Wagner08

SUBMITTED BY: Wagner

DATE: April 26, 2023, 1:48 a.m.

UPDATED: July 17, 2024, 6:55 p.m.

FORMAT: Text only

SIZE: 87.6 kB

History Raw Download

HITS: 11295

Report
  1. {
  2. "Version": "41",
  3. "ReleaseNotes": "⛔ IMPORTANTE ⛔\n
  4. ➡ ATUALIZAÇÃO EXTREMAMENTE NECESSÁRIO PARA O FUNCIONAMENTO DO APP 🚀",
  5. "UrlUpdate": "https://bitbin.it/Imot6bhm/raw/",
  6. "Sms": "",
  7. "EmailFeedback": "",
  8. "UrlContato": "",
  9. "UrlTermos": "",
  10. "CheckUser": "true",
  11. "UdpPort": "7300;7400;7500;7600;7700",
  12. "Servers": [
  13. {
  14. "Name": "SERVIDOR BR 01 🇧🇷",
  15. "TYPE": "premium",
  16. "FLAG": "br.png",
  17. "ServerIP": ".www.galego.store",
  18. "CheckUser": "",
  19. "ServerPort": "22",
  20. "SSLPort": "443",
  21. "USER": "",
  22. "PASS": ""
  23. }
  24. ],
  25. "Networks": [
  26. {
  27. "Name": "VIVO REDES SOCIAIS 💜",
  28. "FLAG": "vivo",
  29. "Payload": "HEAD /app46 HTTP/1.1[lf]Host: [rotate=lt1.inthend.shop;lt2.inthend.shop;lt3.inthend.shop][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]@@@PATCH /app46 HTTP/1.1[lf]Host: [rotate=lt1.inthend.shop;lt2.inthend.shop;lt3.inthend.shop][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]@@@GET /app46 HTTP/1.1[lf]Host: [rotate=lt1.inthend.shop;lt2.inthend.shop;lt3.inthend.shop][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  30. "SNI": "",
  31. "TlsIP": "",
  32. "ProxyIP": "104.18.99.70#104.18.28.182#104.18.33.113#104.19.239.25#104.19.240.93#104.19.241.93#104.17.64.225#172.67.188.168",
  33. "ProxyPort": "80",
  34. "Info": "Proxy"
  35. },
  36. {
  37. "Name": "VIVO FLARE 1 🟣",
  38. "FLAG": "vivo",
  39. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  40. "SNI": "",
  41. "TlsIP": "",
  42. "ProxyIP": "162.159.128.53#104.24.10.16#104.24.11.16#104.24.24.34#104.24.25.34#172.64.130.2#172.64.131.2#172.64.194.2#172.64.195.2#fr.poichongterbackrote.cf#pt.roagzipel.tk#104.18.22.26#support.deezer.com#104.16.51.111#104.16.53.111",
  43. "ProxyPort": "80",
  44. "Info": "Proxy"
  45. },
  46. {
  47. "Name": "VIVO FLARE 2 🟣",
  48. "FLAG": "vivo",
  49. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  50. "SNI": "",
  51. "TlsIP": "",
  52. "ProxyIP": "[app_host]",
  53. "ProxyPort": "80",
  54. "Info": "Proxy"
  55. },
  56. {
  57. "Name": "VIVO FLARE 3 🟣",
  58. "FLAG": "vivo",
  59. "Payload": "CONNECT 127.0.0.1:80[split]\\nACL / HTTP/1.1\\nUpgrade: websocket\\n\\n@@@[split]\\nACL / HTTP/1.1\\nUpgrade: websocket\\n\\n@@@[delay_split][lf]ACL / HTTP 1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[delay_split]BCOPY / [crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim. com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify. com;pagamentoonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com; c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2. interflashplusvpnpro.cloud][crlf][crlf][crlf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: recarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: vigia.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: workplaceservices.surveymonkey.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]",
  60. "SNI": "",
  61. "TlsIP": "",
  62. "ProxyIP": "45.95.66.95#177.67.82.201",
  63. "ProxyPort": "80",
  64. "Info": "Proxy"
  65. },
  66. {
  67. "Name": "VIVO FLARE 4 🟣",
  68. "FLAG": "vivo",
  69. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim. com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify. com;pagamentoonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com; c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2. interflashplusvpnpro.cloud][crlf][crlf][crlf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: recarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: vigia.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: workplaceservices.surveymonkey.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]",
  70. "SNI": "",
  71. "TlsIP": "",
  72. "ProxyIP": "45.95.66.95#177.67.82.201",
