-security[crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@[delay_split][raw]@@@UPDATE HTTP/1.200\\nHost: aol.com/Connection: Keep-AliveContent- GET https://translate.google.com.br/?hl=pt-BR/ HTTP ?Connection: Keep-Alive: 23.97.96.93/ ¿ HTTP/1.1/api/v1/user/registerAnonymous[lf]@@@[delay_split]GET /HTTP 1.2#[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br[lf]@@@CONNECT 127.0.0.1:80[instant_split]GET www.veek.com.br HTTP/1.1[crlf][crlf]@@@[split][crlf]GET / HTTP/1.1[crlf]Host: SEUDOMÍNIOFRONT/ARGILE[crlf]Connection: Upgrade[crlf]User-Agent: Telegram:interflashplus http://portalrecarga.vivo.com.br;127.0.0:80;8.8.8.8:8.8.4.4:22[ua][crlf]Upgrade: websocket[crlf][crlf]@@@DELETE / HTTP/1.1[crlf]Host: [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]X-Forwarded-For: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split]PATCH http://portal.vivo.com.br/ HTTP/1.1[crlf]Host: portal.vivo.com.br[crlf][crlf]",
  208. "SNI": "",
  209. "TlsIP": "br01.linkssh.space",
  210. "ProxyIP": "br01.linkssh.space",
  211. "ProxyPort": "80",
  212. "Info": "Proxy"
  213. },
  214. {
  215. "Name": "VIVO SECYRITY [6]",
  216. "FLAG": "vivo",
  217. "Payload": "[rotate=ACL;BDELETE;BMOVE;BPROPFIND;LOCK;MERGE;MKCOL;MOVE;NOTIFY;ORDERPATCH;PATCH;POLL;PROPFIND;SEARCH;SUBSCRIBE;UNSUBSCRIBE;UNLOCK;UPDATE] HTTP/1.1[crlf]Host: [rotate=www.atresplayer.com;www.aol.com;google.com;appengine.google.com;bdn.dev;origin-test.bdn.dev;cloud.google.com;crowdsource.google.com;datacompute.google.com;googleadapis.com;googleapis.cn;googlevideo.com;gstatic.cn;gstatic-cn.com;googlecnapps.cn;googlecnapps.cn;googleapps-cn.com;googleapps-cn.com;gkecnapps.cn;gkecnapps.cn;googledownloads.cn;googledownloads.cn;recaptcha.net.cn;recaptcha.net.cn;recaptcha-cn.net;recaptcha-cn.net;widevine.cn;ampproject.org.cn;ampproject.org.cn;ampproject.net.cn;ampproject.net.cn;google-analytics-cn.com;google-analytics-cn.com;googleadservices-cn.com;googleadservices-cn.com;googlevads-cn.com;googlevads-cn.com;googleapis-cn.com;googleapis-cn.com;googleoptimize-cn.com;googleoptimize-cn.com;doubleclick-cn.net;doubleclick-cn.net;fls.doubleclick-cn.net;g.doubleclick-cn.net;doubleclick.cn;doubleclick.cn;fls.doubleclick.cn;g.doubleclick.cn;dartsearch-cn.net;dartsearch-cn.net;googletraveladservices-cn.com;googletraveladservices-cn.com;googletagservices-cn.com;googletagservices-cn.com;googletagmanager-cn.com;googletagmanager-cn.com;googlesyndication-cn.com;googlesyndication-cn.com;safeframe.googlesyndication-cn.com;app-measurement-cn.com;app-measurement-cn.com;gvt1-cn.com;gvt1-cn.com;gvt2-cn.com;gvt2-cn.com;2mdn-cn.net;googleflights-cn.net;googleflights-cn.net;admob-cn.com;admob-cn.com;googlesandbox-cn.com;googlesandbox-cn.com;safenup.googlesandbox-cn.com;gstatic.com;metric.gstatic.com;gvt1.com;gcpcdn.gvt1.com;gvt2.com;gcp.gvt2.com;url.google.com;youtube-nocookie.com;ytimg.com;android.com;flash.andro;g.cn;g.co;www.goo.gl;google-analytics.com;google-analytics.com;google.com;googlecommerce.com;ggpht.cn;urchin.com;youtu.be;youtube.com;youtubeeducation.com;youtubekids.com;yt.be;android.clients.google.com;developer.android.google.cn;developers.android.google.cn;source.android.google.cn;m.youtube.com;wap.yy.com;net.supercell.com;www.disney.com;www.bbc.com;www.godaddy.com;adclick.g.doubleclick.net;www.buzzfeed.com;www.alipay.com;www.monster.com;www.playstation.net;mail.hotmail.com;ads.mopub.com;m.weibo.cn;www.flickr.com;d1n212ccp6ldpw.cloudfront.net;www.ebay.com;api-oyon.viu.com;download.cdn.viber.com;www.palcomp3.com;www.line.me;www.xvideos.com;www.nba.com;www.samsung.com;vivo.com;vivo.com.br;www.sina.com;www.cnn.com;www.youtube.com;www.bradesco.com.br;www.spotify.com;www.netflix.com;www.apple.com;www.skype.com;www.mercadolivre.com.br;ideas.mercadolibre.com;www.tidal.com;wn.qq.com;www.akamaized.net;www.iflix.com.br;www.myspace.com;www.opera.com;www.xbox.com;www.amazon.com;www.soundcloud.com;opera-mini.net;www.deezer.com;www.olx.com.br;www.wechat.com;googleads.g.;itunes.com;www.terra.com;mail.google.com;www.pinterest.com;www.blackberry.com;www.operamini.com;www.uber.com;www.wikipedia.com;www.utorrent.com;www.msn.com;www.googlesyndication.com;m.mobilelegends.com;www.badoo.com;www.tripadvisor.com.br;www.kik.com;www.movistar.co;www.cabify.com;www.bing.com;www.crashlytics.com;www.hooq.tv;cdn.ml.youngjoygame.com;www.reddit.com;imgur.com;adash.man.aliyuncs.com;www.sky.com.br;mtalk.google.com;twitter.com;t.co;www.google.com;ff.garena.com;googleads.g.doubleclick.net;e.crashlytics.com ;get.adobe.com;www.movistar.com;m.waze.com][crlf] [crlf][crlf] [crlf]",
