4gspeed


SUBMITTED BY: tayane

DATE: April 12, 2023, 5:21 p.m.

UPDATED: April 28, 2023, 5:50 p.m.

FORMAT: JSON

SIZE: 51.0 kB

HITS: 866

  1. {
  2. "Version": "2",
  3. "ReleaseNotes": "",
  4. "UrlUpdate": "https://bitbin.it/EhXu28Uv/raw/",
  5. "Sms": "https://pain",
  6. "EmailFeedback": "",
  7. "UrlContato": "",
  8. "UrlTermos": "",
  9. "CheckUser": "true",
  10. "UdpPort": "7100;7200;7300;7400;7500;7600",
  11. "Servers": [
  12. {
  13. "Name": "SERVIDOR - (VIVO)",
  14. "TYPE": "premium",
  15. "FLAG": "br.png",
  16. "ServerIP": "cliente-atendimento.cf",
  17. "CheckUser": "http://45.231.133.159:5454/checkUser",
  18. "ServerPort": "22",
  19. "SSLPort": "443",
  20. "USER": "",
  21. "PASS": ""
  22. },
  23. {
  24. "Name": "SERVIDOR TIM ALTERNATIVO",
  25. "TYPE": "premium",
  26. "FLAG": "br.png",
  27. "ServerIP": "apptest.c6bank.app",
  28. "CheckUser": "http://45.231.133.159:5454/checkUser",
  29. "ServerPort": "22",
  30. "SSLPort": "443",
  31. "USER": "",
  32. "PASS": ""
  33. }
  34. ],
  35. "Networks": [
  36. {
  37. "Name": "VIVO FAST",
  38. "FLAG": "vivo",
  39. "Payload": "GET / HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Connection: Websocket[crlf]Upgrade: Keep-Alive[crlf][crlf]",
  40. "SNI": "",
  41. "TlsIP": "",
  42. "ProxyIP": "104.18.7.41",
  43. "ProxyPort": "80",
  44. "Info": "Proxy"
  45. },
  46. {
  47. "Name": "VIVO EASY",
  48. "FLAG": "vivo",
  49. "Payload": "GET / HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Connection: Websocket[crlf]Upgrade: Keep-Alive[crlf][crlf]",
  50. "SNI": "",
  51. "TlsIP": "",
  52. "ProxyIP": "104.16.51.111",
  53. "ProxyPort": "80",
  54. "Info": "Proxy"
  55. },
  56. {
  57. "Name": "VIVO FLARE 1",
  58. "FLAG": "vivo",
  59. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:INVCLIENTES.VIRTUANET-SYSTEM.STORE[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  60. "SNI": "",
  61. "TlsIP": "",
  62. "ProxyIP": "104.16.53.111",
  63. "ProxyPort": "80",
  64. "Info": "Proxy"
  65. },
  66. {
  67. "Name": "VIVO FLARE 2",
  68. "FLAG": "vivo",
  69. "Payload": "GET / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  70. "SNI": "",
  71. "TlsIP": "",
  72. "ProxyIP": "ffsupportbd.garena.com",
  73. "ProxyPort": "80",
  74. "Info": "Proxy"
  75. },
  76. {
  77. "Name": "VIVO FLARE 3",
  78. "FLAG": "vivo",
  79. "Payload": "GET / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  80. "SNI": "",
  81. "TlsIP": "",
  82. "ProxyIP": "duvidas.ampli.com.br",
  83. "ProxyPort": "80",
  84. "Info": "Proxy"
  85. },
  86. {
  87. "Name": "VIVO FLARE 4",
  88. "FLAG": "vivo",
  89. "Payload": "GET / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  90. "SNI": "",
  91. "TlsIP": "",
  92. "ProxyIP": "support.moovitapp.com",
  93. "ProxyPort": "80",
  94. "Info": "Proxy"
  95. },
  96. {
  97. "Name": "VIVO FLARE 5",
  98. "FLAG": "vivo",
  99. "Payload": "GET / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  100. "SNI": "",
  101. "TlsIP": "",
  102. "ProxyIP": "support.deezer.com",
  103. "ProxyPort": "80",
  104. "Info": "Proxy"
  105. },
  106. {
  107. "Name": "VIVO FLARE 6",
  108. "FLAG": "vivo",
  109. "Payload": "GET / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  110. "SNI": "",
  111. "TlsIP": "",
  112. "ProxyIP": "support.hotmart.com",
  113. "ProxyPort": "80",
  114. "Info": "Proxy"
  115. },
  116. {
  117. "Name": "VIVO FLARE 7",
  118. "FLAG": "vivo",
  119. "Payload": "GET / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  120. "SNI": "",
  121. "TlsIP": "",
  122. "ProxyIP": "localonlinepresence.com",
  123. "ProxyPort": "80",
  124. "Info": "Proxy"
  125. },
  126. {
  127. "Name": "VIVO FLARE 8",
  128. "FLAG": "vivo",
  129. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  130. "SNI": "",
  131. "TlsIP": "",
  132. "ProxyIP": "104.16.51.111",
  133. "ProxyPort": "80",
  134. "Info": "Proxy"
  135. },
  136. {
  137. "Name": "VIVO FLARE 9",
  138. "FLAG": "vivo",
  139. "Payload": "GET / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  140. "SNI": "",
  141. "TlsIP": "",
  142. "ProxyIP": "amon14--support.zendesk.com",
  143. "ProxyPort": "80",
  144. "Info": "Proxy"
  145. },
  146. {
  147. "Name": "VIVO FLARE 10",
  148. "FLAG": "vivo",
  149. "Payload": "GET / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  150. "SNI": "",