  218. "SNI": "",
  219. "TlsIP": "br01.linkssh.space",
  220. "ProxyIP": "br01.linkssh.space",
  221. "ProxyPort": "80",
  222. "Info": "Proxy"
  223. },
  224. {
  225. "Name": "VIVO SECURITY [7]",
  226. "FLAG": "vivo",
  227. "Payload": "[delay_split][rotate=HEAD;GET;UPDATE;ACL;BDELETE;BMOVE;BPROPFIND;LOCK;MERGE;MKCOL;MOVE;NOTIFY;ORDERPATCH;PATCH;POLL;PROPFIND;SEARCH;SUBSCRIBE;UNSUBSCRIBE;UNLOCK] / HTTP /1.2 Host: [random=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;soilelementhitdrawsit.org;atrytgoi.com;domoneysincemeanquart.org;fontbit.io;teethlistentrainwhosheet.org;vivoturbo.com.br;label.com.co.il.web.whatsapp.com;vivofibra.com.br;unpkg.com;storema.us][lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf][lf]",
  228. "SNI": "",
  229. "TlsIP": "br01.linkssh.space",
  230. "ProxyIP": "br01.linkssh.space",
  231. "ProxyPort": "80",
  232. "Info": "Proxy"
  233. },
  234. {
  235. "Name": "UNIVERSAL CDN [1]",
  236. "FLAG": "vivo",
  237. "Payload": "[delay_split][crlf][rotate=PATCH;GET;HEAD] wss://[rotate=cliente1.sslpro.shop;linkssh.space]/ HTTP/1.0[crlf]Host: [rotate=static.whatsapp.com;m.waze.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Upgrade: Websocket[crlf]Proxy-Connection: Keep-Alive; Upgrade[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]@TSTOPSPEED[crlf][crlf]",
  238. "SNI": "",
  239. "TlsIP": "br01.linkssh.space",
  240. "ProxyIP": "br01.linkssh.space",
  241. "ProxyPort": "80",
  242. "Info": "Proxy"
  243. },
  244. {
  245. "Name": "UNIVERSAL CDN [2]",
  246. "FLAG": "vivo",
  247. "Payload": "GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]#http/ \\n\\n°#HTTP/ [crlf][crlf]|[crlf]#HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]#[protocol] \\n\\n/#[Protocol][crlf] [crlf][crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@HTTP/ 2\\nHOST : m.opera.com\\n\\n@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n#ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]#MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]#MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]#ACL HTTP/1.1[lf]Host: google.es[lf]#[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]",
  248. "SNI": "",
  249. "TlsIP": "br01.linkssh.space",
  250. "ProxyIP": "br01.linkssh.space",
  251. "ProxyPort": "80",
  252. "Info": "Proxy"
  253. },
  254. {
  255. "Name": "UNIVERSAL CDN [3]",
  256. "FLAG": "vivo",
  257. "Payload": "[delay_split][crlf][rotate=PATCH;GET;HEAD] wss://[rotate=cliente1.sslpro.shop;linkssh.space]/ HTTP/1.1[lf]Host: [rotate=static.whatsapp.com;m.waze.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com;browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamin.i.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]@@@GET / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@PATCH / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@HEAD / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n",
  258. "SNI": "",
  259. "TlsIP": "br01.linkssh.space",
  260. "ProxyIP": "br01.linkssh.space",
  261. "ProxyPort": "80",
  262. "Info": "Proxy"
  263. },
  264. {
  265. "Name": "UNIVERSAL CDN [4]",
  266. "FLAG": "vivo",
  267. "Payload": "PATCH / HTTP/1.1[crlf][split]Host: [rotate=cliente1.sslpro.shop][crlf]Connection: Upgrade[lf]Upgrade: Websocket[crlf][crlf]@@@GET / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@HEAD / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n",
  268. "SNI": "",
  269. "TlsIP": "65.9.86.69#65.9.86.7#65.9.66.10#65.9.86.77#65.9.86.111#65.9.86.64#143.204.98.69#143.204.68.84#143.204.98.33#143.204.215.28#143.204.215.124#143.204.215.54#143.204.176.71#143.204.215.110#143.204.215.127#143.204.98.11#143.204.68.76#143.204.98.104#143.204.215.91#143.204.191.47#143.204.191.102#143.204.215.30#143.204.98.97#143.204.215.11#143.204.176.12913.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#18.67.145.94#108.139.134.18#108.139.182.69#108.139.95.47#108.139.95.121#18.67.145.84#18.67.145.53#18.67.145.97#65.8.214.57#65.8.214.124#65.8.214.122#65.8.214.56#108.139.95.126#108.139.182.15#108.139.182.47#108.139.182.47#18.161.200.50#18.161.200.81#18.161.200.41#18.161.200.80#18.161.200.96#18.67.145.109",