  151. "TlsIP": "",
  152. "ProxyIP": "ayuda.tigo.com.gt",
  153. "ProxyPort": "80",
  154. "Info": "Proxy"
  155. },
  156. {
  157. "Name": "VIVO FLARE 11",
  158. "FLAG": "vivo",
  159. "Payload": "GET / HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nUpgrade: ws\r\n\r\n",
  160. "SNI": "INVCLIENTES.VIRTUANET-SYSTEM.STORE",
  161. "TlsIP": "",
  162. "ProxyIP": "104.16.53.111",
  163. "ProxyPort": "80",
  164. "Info": "Proxy"
  165. },
  166. {
  167. "Name": "VIVO FLARE 12",
  168. "FLAG": "vivo",
  169. "Payload": "GET / HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nUpgrade: ws\r\n\r\n",
  170. "SNI": "mobilidade.cloud.caixa.gov.br",
  171. "TlsIP": "",
  172. "ProxyIP": "104.16.51.111",
  173. "ProxyPort": "80",
  174. "Info": "Proxy"
  175. },
  176. {
  177. "Name": "VIVO FLARE 13",
  178. "FLAG": "vivo",
  179. "Payload": "GET / HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nUpgrade: ws\r\n\r\n",
  180. "SNI": "workplaceservices.surveymonkey.com",
  181. "TlsIP": "",
  182. "ProxyIP": "104.16.51.111",
  183. "ProxyPort": "80",
  184. "Info": "Proxy"
  185. },
  186. {
  187. "Name": "VIVO FLARE 14",
  188. "FLAG": "vivo",
  189. "Payload": "GET / HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nUpgrade: ws\r\n\r\n",
  190. "SNI": "auth-uat-us.surveymonkey.com",
  191. "TlsIP": "",
  192. "ProxyIP": "104.18.7.22",
  193. "ProxyPort": "80",
  194. "Info": "Proxy"
  195. },
  196. {
  197. "Name": "VIVO FLARE 15",
  198. "FLAG": "vivo",
  199. "Payload": "GET / HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nUpgrade: ws\r\n\r\n",
  200. "SNI": "api.sandbox.c6bank.com.br",
  201. "TlsIP": "",
  202. "ProxyIP": "api.sandbox.c6bank.com.br",
  203. "ProxyPort": "80",
  204. "Info": "Proxy"
  205. },
  206. {
  207. "Name": "VIVO FLARE 16",
  208. "FLAG": "vivo",
  209. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  210. "SNI": "",
  211. "TlsIP": "",
  212. "ProxyIP": "104.16.51.111",
  213. "ProxyPort": "80",
  214. "Info": "Proxy"
  215. },
  216. {
  217. "Name": "VIVO FLARE 17",
  218. "FLAG": "vivo",
  219. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  220. "SNI": "",
  221. "TlsIP": "",
  222. "ProxyIP": "104.16.53.111",
  223. "ProxyPort": "80",
  224. "Info": "Proxy"
  225. },
  226. {
  227. "Name": "VIVO FLARE 18",
  228. "FLAG": "vivo",
  229. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  230. "SNI": "",
  231. "TlsIP": "",
  232. "ProxyIP": "104.18.7.80",
  233. "ProxyPort": "80",
  234. "Info": "Proxy"
  235. },
  236. {
  237. "Name": "VIVO CLOUDFRONT",
  238. "FLAG": "vivo",
  239. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: WebSocket[crlf][crlf]",
  240. "SNI": "",
  241. "TlsIP": "",
  242. "ProxyIP": "recarga.vivo.com.br",
  243. "ProxyPort": "80",
  244. "Info": "Proxy"
  245. },
  246. {
  247. "Name": "TIM FAST",
  248. "FLAG": "tim",
  249. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  250. "SNI": "",
  251. "TlsIP": "",
  252. "ProxyIP": "104.18.27.160",
  253. "ProxyPort": "80",
  254. "Info": "Proxy"
  255. },
  256. {
  257. "Name": "TIM FAST 2",
  258. "FLAG": "tim",
  259. "Payload": "CONNECT / HTTP/1.1[crlf]Host: saas-h.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  260. "SNI": "",
  261. "TlsIP": "",
  262. "ProxyIP": "104.18.27.160",
  263. "ProxyPort": "80",
  264. "Info": "Proxy"
  265. },
  266. {
  267. "Name": "TIM FAST 3",
  268. "FLAG": "tim",
  269. "Payload": "CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: INVCLIENTES.VIRTUANET-SYSTEM.STORE [crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  270. "SNI": "",
  271. "TlsIP": "",
  272. "ProxyIP": "104.19.240.25",
  273. "ProxyPort": "80",
  274. "Info": "Proxy"
  275. },
  276. {
  277. "Name": "TIM FLARE 1",
  278. "FLAG": "tim",
  279. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  280. "SNI": "",
  281. "TlsIP": "helpypro.stoodi.com.br",
  282. "ProxyIP": "helpypro.stoodi.com.br",
  283. "ProxyPort": "80",
  284. "Info": "Proxy"
  285. },
  286. {
  287. "Name": "TIM FLARE 2",
  288. "FLAG": "tim",
  289. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  290. "SNI": "",
  291. "TlsIP": "",
  292. "ProxyIP": "104.16.51.111",
  293. "ProxyPort": "80",
  294. "Info": "Proxy"
  295. },
  296. {
  297. "Name": "TIM FLARE 3",