  270. "ProxyIP": "65.9.86.69#65.9.86.7#65.9.66.10#65.9.86.77#65.9.86.111#65.9.86.64#143.204.98.69#143.204.68.84#143.204.98.33#143.204.215.28#143.204.215.124#143.204.215.54#143.204.176.71#143.204.215.110#143.204.215.127#143.204.98.11#143.204.68.76#143.204.98.104#143.204.215.91#143.204.191.47#143.204.191.102#143.204.215.30#143.204.98.97#143.204.215.11#143.204.176.12913.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#18.67.145.94#108.139.134.18#108.139.182.69#108.139.95.47#108.139.95.121#18.67.145.84#18.67.145.53#18.67.145.97#65.8.214.57#65.8.214.124#65.8.214.122#65.8.214.56#108.139.95.126#108.139.182.15#108.139.182.47#108.139.182.47#18.161.200.50#18.161.200.81#18.161.200.41#18.161.200.80#18.161.200.96#18.67.145.109",
  271. "ProxyPort": "80",
  272. "Info": "Proxy"
  273. },
  274. {
  275. "Name": "UNIVERSAL CDN [5]",
  276. "FLAG": "vivo",
  277. "Payload": "[delay_split][crlf][rotate=PATCH;GET;HEAD] wss://[rotate=cliente1.sslpro.shop;linkssh.space]/ HTTP/1.0[crlf]Host: [rotate=static.whatsapp.com;m.waze.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Upgrade: Websocket[crlf]Proxy-Connection: Keep-Alive; Upgrade[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]@TSTOPSPEED[crlf][crlf]",
  278. "SNI": "",
  279. "TlsIP": "frontend-tim-recarga-client.m4u.com.br#52.85.213.77#52.85.213.112#52.85.213.121#52.85.213.74#52.67.198.135#cc-brand.plat-m4u.io#108.139.113.45#dex.descomplica.com.br#13.33.123.107#18.67.129.91#18.67.129.103#18.67.129.119#18.67.129.10#oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#13.227.126.39#13.227.126.40#13.227.126.91#13.227.126.39#13.227.126.40#13.227.126.91#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#104.26.5.32#104.16.239.166#104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  280. "ProxyIP": "frontend-tim-recarga-client.m4u.com.br#52.85.213.77#52.85.213.112#52.85.213.121#52.85.213.74#52.67.198.135#cc-brand.plat-m4u.io#108.139.113.45#dex.descomplica.com.br#13.33.123.107#18.67.129.91#18.67.129.103#18.67.129.119#18.67.129.10#oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#13.227.126.39#13.227.126.40#13.227.126.91#13.227.126.39#13.227.126.40#13.227.126.91#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#104.26.5.32#104.16.239.166#104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  281. "ProxyPort": "80",
  282. "Info": "Proxy"
  283. },
  284. {
  285. "Name": "VIVO CONTROLE [1]",
  286. "FLAG": "vivo",
  287. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:br01.linkssh.space[crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  288. "SNI": "",
  289. "TlsIP": "141.193.213.10#141.193.213.11#104.18.18.210#104.18.19.210#104.18.22.136#104.18.23.136#104.17.70.206#104.17.71.206#104.17.72.206#104.17.73.206#104.17.74.206#104.26.4.32#104.26.5.32",
  290. "ProxyIP": "141.193.213.10#141.193.213.11#104.18.18.210#104.18.19.210#104.18.22.136#104.18.23.136#104.17.70.206#104.17.71.206#104.17.72.206#104.17.73.206#104.17.74.206#104.26.4.32#104.26.5.32",
  291. "ProxyPort": "80",
  292. "Info": "Proxy"
  293. },
  294. {
  295. "Name": "♻️ CONEXÃO TIM",
  296. "FLAG": "tim",
  297. "Payload": "",
  298. "SNI": "",
  299. "TlsIP": "",
  300. "ProxyIP": "",
  301. "ProxyPort": "",
  302. "Info": ""
  303. },
  304. {
  305. "Name": "TIM CDN [1]",
  306. "FLAG": "tim",
  307. "Payload": "PATCH / HTTP/1.1[lf]Host:cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  308. "SNI": "",
  309. "TlsIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87",
  310. "ProxyIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87",
  311. "ProxyPort": "80",
  312. "Info": "Proxy"
  313. },
  314. {
  315. "Name": "TIM CDN [2]",
  316. "FLAG": "tim",
  317. "Payload": "PATCH / HTTP/1.1[lf]Host:cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  318. "SNI": "",
  319. "TlsIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100",
  320. "ProxyIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100",
  321. "ProxyPort": "80",
  322. "Info": "Proxy"
  323. },