  298. "FLAG": "tim",
  299. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Upgrade: Websocket[crlf][crlf]",
  300. "SNI": "",
  301. "TlsIP": "",
  302. "ProxyIP": "104.16.53.111",
  303. "ProxyPort": "80",
  304. "Info": "Proxy"
  305. },
  306. {
  307. "Name": "TIM FLARE 4",
  308. "FLAG": "tim",
  309. "Payload": "GET / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  310. "SNI": "",
  311. "TlsIP": "",
  312. "ProxyIP": "104.19.239.25",
  313. "ProxyPort": "80",
  314. "Info": "Proxy"
  315. },
  316. {
  317. "Name": "TIM FLARE 5",
  318. "FLAG": "tim",
  319. "Payload": "GET / HTTP/1.1\r\nHost: c6bank.com.br \r\nExpect: 100-continue\r\n\r\n[split]\r\n\r\nACL /?/ HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE \r\nExpect: 100-continue\r\nUpgrade: websocket\r\nUser-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)\r\n\r\n",
  320. "SNI": "",
  321. "TlsIP": "",
  322. "ProxyIP": "104.18.28.182",
  323. "ProxyPort": "80",
  324. "Info": "Direct"
  325. },
  326. {
  327. "Name": "TIM FLARE 6",
  328. "FLAG": "tim",
  329. "Payload": "GET / HTTP/1.1\r\nHost: api.sandbox.c6bank.com.br\r\nExpect: 100-continue\r\n\r\n[split]\r\n\r\nACL /?/ HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nExpect: 100-continue\r\nUpgrade: websocket\r\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\r\n\r\n",
  330. "SNI": "",
  331. "TlsIP": "",
  332. "ProxyIP": "104.19.239.25",
  333. "ProxyPort": "80",
  334. "Info": "Proxy"
  335. },
  336. {
  337. "Name": "TIM FLARE 7",
  338. "FLAG": "tim",
  339. "Payload": "HEAD wss://INVCLIENTES.VIRTUANET-SYSTEM.STORE HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]",
  340. "SNI": "",
  341. "TlsIP": "",
  342. "ProxyIP": "104.16.53.111",
  343. "ProxyPort": "80",
  344. "Info": "Proxy"
  345. },
  346. {
  347. "Name": "TIM FLARE 8",
  348. "FLAG": "tim",
  349. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  350. "SNI": "",
  351. "TlsIP": "",
  352. "ProxyIP": "104.16.51.111",
  353. "ProxyPort": "80",
  354. "Info": "Proxy"
  355. },
  356. {
  357. "Name": "TIM FLARE 9",
  358. "FLAG": "tim",
  359. "Payload": "GET / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  360. "SNI": "",
  361. "TlsIP": "",
  362. "ProxyIP": "104.19.239.25",
  363. "ProxyPort": "80",
  364. "Info": "Proxy"
  365. },
  366. {
  367. "Name": "TIM FLARE 10",
  368. "FLAG": "tim",
  369. "Payload": "GET / HTTP/1.1\r\nHost: api.sandbox.c6bank.com.br\r\nExpect: 100-continue\r\n\r\n[split]\r\n\r\nACL- /?/ HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE \r\nExpect: 100-continue\r\nUpgrade: websocket\r\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\r\n\r\n",
  370. "SNI": "",
  371. "TlsIP": "",
  372. "ProxyIP": "104.18.28.182",
  373. "ProxyPort": "80",
  374. "Info": "Proxy"
  375. },
  376. {
  377. "Name": "TIM FLARE 11",
  378. "FLAG": "tim",
  379. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host:INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  380. "SNI": "",
  381. "TlsIP": "104.18.225.52",
  382. "ProxyIP": "helpypro.stoodi.com.br",
  383. "ProxyPort": "80",
  384. "Info": "Proxy"
  385. },
  386. {
  387. "Name": "TIM FLARE 12",
  388. "FLAG": "tim",
  389. "Payload": "GET / HTTP/1.1[lf]Host:landing.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  390. "SNI": "",
  391. "TlsIP": "",
  392. "ProxyIP": "104.16.51.111",
  393. "ProxyPort": "80",
  394. "Info": "Proxy"
  395. },
  396. {
  397. "Name": "TIM FLARE 13",
  398. "FLAG": "tim",
  399. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  400. "SNI": "",
  401. "TlsIP": "",
  402. "ProxyIP": "104.16.51.111",
  403. "ProxyPort": "80",
  404. "Info": "Proxy"
  405. },
  406. {
  407. "Name": "TIM FLARE 14",
  408. "FLAG": "tim",
  409. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  410. "SNI": "",
  411. "TlsIP": "helpypro.stoodi.com.br",
  412. "ProxyIP": "helpypro.stoodi.com.br",
  413. "ProxyPort": "80",
  414. "Info": "Proxy"
  415. },
  416. {
  417. "Name": "TIM FLARE 15",
  418. "FLAG": "tim",
  419. "Payload": " / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  420. "SNI": "",
  421. "TlsIP": "",
  422. "ProxyIP": "104.19.239.25",
  423. "ProxyPort": "80",
  424. "Info": "Proxy"
  425. },
  426. {
  427. "Name": "TIM DIRECT",
  428. "FLAG": "tim",
  429. "Payload": "PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]",
  430. "SNI": "",
  431. "TlsIP": "",
  432. "ProxyIP": "186.233.119.172",
  433. "ProxyPort": "80",
  434. "Info": "Proxy"
  435. },
  436. {
  437. "Name": "TIM DIRECT 1",
  438. "FLAG": "tim",
  439. "Payload": "HTTP/ [crlf][crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[protocol][crlf]|[crlf]",
  440. "SNI": "",
  441. "TlsIP": "",
  442. "ProxyIP": "186.233.119.172",
  443. "ProxyPort": "80",
  444. "Info": "Proxy"
  445. },
  446. {
  447. "Name": "TIM DIRECT 2",
  448. "FLAG": "tim",
  449. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  450. "SNI": "",
  451. "TlsIP": "",
  452. "ProxyIP": "186.233.119.172",
  453. "ProxyPort": "80",
  454. "Info": "Proxy"
  455. },
  456. {
  457. "Name": "TIM DIRECT 3",
  458. "FLAG": "tim",
  459. "Payload": "GET / HTTP/1.1\r\nHost: api.sandbox.c6bank.com.br\r\nExpect: 100-continue\r\n\r\n[split]\r\n\r\nACL /?/ HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nExpect: 100-continue\r\nUpgrade: websocket\r\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)",
  460. "SNI": "",
  461. "TlsIP": "",
  462. "ProxyIP": "104.19.239.25",
  463. "ProxyPort": "80",
  464. "Info": "Direct"
  465. },
  466. {
  467. "Name": "TIM DIRECT 4",
  468. "FLAG": "tim",
  469. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  470. "SNI": "",
  471. "TlsIP": "",
  472. "ProxyIP": "104.16.53.111",
  473. "ProxyPort": "80",
  474. "Info": "Direct"
  475. },
  476. {
  477. "Name": "TIM DIRECT 5",
  478. "FLAG": "tim",
  479. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  480. "SNI": "",
  481. "TlsIP": "",
  482. "ProxyIP": "104.16.53.111",
  483. "ProxyPort": "80",
  484. "Info": "Direct"
  485. },
  486. {
  487. "Name": "TIM DIRECT 6",
  488. "FLAG": "tim",
  489. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  490. "SNI": "",
  491. "TlsIP": "",
  492. "ProxyIP": "104.19.241.25",
  493. "ProxyPort": "80",
  494. "Info": "Direct"
  495. },
  496. {
  497. "Name": "TIM DIRECT 7",
  498. "FLAG": "tim",
  499. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  500. "SNI": "",
  501. "TlsIP": "",
  502. "ProxyIP": "104.19.241.25",
  503. "ProxyPort": "80",
  504. "Info": "Direct"
  505. },
  506. {
  507. "Name": "TIM DIRECT 8",
  508. "FLAG": "tim",
  509. "Payload": "GET / HTTP/1.1\r\nHost: api.sandbox.c6bank.com.br\r\nExpect: 100-continue\r\n\r\n[split]\r\n\r\nACL /?/ HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nExpect: 100-continue\r\nUpgrade: websocket\r\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\r\n\r\n",
  510. "SNI": "",
  511. "TlsIP": "",
  512. "ProxyIP": "104.19.241.25",
  513. "ProxyPort": "80",
  514. "Info": "Direct"
  515. },
  516. {
  517. "Name": "TIM EXPIRADO",
  518. "FLAG": "tim",
  519. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  520. "SNI": "",
  521. "TlsIP": "",
  522. "ProxyIP": "186.233.119.172",
  523. "ProxyPort": "80",
  524. "Info": "Proxy"
  525. },
  526. {
  527. "Name": "TIM EXPIRADO 2",
  528. "FLAG": "tim",
  529. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  530. "SNI": "",
  531. "TlsIP": "",
  532. "ProxyIP": "186.233.119.172",
  533. "ProxyPort": "80",
  534. "Info": "Proxy"
  535. },
  536. {
  537. "Name": "TIM EXPIRADO 3",
  538. "FLAG": "tim",
  539. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  540. "SNI": "",
  541. "TlsIP": "",
  542. "ProxyIP": "186.233.119.172",
  543. "ProxyPort": "80",
  544. "Info": "Proxy"
  545. },
  546. {
  547. "Name": "TIM EXPIRADO 4",
  548. "FLAG": "tim",
  549. "Payload": "HEAD wss://186.233.119.172 HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]",
  550. "SNI": "186.233.119.172",
  551. "TlsIP": "",
  552. "ProxyIP": "104.16.53.111",
  553. "ProxyPort": "80",
  554. "Info": "Proxy"
  555. },
  556. {
  557. "Name": "TIM EXPIRADO 5",
  558. "FLAG": "tim",
  559. "Payload": "[protocol][crlf] [crlf][crlf]",
  560. "SNI": "",
  561. "TlsIP": "",
  562. "ProxyIP": "186.233.119.172",
  563. "ProxyPort": "80",
  564. "Info": "Direct"
  565. },
  566. {
  567. "Name": "TIM EXPIRADO 6",
  568. "FLAG": "tim",
  569. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: 186.233.119.172 [crlf]Upgrade: websocket[crlf][crlf]",
  570. "SNI": "feedback.infinitepay.io",
  571. "TlsIP": "",
  572. "ProxyIP": "104.16.18.94",
  573. "ProxyPort": "80",