  324. {
  325. "Name": "TIM CDN [3]",
  326. "FLAG": "tim",
  327. "Payload": "POST / HTTP/1.1[crlf]Host:cliente1.sslpro.shop[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  328. "SNI": "",
  329. "TlsIP": "pa-s3-edu-prod-cdn.edu.com#cdn2.webdamdb.com#www.internetdatim.com.br#cdn-prod.securiti.ai#timbrasil.widen.net#status.ookla.com#brmotorolan#w.vteximg.com.br#io.vtex.com.br#forums.lenovo.com#activity-flow.vtex.com",
  330. "ProxyIP": "pa-s3-edu-prod-cdn.edu.com#cdn2.webdamdb.com#www.internetdatim.com.br#cdn-prod.securiti.ai#timbrasil.widen.net#status.ookla.com#brmotorolan#w.vteximg.com.br#io.vtex.com.br#forums.lenovo.com#activity-flow.vtex.com",
  331. "ProxyPort": "80",
  332. "Info": "Proxy"
  333. },
  334. {
  335. "Name": "TIM CDN/Flare",
  336. "FLAG": "tim",
  337. "Payload": "GET / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@PATCH / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@HEAD / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@[delay_split]ACL wss://br01.linkssh.space HTTP/1.1[lf]Host: [rotate=browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]#[protocol][crlf] [crlf][crlf]@",
  338. "SNI": "cliente1.sslpro.shop",
  339. "TlsIP": "br01.linkssh.space#substackcdn.com#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#www.datadoghq-browser-agent.com#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113#substack.com#fee.org#tender.cash",
  340. "ProxyIP": "br01.linkssh.space#substackcdn.com#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#www.datadoghq-browser-agent.com#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113#substack.com#fee.org#tender.cash",
  341. "ProxyPort": "80",
  342. "Info": "Proxy"
  343. },
  344. {
  345. "Name": "TIM NOVA MASTER",
  346. "FLAG": "tim",
  347. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=support.snapfish.com;support.mapmyfitness.com;br01.linkssh.space;support.kontakt.io;uarecord.zendesk.com;sweetroad.zendesk.com;vsco.zendesk.com;support.onetwotrip.com;support.viki.com;support.holmsecurity.com;support.mobileroadie.com;support.neuronmocap.com;support.dxo.com;help.clickfunnels.com;screencastsonline.zendesk.com;support.celtx.com;support.muslimpro.com;support.discogs.com;sginteractive.zendesk.com;support.credly.com;support.sugarsync.com;help.rushlimbaugh.com;support.kidizen.com;support.twilio.com;support.mumbojumbo.com;tpbgame.zendesk.com;ingresshelp.zendesk.com;help.ableton.com;help.spreadshirt.com;wetransfer.zendesk.com;help.issuu.com;meetv.zendesk.com;eight.zendesk.com;help.iheart.com;help.standingstonegames.com;help.trainerize.com;help.coasttocoastam.com;support.securly.com;workflowy.zendesk.com;support.renvu.com;g5entertainment.zendesk.com;support.zipcar.com;gemsofwar.zendesk.com;support.watch.nba.com;faq.hellosign.com;screenad.eu;support.riotgames.com;support.paradoxplaza.com;layananku.airavpn.site;drpanda.zendesk.com;support.fiplab.com;help.behance.net;slack.zendesk.com;aide.e-monsite.com;support.cwtv.com;support.strikingly.com;prodigygame.zendesk.com;support.nixplay.com;flaregames.zendesk.com:support.cmon.com;faq.mightynetworks.com;support.wealthnavi.com;help.musicnotes.com;help.makemeslick.com;help.getmevo.com;support.abra.com;help.tcgplayer.com;mykronoz.zendesk.com;support.ankama.com;help.grindr.com;support.gordonedwards.net;support.mobi2go.com;support.ipvanish.com;support.withings.com;lykkex.zendesk.com;pggmencoleden.zendesk.com;help.positivegrid.com;helpdesk.flexradio.com;help.dreamhost.com;support.cambr;dgeenglish.org;support.ask.fm;care.pressreader.com;help.olx.in;moonactive.zendesk.com;support.getbase.com;history.zendesk.com;produttivo.zendesk.com;support.orcid.org;support.golocalapps.com;support.moneytap.jp;help.acuityscheduling.com;support-pocket.sumally.com;help.remind.com;support.awesome-table.com;support.ampleair.com.au;cs.vtcmobile.vn;support.oneup.com;sup;ort.scribd.com;ecosia.zendesk.com;support.dbconvert.com;cbchelp.cbc.ca;get.cloudapp.help;support.thetileapp.com;support.taskrabbit.com;support.clickcease.com;support.bestwebsoft.com;support.waveapps.com;support.oceanex.pro;autovit.zendesk.com][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: br01.linkssh.space[crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: [crlf]Referer: abre.ai/itechnet2 [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  348. "SNI": "cliente1.sslpro.shop",