  574. "Info": "Proxy"
  575. },
  576. {
  577. "Name": "TIM EXPIRADO 7",
  578. "FLAG": "tim",
  579. "Payload": "ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]",
  580. "SNI": "",
  581. "TlsIP": "",
  582. "ProxyIP": "186.233.119.172",
  583. "ProxyPort": "80",
  584. "Info": "Direct"
  585. },
  586. {
  587. "Name": "TIM EXPIRADO 8",
  588. "FLAG": "tim",
  589. "Payload": "HTTP/1.1[crlf] [crlf][crlf]",
  590. "SNI": "",
  591. "TlsIP": "",
  592. "ProxyIP": "186.233.119.172",
  593. "ProxyPort": "80",
  594. "Info": "Direct"
  595. },
  596. {
  597. "Name": "TIM EXPIRADO 9",
  598. "FLAG": "tim",
  599. "Payload": "[protocol] \r\n\r\n/",
  600. "SNI": "",
  601. "TlsIP": "",
  602. "ProxyIP": "186.233.119.172",
  603. "ProxyPort": "80",
  604. "Info": "Proxy"
  605. },
  606. {
  607. "Name": "TIM EXPIRADO 10",
  608. "FLAG": "tim",
  609. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  610. "SNI": "",
  611. "TlsIP": "",
  612. "ProxyIP": "186.233.119.172",
  613. "ProxyPort": "80",
  614. "Info": "Proxy"
  615. },
  616. {
  617. "Name": "TIM EXPIRADO 11",
  618. "FLAG": "tim",
  619. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  620. "SNI": "",
  621. "TlsIP": "",
  622. "ProxyIP": "186.233.119.172",
  623. "ProxyPort": "80",
  624. "Info": "Proxy"
  625. },
  626. {
  627. "Name": "TIM EXPIRADO 12",
  628. "FLAG": "tim",
  629. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  630. "SNI": "",
  631. "TlsIP": "",
  632. "ProxyIP": "186.233.119.172",
  633. "ProxyPort": "80",
  634. "Info": "Direct"
  635. },
  636. {
  637. "Name": "TIM EXPIRADO 13",
  638. "FLAG": "tim",
  639. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  640. "SNI": "",
  641. "TlsIP": "",
  642. "ProxyIP": "186.233.119.172",
  643. "ProxyPort": "80",
  644. "Info": "Proxy"
  645. },
  646. {
  647. "Name": "TIM ALGUNS DDDs",
  648. "FLAG": "tim",
  649. "Payload": "[protocol] \r\n\r\n/",
  650. "SNI": "",
  651. "TlsIP": "",
  652. "ProxyIP": "186.233.119.172",
  653. "ProxyPort": "80",
  654. "Info": "Proxy"
  655. },
  656. {
  657. "Name": "TIM ALGUNS DDDs 1",
  658. "FLAG": "tim",
  659. "Payload": "GET / HTTP/1.1[crlf]Host: c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET- / HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Upgrade: Websocket[crlf][crlf]",
  660. "SNI": "",
  661. "TlsIP": "",
  662. "ProxyIP": "104.18.28.182",
  663. "ProxyPort": "80",
  664. "Info": "Proxy"
  665. },
  666. {
  667. "Name": "TIM ALGUNS DDDs 2",
  668. "FLAG": "tim",
  669. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  670. "SNI": "",
  671. "TlsIP": "",
  672. "ProxyIP": "104.16.53.111",
  673. "ProxyPort": "80",
  674. "Info": "Proxy"
  675. },
  676. {
  677. "Name": "TIM ALGUNS DDDs 3",
  678. "FLAG": "tim",
  679. "Payload": "GET / HTTP/1.1[crlf]Host: c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET- / HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Upgrade: Websocket[crlf][crlf]",
  680. "SNI": "",
  681. "TlsIP": "",
  682. "ProxyIP": "104.16.53.111",
  683. "ProxyPort": "80",
  684. "Info": "Proxy"
  685. },
  686. {
  687. "Name": "TIM ALGUNS DDDs 4",
  688. "FLAG": "tim",
  689. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  690. "SNI": "",
  691. "TlsIP": "",
  692. "ProxyIP": "104.19.241.25",
  693. "ProxyPort": "80",
  694. "Info": "Proxy"
  695. },
  696. {
  697. "Name": "TIM CLOUDFRONT",
  698. "FLAG": "tim",
  699. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  700. "SNI": "",
  701. "TlsIP": "",
  702. "ProxyIP": "108.158.124.45",
  703. "ProxyPort": "80",
  704. "Info": "Proxy"
  705. },
  706. {
  707. "Name": "TIM CLOUDFRONT 1",
  708. "FLAG": "tim",
  709. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]connection:Upgrade:[crlf]User-Agent:[ua][crlf]Upgrade: websocket[crlf][crlf]",
  710. "SNI": "",
  711. "TlsIP": "",
  712. "ProxyIP": "108.158.124.45",
  713. "ProxyPort": "80",
  714. "Info": "Proxy"
  715. },
  716. {
  717. "Name": "TIM CLOUDFRONT 2",
  718. "FLAG": "tim",
  719. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  720. "SNI": "",
  721. "TlsIP": "",
  722. "ProxyIP": "99.84.252.19",
  723. "ProxyPort": "80",
  724. "Info": "Proxy"
  725. },
  726. {
  727. "Name": "TIM CLOUDFRONT 3",
  728. "FLAG": "tim",
  729. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  730. "SNI": "",
  731. "TlsIP": "",
  732. "ProxyIP": "99.84.252.11",
  733. "ProxyPort": "80",
  734. "Info": "Proxy"
  735. },
  736. {
  737. "Name": "TIM CLOUDFRONT 4",
  738. "FLAG": "tim",
  739. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  740. "SNI": "",
  741. "TlsIP": "",
  742. "ProxyIP": "99.84.252.77",
  743. "ProxyPort": "80",
  744. "Info": "Proxy"
  745. },
  746. {
  747. "Name": "TIM CLOUDFRONT 5",
  748. "FLAG": "tim",
  749. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  750. "SNI": "",
  751. "TlsIP": "",
  752. "ProxyIP": "99.84.252.98",
  753. "ProxyPort": "80",
  754. "Info": "Proxy"
  755. },
  756. {
  757. "Name": "TIM CLOUDFRONT 6",
  758. "FLAG": "tim",
  759. "Payload": "GET wss://[rotate=d30hpzc0hdefp7.cloudfront.net]/ HTTP/1.1[crlf]Host: www.primevideo.com[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf",
  760. "SNI": "",
  761. "TlsIP": "",
  762. "ProxyIP": "193.123.106.172",
  763. "ProxyPort": "80",
  764. "Info": "Proxy"
  765. },
  766. {
  767. "Name": "TIM CLOUDFRONT 7",
  768. "FLAG": "tim",
  769. "Payload": "GET wss://d30hpzc0hdefp7.cloudfront.net/ HTTP/1.1[crlf]Host: controleexpress.tim.com.br[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf",
  770. "SNI": "",
  771. "TlsIP": "",
  772. "ProxyIP": "52.67.212.154",
  773. "ProxyPort": "80",
  774. "Info": "Proxy"
  775. },
  776. {
  777. "Name": "TIM CLOUDFRONT 8",
  778. "FLAG": "tim",
  779. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]connection:Upgrade:[crlf]User-Agent:[ua][crlf]Upgrade: websocket[crlf][crlf]",
  780. "SNI": "",
  781. "TlsIP": "",
  782. "ProxyIP": "18.161.200.111",
  783. "ProxyPort": "80",
  784. "Info": "Proxy"
  785. },
  786. {
  787. "Name": "TIM CLOUDFRONT 9",
  788. "FLAG": "tim",
  789. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  790. "SNI": "",
  791. "TlsIP": "",
  792. "ProxyIP": "18.161.200.111",
  793. "ProxyPort": "80",
  794. "Info": "Proxy"
  795. },
  796. {
  797. "Name": "TIM CLOUDFRONT 10",
  798. "FLAG": "tim",
  799. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  800. "SNI": "",
  801. "TlsIP": "",
  802. "ProxyIP": "pos.tim.com.br",
  803. "ProxyPort": "80",
  804. "Info": "Proxy"
  805. },
  806. {
  807. "Name": "TIM CLOUDFRONT 11",
  808. "FLAG": "tim",
  809. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  810. "SNI": "",
  811. "TlsIP": "",
  812. "ProxyIP": "104.16.51.111",
  813. "ProxyPort": "80",
  814. "Info": "Proxy"
  815. },
  816. {
  817. "Name": "TIM CLOUDFRONT 12",
  818. "FLAG": "tim",
  819. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  820. "SNI": "",
  821. "TlsIP": "",
  822. "ProxyIP": "108.158.124.45",
  823. "ProxyPort": "80",
  824. "Info": "Proxy"
  825. },
  826. {
  827. "Name": "TIM CLOUDFRONT 13",
  828. "FLAG": "tim",
  829. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  830. "SNI": "",
  831. "TlsIP": "",
  832. "ProxyIP": "13.226.52.28",
  833. "ProxyPort": "80",
  834. "Info": "Proxy"
  835. },
  836. {
  837. "Name": "TIM CLOUDFRONT 14",
  838. "FLAG": "tim",
  839. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  840. "SNI": "",
  841. "TlsIP": "",
  842. "ProxyIP": "209.14.69.110",
  843. "ProxyPort": "80",
  844. "Info": "Proxy"
  845. },
  846. {
  847. "Name": "TIM CLOUDFRONT 15",
  848. "FLAG": "tim",
  849. "Payload": "PATCH HTTP/1.1[crlf]Host:d30hpzc0hdefp7.cloudfront.net HTTP/1.1[crlf]Host: www.google.com[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: [crlf]gzip, chunked[crlf][crlf]",
  850. "SNI": "",
  851. "TlsIP": "",
  852. "ProxyIP": "209.14.69.110",
  853. "ProxyPort": "80",
  854. "Info": "Proxy"
  855. },
  856. {
  857. "Name": "TIM CLOUDFRONT 16",
  858. "FLAG": "tim",
  859. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  860. "SNI": "",
  861. "TlsIP": "",
  862. "ProxyIP": "108.158.124.45",
  863. "ProxyPort": "80",
  864. "Info": "Proxy"
  865. },
  866. {
  867. "Name": "TIM CLOUDFRONT 17",
  868. "FLAG": "tim",
  869. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  870. "SNI": "",
  871. "TlsIP": "",
  872. "ProxyIP": "108.158.124.45",
  873. "ProxyPort": "80",
  874. "Info": "Proxy"
  875. },
  876. {
  877. "Name": "CLARO ULTRA",
  878. "FLAG": "claro",