  349. "TlsIP": "www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  350. "ProxyIP": "www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  351. "ProxyPort": "80",
  352. "Info": "Proxy"
  353. },
  354. {
  355. "Name": "TIM CDN FLARE [1]",
  356. "FLAG": "tim",
  357. "Payload": "GET / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@PATCH / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@HEAD / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@[delay_split]ACL wss://br01.linkssh.space HTTP/1.1[lf]Host: [rotate=browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]#[protocol][crlf] [crlf][crlf]@",
  358. "SNI": "",
  359. "TlsIP": "br01.linkssh.space#substackcdn.com#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#www.datadoghq-browser-agent.com#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113#substack.com#fee.org#tender.cash",
  360. "ProxyIP": "br01.linkssh.space#substackcdn.com#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#www.datadoghq-browser-agent.com#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113#substack.com#fee.org#tender.cash",
  361. "ProxyPort": "80",
  362. "Info": "Proxy"
  363. },
  364. {
  365. "Name": "TIM DDD 61,21,62,31 [1]",
  366. "FLAG": "tim",
  367. "Payload": "[delay_split]ACL wss://br01.linkssh.space HTTP/1.1[lf]Host: [rotate=browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]",
  368. "SNI": "",
  369. "TlsIP": "substack.com#fee.org#tender.cash",
  370. "ProxyIP": "substack.com#fee.org#tender.cash",
  371. "ProxyPort": "80",
  372. "Info": "Proxy"
  373. },
  374. {
  375. "Name": "TIM DIRECT",
  376. "FLAG": "tim",
  377. "Payload": "ACL / HTTP/1.1[lf]Host: br01.linkssh.space[lf]Upgrade: Websocket[lf]User-Agent: Mobile Safari/9 OPR/9 [lf][split][lf]",
  378. "SNI": "",
  379. "TlsIP": "104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  380. "ProxyIP": "104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  381. "ProxyPort": "80",
  382. "Info": "Direct"
  383. },
  384. {
  385. "Name": "TIM [10]",
  386. "FLAG": "tim",
  387. "Payload": "CONNECT /cdn-cgi/trace HTTP/1.1[crlf]Host: www.especifica.descomplica.com.br[crlf][crlf][split][crlf][crlf]TIMBRASIL- / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]",
  388. "SNI": "",
  389. "TlsIP": "162.159.153.238",
  390. "ProxyIP": "162.159.153.238",
  391. "ProxyPort": "80",
  392. "Info": "Proxy"
  393. },
  394. {
  395. "Name": "TIM [11]",
  396. "FLAG": "tim",
  397. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: [rotate=app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest1.c6bank.tech;mobile.c6bank.app;mobile.c6bank.tech;pre-onboarding-h.c6bank.app;pre-onboarding-p.c6bank.app;saas-h.c6bank.app;www.c6bank.tech][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: br01.linkssh.net[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  398. "SNI": "",
  399. "TlsIP": "104.16.239.166#104.18.99.70",
  400. "ProxyIP": "104.16.239.166#104.18.99.70",
  401. "ProxyPort": "80",
  402. "Info": "Proxy"
  403. },
  404. {
  405. "Name": "TIM [12]",
  406. "FLAG": "tim",
  407. "Payload": "ACL / HTTP/1.1[lf]Host: br01.linkssh.space[lf]Upgrade: Websocket[lf]User-Agent: Mobile Safari/9 OPR/9[lf][split][lf]",
  408. "SNI": "",
  409. "TlsIP": "162.159.128.53",
  410. "ProxyIP": "162.159.128.53",
  411. "ProxyPort": "80",
  412. "Info": "Proxy"
  413. },
  414. {
  415. "Name": "TIM [13]",
  416. "FLAG": "tim",
  417. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=mtls.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;www.c6bank.com.br;creatorsupport.deezer.com;www.c6bank.com.br;ajuda.c6bank.com.br][crlf][delay_split]ACL / HTTP/1.9[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Upgrade: Dalvik/2.1.0 (Linux; U; Android 10; MED-LX9 Build/HUAWEIMED-LX9)[crlf]X-Online-Host:[app_host]www.youtube.com[crlf]X-Forwarded-For:www.youtube.com[crlf]X-Forward-Host: www.skynet.com[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: br01.linkssh.net[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  418. "SNI": "",
  419. "TlsIP": "104.19.241.25#104.16.53.111",
  420. "ProxyIP": "104.19.241.25#104.16.53.111",
  421. "ProxyPort": "80",
  422. "Info": "Proxy"
  423. },
  424. {
  425. "Name": "TIM [14]",
  426. "FLAG": "tim",
  427. "Payload": "GET / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  428. "SNI": "",
  429. "TlsIP": "172.64.144.109",
  430. "ProxyIP": "172.64.144.109",
  431. "ProxyPort": "80",
  432. "Info": "Proxy"
  433. },
  434. {
  435. "Name": "TIM EXPIRADO [1]",
  436. "FLAG": "tim",
  437. "Payload": "protocol]/A\\B/N\\[lf] [crlf][crlf]|[crlf]ACL[lf]puth[lf]@@@HTTP/ 1[lf]Host: ok.ru HTTP/1.0[crlf]Host: ok.ru#HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]#HTTP/ [crlf][crlf]|[crlf]]]",
  438. "SNI": "",
  439. "TlsIP": "br01.linkssh.space",
  440. "ProxyIP": "br01.linkssh.space",
  441. "ProxyPort": "80",
  442. "Info": "Proxy"
  443. },
  444. {
  445. "Name": "TIM EXPIRADO [2]",
  446. "FLAG": "tim",
  447. "Payload": "ACL /index.html HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Origin: https://live.vivo.com.br/, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  448. "SNI": "",
  449. "TlsIP": "pre-onboarding-h.c6bank.app",
  450. "ProxyIP": "pre-onboarding-h.c6bank.app",
  451. "ProxyPort": "80",
  452. "Info": "Proxy"
  453. },
  454. {
  455. "Name": "TIM EXPIRADO [3]",
  456. "FLAG": "tim",
  457. "Payload": "HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=yhjq23.360.com.fail;alt4.aspmx.l.google.com;www.xhtsw.163.com.fail;www.storm.canny.io;www.reimaginetomorrow-qa.disney.com;www.minecraft.msgfocus.com;www.netflixawards.com;x115gzbrpk.execute-api.us-east-1.amazonaws.com;google.traiteurjongen.com;aspmx.l.google.com.4xfun.com;aspmx.l.google.com.469.it. 20secondenhandenwassen.nl;aspmx.l.google.com.469.it;alt2.aspmx.l.google.com.0088.tv;alt1.aspmx.l.google.com.123sexshop.be;alt2.aspmx.l.google.com.sac-surveyors.org;alt2.aspmx.l.google.com.meta-meta.com;slcch03bl9.execute-api.us-east-1.amazonaws.com][lf]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\r\n\\\r\n\\\r\n \\\r\n@@@HTTP/ 1[lf]Host: access.cloudflare.com;aim.cloudflare.com;admin.sqlite.cloudflare.com;blog.cloudflare.com;c4.speed.cloudflare.com;google.com\\\r\n\\\r\n//PATCH HTTP://L-CDN-VIVO.COM.BR;GOOGLE.COM/DNS 1.1.1.1 - 8.8.8.8 - 1.0.0.1- GLINK.NET.BR-m.youtube.com;facebook.com;bitbin.com@LINK4G\\\r\n\\\r\n\\\r\n \\",
  458. "SNI": "",
  459. "TlsIP": "br01.linkssh.space",
  460. "ProxyIP": "br01.linkssh.space",
  461. "ProxyPort": "80",
  462. "Info": "Proxy"
  463. },
  464. {
  465. "Name": "TIM EXPIRADO [4]",
  466. "FLAG": "tim",
  467. "Payload": "http/ \\n\\n°#HTTP/ [crlf][crlf]|[crlf]@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]#[protocol] \\n\\n/@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]#[Protocol][crlf] [crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@HTTP/ 2\\nHOST : m.opera.com\\n\\n@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  468. "SNI": "",
  469. "TlsIP": "br01.linkssh.space",
  470. "ProxyIP": "br01.linkssh.space",
  471. "ProxyPort": "80",
  472. "Info": "Proxy"
  473. },
  474. {
  475. "Name": "TIM EXPIRADO [5]",
  476. "FLAG": "tim",
  477. "Payload": "http/ \\n\\n°#HTTP/ [crlf][crlf]|[crlf]@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]#[protocol] \\n\\n/@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf@@@[Protocol][crlf] [crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@HTTP/ 2\\nHOST : m.opera.com\\n\\n@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  478. "SNI": "",
  479. "TlsIP": "br01.linkssh.space",
  480. "ProxyIP": "br01.linkssh.space",
  481. "ProxyPort": "80",
  482. "Info": "Proxy"
  483. },
  484. {
  485. "Name": "TIM EXPIRADO [6]",
  486. "FLAG": "tim",
  487. "Payload": "MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]#HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@PUT / Cache-Control: private: Web-security[crlf]@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@ACL / HTTP/1.1[crlf][crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=microsoft.com;youtube.com;instagram.com;71.cloudfront.net;www.dropbox.com;m.olx.com.br;ff.garena.com;www.terra.com;salesrock.virginmobile.mx;www.minecraft.msgfocus.com;x115gzbrpk.execute-api.us-east-1.amazonaws.com;google.traiteurjongen.com;aspmx.l.google.com.4xfun.com;slcch03bl9.execute-api.us-east-1.amazonaws.com][lf]",