  879. "Payload": "GET wss://[rotate=d30hpzc0hdefp7.cloudfront.net]/ HTTP/1.1[crlf]Host: metadatadb.lab.smartcontent.clarobrasil.mobi[crlf]Connection: Upgrade[crlf]Upgrade: Websocket [crlf][crlf]",
  880. "SNI": "",
  881. "TlsIP": "",
  882. "ProxyIP": "app.develop.clarobanca.imusica.nscreen.com.br",
  883. "ProxyPort": "80",
  884. "Info": "Proxy"
  885. },
  886. {
  887. "Name": "CLARO ULTRA 2",
  888. "FLAG": "claro",
  889. "Payload": "GET wss://[rotate=d30hpzc0hdefp7.cloudfront.net]/ HTTP/1.1[crlf]Host: metadatadb.lab.smartcontent.clarobrasil.mobi[crlf]Connection: Upgrade[crlf]Upgrade: Websocket [crlf][crlf]",
  890. "SNI": "",
  891. "TlsIP": "",
  892. "ProxyIP": "hmg-embed.claromusica.com",
  893. "ProxyPort": "80",
  894. "Info": "Proxy"
  895. },
  896. {
  897. "Name": "CLARO CLOUDFRONT",
  898. "FLAG": "claro",
  899. "Payload": "GET wss://[rotate=d30hpzc0hdefp7.cloudfront.net]/ HTTP/1.1[crlf]Host: metadatadb.lab.smartcontent.clarobrasil.mobi[crlf]Connection: Upgrade[crlf]Upgrade: Websocket [crlf][crlf]",
  900. "SNI": "",
  901. "TlsIP": "",
  902. "ProxyIP": "metadatadb.lab.smartcontent.clarobrasil.mobi",
  903. "ProxyPort": "80",
  904. "Info": "Proxy"
  905. },
  906. {
  907. "Name": "CLARO CLOUDFRONT 1",
  908. "FLAG": "claro",
  909. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net] [crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  910. "SNI": "108.139.143.183",
  911. "TlsIP": "108.139.143.183",
  912. "ProxyIP": "108.139.143.183",
  913. "ProxyPort": "443",
  914. "Info": "Tlsws"
  915. },
  916. {
  917. "Name": "CLARO CLOUDFRONT 2",
  918. "FLAG": "claro",
  919. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  920. "SNI": "45.60.199.194",
  921. "TlsIP": "",
  922. "ProxyIP": "",
  923. "ProxyPort": "443",
  924. "Info": "Ssl"
  925. },
  926. {
  927. "Name": "CLARO CLOUDFRONT 3",
  928. "FLAG": "claro",
  929. "Payload": "GET wss:/d30hpzc0hdefp7.cloudfront.net HTTP/1.1[crlf]Host: assets.clarobrasil.mobi[crlf]Connection: Upgrade[crlf]Upgrade: Websocket [crlf][crlf]",
  930. "SNI": "",
  931. "TlsIP": "",
  932. "ProxyIP": "assets.clarobrasil.mobi",
  933. "ProxyPort": "80",
  934. "Info": "Proxy"
  935. },
  936. {
  937. "Name": "CLARO CLOUDFRONT 4",
  938. "FLAG": "claro",
  939. "Payload": "GET wss://d30hpzc0hdefp7.cloudfront.net HTTP/1.1[crlf]Host: origin.api3.amxrest.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  940. "SNI": "",
  941. "TlsIP": "",
  942. "ProxyIP": "origin.api3.amxrest.net",
  943. "ProxyPort": "80",
  944. "Info": "Proxy"
  945. },
  946. {
  947. "Name": "CLARO CLOUDFRONT 5",
  948. "FLAG": "claro",
  949. "Payload": "GET wss://d30hpzc0hdefp7.cloudfront.net HTTP/1.1[crlf]Host: origin.api3.amxrest.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  950. "SNI": "",
  951. "TlsIP": "",
  952. "ProxyIP": "origin.api3.amxrest.net",
  953. "ProxyPort": "80",
  954. "Info": "Proxy"
  955. },
  956. {
  957. "Name": "CLARO CLOUDFRONT 6",
  958. "FLAG": "claro",
  959. "Payload": "GET wss://d30hpzc0hdefp7.cloudfront.net HTTP/1.1[crlf]Host: descomplica.com.br[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  960. "SNI": "",
  961. "TlsIP": "",
  962. "ProxyIP": "descomplica.com.br",
  963. "ProxyPort": "80",
  964. "Info": "Proxy"
  965. },
  966. {
  967. "Name": "CLARO CLOUDFRONT 7",
  968. "FLAG": "claro",
  969. "Payload": "GET https://d30hpzc0hdefp7.cloudfront.net HTTP/1.1[crlf]Host: metadatadb.lab.smartcontent.clarobrasil.mobi[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  970. "SNI": "",
  971. "TlsIP": "",
  972. "ProxyIP": "metadatadb.lab.smartcontent.clarobrasil.mobi",
  973. "ProxyPort": "80",
  974. "Info": "Proxy"
  975. },
  976. {
  977. "Name": "CLARO CLOUDFRONT 8",
  978. "FLAG": "claro",
  979. "Payload": "GET wss://d30hpzc0hdefp7.cloudfront.net/ HTTP/1.1[crlf]Host: metadatadb.lab.smartcontent.clarobrasil.mobi[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  980. "SNI": "metadatadb.lab.smartcontent.clarobrasil.mobi",
  981. "TlsIP": "metadatadb.lab.smartcontent.clarobrasil.mobi",
  982. "ProxyIP": "metadatadb.lab.smartcontent.clarobrasil.mobi",
  983. "ProxyPort": "80",
  984. "Info": "Proxy"
  985. },
  986. {
  987. "Name": "CLARO CLOUDFRONT 9",
  988. "FLAG": "claro",
  989. "Payload": "GET https://d30hpzc0hdefp7.cloudfront.net HTTP/1.1[crlf]Host: metadatadb.lab.smartcontent.clarobrasil.mobi[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  990. "SNI": "",