  488. "SNI": "",
  489. "TlsIP": "br01.linkssh.space",
  490. "ProxyIP": "br01.linkssh.space",
  491. "ProxyPort": "80",
  492. "Info": "Proxy"
  493. },
  494. {
  495. "Name": "TIM EXPIRADO [7]",
  496. "FLAG": "tim",
  497. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=support.snapfish.com;support.mapmyfitness.com;br01.linkssh.space;support.kontakt.io;uarecord.zendesk.com;sweetroad.zendesk.com;vsco.zendesk.com;support.onetwotrip.com;support.viki.com;support.holmsecurity.com;support.mobileroadie.com;support.neuronmocap.com;support.dxo.com;help.clickfunnels.com;screencastsonline.zendesk.com;support.celtx.com;support.muslimpro.com;support.discogs.com;sginteractive.zendesk.com;support.credly.com;support.sugarsync.com;help.rushlimbaugh.com;support.kidizen.com;support.twilio.com;support.mumbojumbo.com;tpbgame.zendesk.com;ingresshelp.zendesk.com;help.ableton.com;help.spreadshirt.com;wetransfer.zendesk.com;help.issuu.com;meetv.zendesk.com;eight.zendesk.com;help.iheart.com;help.standingstonegames.com;help.trainerize.com;help.coasttocoastam.com;support.securly.com;workflowy.zendesk.com;support.renvu.com;g5entertainment.zendesk.com;support.zipcar.com;gemsofwar.zendesk.com;support.watch.nba.com;faq.hellosign.com;screenad.eu;support.riotgames.com;support.paradoxplaza.com;layananku.airavpn.site;drpanda.zendesk.com;support.fiplab.com;help.behance.net;slack.zendesk.com;aide.e-monsite.com;support.cwtv.com;support.strikingly.com;prodigygame.zendesk.com;support.nixplay.com;flaregames.zendesk.com:support.cmon.com;faq.mightynetworks.com;support.wealthnavi.com;help.musicnotes.com;help.makemeslick.com;help.getmevo.com;support.abra.com;help.tcgplayer.com;mykronoz.zendesk.com;support.ankama.com;help.grindr.com;support.gordonedwards.net;support.mobi2go.com;support.ipvanish.com;support.withings.com;lykkex.zendesk.com;pggmencoleden.zendesk.com;help.positivegrid.com;helpdesk.flexradio.com;help.dreamhost.com;support.cambr;dgeenglish.org;support.ask.fm;care.pressreader.com;help.olx.in;moonactive.zendesk.com;support.getbase.com;history.zendesk.com;produttivo.zendesk.com;support.orcid.org;support.golocalapps.com;support.moneytap.jp;help.acuityscheduling.com;support-pocket.sumally.com;help.remind.com;support.awesome-table.com;support.ampleair.com.au;cs.vtcmobile.vn;support.oneup.com;sup;ort.scribd.com;ecosia.zendesk.com;support.dbconvert.com;cbchelp.cbc.ca;get.cloudapp.help;support.thetileapp.com;support.taskrabbit.com;support.clickcease.com;support.bestwebsoft.com;support.waveapps.com;support.oceanex.pro;autovit.zendesk.com][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: br01.linkssh.space[crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: [crlf]Referer: abre.ai/itechnet2 [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  498. "SNI": "",
  499. "TlsIP": "www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  500. "ProxyIP": "www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  501. "ProxyPort": "80",
  502. "Info": "Proxy"
  503. },
  504. {
  505. "Name": "TIM EXPIRADO [8]",
  506. "FLAG": "tim",
  507. "Payload": "[delay_split]ACL / HTTP/1.1[crlf]Host: [rotate=108.158.161.49;52.85.213.82;52.85.213.26;52.85.213.48;13.227.126.49;104.18.7.41;104.16.56.6;104.19.240.25;104.19.239.25;104.16.9.67][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: supernet5g.xyz[crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]#PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net [crlf]@@@PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br [crlf]",
  508. "SNI": "",
  509. "TlsIP": "br01.linkssh.space",
  510. "ProxyIP": "br01.linkssh.space",
  511. "ProxyPort": "80",
  512. "Info": "Proxy"
  513. },
  514. {
  515. "Name": "TIM EXPIRADO [9]",
  516. "FLAG": "tim",
  517. "Payload": "[split][lf]ACL / HTTP/ 1[lf]HTTP/ [lf]Host: alt4.aspmx.l.google.com[lf][lf] Upgrade[lf][lf]#MERGE adclick.g.doubleclick.net HTTP/1.0[crlf]Host: adclick.g.doubleclick.net@@@HTTP/ 1[lf]Host: ok.ru HTTP/1.0[crlf]Host: ok.ru@@@HTTP/1.1[lf]Host: [rotate=foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com][lf]Upgrade: Websocket[lf][split][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: ff.garena.com[lf]\r\n[15/03, 17:00]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n",
  518. "SNI": "",
  519. "TlsIP": "br01.linkssh.space",
  520. "ProxyIP": "br01.linkssh.space",
  521. "ProxyPort": "80",
  522. "Info": "Proxy"
  523. },
  524. {
  525. "Name": "TIM EXPIRADO [10]",
  526. "FLAG": "tim",
  527. "Payload": "HTTP/1.1 200[crlf]Host: vimeo.com[crlf][crlf][netData][crlf]@mip [crlf][crlf]http://uber.com/ HTTP/1.1 200[crlf]mip[crlf][crlf] [crlf][crlf]http://udemy.com/ HTTP/1.1 200[crlf]Host@mip[crlf][crlf] [crlf][crlf] http://aliyuncs.com/ HTTP/1.1 200[crlf]Host fastly.net/[crlf][crlf][netData][crlf] [crlf][crlf] http://pornhub.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf] http://google.com/ HTTP/1.1[cr][lf] [crlf][crlf][netData][cr][lf] [crlf][crlf]CONNECT mip:22@http://youtube.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf]",
  528. "SNI": "",
  529. "TlsIP": "br01.linkssh.space",
  530. "ProxyIP": "br01.linkssh.space",
  531. "ProxyPort": "80",
  532. "Info": "Proxy"
  533. },
  534. {
  535. "Name": "TIM EXPIRADO [11]",
  536. "FLAG": "tim",
  537. "Payload": "GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@http/ \\n\\n°@@@HTTP/ [crlf][crlf]|[crlf]@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@[protocol] \\n\\n/@@@[Protocol][crlf] [crlf][crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@HTTP/ 2\\nHOST : m.opera.com\\n\\n@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n#ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]#MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]#ACL HTTP/1.1[lf]Host: google.es[lf]#[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]",
  538. "SNI": "",
  539. "TlsIP": "br01.linkssh.space",
  540. "ProxyIP": "br01.linkssh.space",
  541. "ProxyPort": "80",
  542. "Info": "Proxy"
  543. },
  544. {
  545. "Name": "TIM EXPIRADO [12]",
  546. "FLAG": "tim",
  547. "Payload": "[split][delay_split]ACL / /\\n@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n#ACL HTTP/1.1[lf]Host: google.es[lf]@@@PUT / Cache-Control: private: Web-security[crlf]#ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@ACL / HTTP/1.1[crlf][crlf]#PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  548. "SNI": "",
  549. "TlsIP": "br01.linkssh.space",
  550. "ProxyIP": "br01.linkssh.space",
  551. "ProxyPort": "80",
  552. "Info": "Proxy"
  553. },
  554. {
  555. "Name": "TIM EXPIRADO [13]",
  556. "FLAG": "tim",
  557. "Payload": "HTTP/1.1[lf]Host: [rotate=foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com][lf]Upgrade: Websocket[lf][split][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: ff.garena.com[lf]\r\n[15/03, 17:00]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n",
  558. "SNI": "",
  559. "TlsIP": "br01.linkssh.space",
  560. "ProxyIP": "br01.linkssh.space",
  561. "ProxyPort": "80",
  562. "Info": "Proxy"
  563. },
  564. {
  565. "Name": "🔴 CLARO ABAIXO 👇",
  566. "FLAG": "claro",
  567. "Payload": "",
  568. "SNI": "",
  569. "TlsIP": "",
  570. "ProxyIP": "",
  571. "ProxyPort": "",
  572. "Info": ""
  573. },
  574. {
  575. "Name": "CLARO [1]",
  576. "FLAG": "claro",
  577. "Payload": "GET / HTTP/1.1[crlf]Host: cliente1.sslpro.shop[crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf][crlf]",
  578. "SNI": "tim-controle-captive-portal.stg.m4u.com.br",
  579. "TlsIP": "13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4#ponte-pix-claro-recarga.plat-m4u.io#52.84.83.92#18.161.200.44#52.84.83.93#52.84.83.44#52.84.83.31#18.161.200.126#18.161.200.6#18.161.200.24#18.161.200.24",
  580. "ProxyIP": "13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4#ponte-pix-claro-recarga.plat-m4u.io#52.84.83.92#18.161.200.44#52.84.83.93#52.84.83.44#52.84.83.31#18.161.200.126#18.161.200.6#18.161.200.24#18.161.200.24",
  581. "ProxyPort": "80",
  582. "Info": "Proxy"
  583. },
  584. {
  585. "Name": "CLARO, CONTROLE, FLEX, POS PAGO",
  586. "FLAG": "claro",
  587. "Payload": "GET / HTTP/1.1[crlf]Host: [random=static.whatsapp.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  588. "SNI": "",
  589. "TlsIP": "br01.linkssh.space",
  590. "ProxyIP": "br01.linkssh.space",
  591. "ProxyPort": "80",
  592. "Info": "Proxy"
  593. }
  594. ]
  595. }

comments powered by Disqus