  991. "TlsIP": "",
  992. "ProxyIP": "metadatadb.lab.smartcontent.clarobrasil.mobi",
  993. "ProxyPort": "80",
  994. "Info": "Proxy"
  995. },
  996. {
  997. "Name": "OI FLARE",
  998. "FLAG": "oi",
  999. "Payload": "GET / HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Connection: Upgrade[crlf]Upgrade: Websocket [crlf][crlf]",
  1000. "SNI": "",
  1001. "TlsIP": "",
  1002. "ProxyIP": "13.226.52.28",
  1003. "ProxyPort": "80",
  1004. "Info": "Proxy"
  1005. },
  1006. {
  1007. "Name": "OI FLARE 1",
  1008. "FLAG": "oi",
  1009. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1\r\nHost: INVCLIENTES.VIRTUANET-SYSTEM.STORE\r\nUpgrade: ws\r\n\r\n",
  1010. "SNI": "www.hbogo.com.br",
  1011. "TlsIP": "104.16.53.91",
  1012. "ProxyIP": "",
  1013. "ProxyPort": "",
  1014. "Info": "Tlsws"
  1015. },
  1016. {
  1017. "Name": "OI FLARE 2",
  1018. "FLAG": "oi",
  1019. "Payload": "GET sni://www.hbogo.com.br HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Upgrade: websocket[crlf][crlf]",
  1020. "SNI": "www.hbogo.com.br",
  1021. "TlsIP": "104.16.51.91",
  1022. "ProxyIP": "",
  1023. "ProxyPort": "",
  1024. "Info": "Tlsws"
  1025. },
  1026. {
  1027. "Name": "OI FLARE 3",
  1028. "FLAG": "oi",
  1029. "Payload": "GET wss://bam.nr-data.net HTTP/1.1[crlf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1030. "SNI": "bam.nr-data.net",
  1031. "TlsIP": "bam.nr-data.net",
  1032. "ProxyIP": "",
  1033. "ProxyPort": "",
  1034. "Info": "Tlsws"
  1035. },
  1036. {
  1037. "Name": " OI FLARE 4",
  1038. "FLAG": "oi",
  1039. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: INVCLIENTES.VIRTUANET-SYSTEM.STORE[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1040. "SNI": "",
  1041. "TlsIP": "",
  1042. "ProxyIP": "104.16.53.111",
  1043. "ProxyPort": "80",
  1044. "Info": "Proxy"
  1045. },
  1046. {
  1047. "Name": "OI CLOUDFRONT",
  1048. "FLAG": "oi",
  1049. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1050. "SNI": "",
  1051. "TlsIP": "",
  1052. "ProxyIP": "hbomax.onelink.me",
  1053. "ProxyPort": "80",
  1054. "Info": "Proxy"
  1055. },
  1056. {
  1057. "Name": "OI CLOUDFRONT 1",
  1058. "FLAG": "oi",
  1059. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  1060. "SNI": "",
  1061. "TlsIP": "",
  1062. "ProxyIP": "play.hbomax.com",
  1063. "ProxyPort": "80",
  1064. "Info": "Proxy"
  1065. },
  1066. {
  1067. "Name": "OI CLOUDFRONT 2",
  1068. "FLAG": "oi",
  1069. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  1070. "SNI": "",
  1071. "TlsIP": "",
  1072. "ProxyIP": "play.hbomax.com",
  1073. "ProxyPort": "80",
  1074. "Info": "Proxy"
  1075. },
  1076. {
  1077. "Name": "OI CLOUDFRONT 3",
  1078. "FLAG": "oi",
  1079. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  1080. "SNI": "",
  1081. "TlsIP": "",
  1082. "ProxyIP": "hbomax.onelink.me",
  1083. "ProxyPort": "80",
  1084. "Info": "Proxy"
  1085. },
  1086. {
  1087. "Name": "OI CLOUDFRONT 4",
  1088. "FLAG": "oi",
  1089. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d30hpzc0hdefp7.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  1090. "SNI": "",
  1091. "TlsIP": "",
  1092. "ProxyIP": "play.hbomax.com",
  1093. "ProxyPort": "80",
  1094. "Info": "Proxy"
  1095. },
  1096. {
  1097. "Name": "OI CLOUDFRONT 5",
  1098. "FLAG": "oi",
  1099. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf",
  1100. "SNI": "",
  1101. "TlsIP": "",
  1102. "ProxyIP": "108.139.95.100",
  1103. "ProxyPort": "80",
  1104. "Info": "Proxy"
  1105. },
  1106. {
  1107. "Name": "OI CLOUDFRONT 6",
  1108. "FLAG": "oi",
  1109. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection:Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1110. "SNI": "hbomax.onelink.me",
  1111. "TlsIP": "hbomax.onelink.me",
  1112. "ProxyIP": "hbomax.onelink.me",
  1113. "ProxyPort": "80",
  1114. "Info": "Proxy"
  1115. },
  1116. {
  1117. "Name": "OI CLOUDFRONT 7",
  1118. "FLAG": "oi",
  1119. "Payload": "GET / HTTP/1.1[crlf]Host: d30hpzc0hdefp7.cloudfront.net[crlf]Connection:Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1120. "SNI": "play.hbomax.com",
  1121. "TlsIP": "play.hbomax.com",
  1122. "ProxyIP": "play.hbomax.com",
  1123. "ProxyPort": "80",
  1124. "Info": "Proxy"
  1125. }
  1126. ]
  1127. }

comments powered by Disqus