  73. "ProxyPort": "80",
  74. "Info": "Proxy"
  75. },
  76. {
  77. "Name": "VIVO FLARE 5 🟣",
  78. "FLAG": "vivo",
  79. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[split][delay_split]ACL / /n@@@[split][delay_split]ACL / /\n@@@[split]GET HTTP/1.1[crlf][crlf]HTTP/2: Ua[crlf]@@@[split]GET HTTP/1.1[crlf][crlf]HTTP/2: [crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUICK/11: Ua[crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUIC/11: Ua[crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf@@@[split] [crlf]GET ua.com@www.galego.store[protocol][crlf]CONNECT www.galego.store[protocol][crlf][crlf]@@@[delay_split]ACL / /\n[delay]",
  80. "SNI": "",
  81. "TlsIP": "",
  82. "ProxyIP": "45.95.66.95#177.67.82.201",
  83. "ProxyPort": "80",
  84. "Info": "Proxy"
  85. },
  86. {
  87. "Name": "VIVO FLARE 6 🟣",
  88. "FLAG": "vivo",
  89. "Payload": "[delay_split]CONNECT www.galego.store:22 HTTP/1.1[crlf]Host: www.galego.store[crlf]X-Online-Host: www.galego.store[crlf]X-Forward-Host: www.galego.store[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[delay_split]ACL www.galego.store:22 HTTP/1.1[crlf]Host: www.galego.store[crlf]X-Online-Host: www.galego.store[crlf]X-Forward-Host: www.galego.store[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[split][lf]ACL / [lf][auth]:80[lf]@@@[split]ACL / \n@@@[split][lf]ACL / [auth][lf]@@@[split][delay_split]ACL / /\n",
  90. "SNI": "",
  91. "TlsIP": "",
  92. "ProxyIP": "www.galego.store",
  93. "ProxyPort": "80",
  94. "Info": "Proxy"
  95. },
  96. {
  97. "Name": "VIVO FLARE 7 🟣",
  98. "FLAG": "vivo",
  99. "Payload": "[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]@@@[delay_split]GET /HTTP 1.2@@@[delay_split]GET http://[rotate=google.com.br;vivo.com.br;deezer.com]/ HTTP/1.1[crlf]Host: [rotate=google.com.br;vivo.com.br;deezer.com][crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split]GET http://vivo.com.br/ HTTP/1.1[crlf]Host: vivo.com.br[crlf][crlf]@@@[delay_split]GET http://google.com/ HTTP/1.1[crlf]Host: google.com[crlf][crlf]",
  100. "SNI": "",
  101. "TlsIP": "",
  102. "ProxyIP": "177.67.82.201#45.95.66.95",
  103. "ProxyPort": "80",
  104. "Info": "Proxy"
  105. },
  106. {
  107. "Name": "VIVO FLARE 8 🟣",
  108. "FLAG": "vivo",
  109. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  110. "SNI": "",
  111. "TlsIP": "",
  112. "ProxyIP": "[app_host]",
  113. "ProxyPort": "80",
  114. "Info": "Proxy"
  115. },
  116. {
  117. "Name": "VIVO SECURITY 1 💜",
  118. "FLAG": "vivo",
  119. "Payload": "[delay_split][lf]POST /[lf]Host: [lf][lf]@@@[delay_split][lf]UPDATE /[lf]Host: [lf][lf]@@@[split] ACL http:// stats.g.doubleclick.net HTTP/1.3[crlf] http:// www.comarkinstruments.net[split][crlf][lf]@@@[split] ACL http://interatividade.vivo.ddivulga.com/produto/ HTTP/1.3[crlf] http:// www.comarkinstruments.net[split][crlf][lf]@@@CONNECT 127.0.0.1:80[crlf][instant_split]ACL HTTP/1.1[auth][ssh][crlf]Upgrade: Websocket[crlf]@@@[delay_split][lf]ACL / HTTP/1.9[lf]Host: tim.curcumy-saude.site; vivo-pr.curcumy-saude.site;google.com;ec2-100-20-0-0.us-west-2.compute.amazonaws.com\\\\n\\\\n\\\\n\\\\@@@[split][delay_split] ACL / STATUS200@@@[split]ACL HTTP/1.9[crlf][crlf]QUIC/11:80 Ua[crlf]@@@ACL / HTTP/1.1[crlf]Host: [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: [random=www.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]X-Forwarded-For: [rotate=www.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit]@openkf3[crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: microsoft.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: amazonaws.com[crlf]Upgrade: Keep-Alive[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n@@@[delay_split]PUT / Cache-Control: private: 13.33.131.6[crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]",
  120. "SNI": "",
  121. "TlsIP": "",
  122. "ProxyIP": "45.95.66.95",
  123. "ProxyPort": "8080",
  124. "Info": "Proxy"
  125. },
  126. {
  127. "Name": "VIVO SECURITY 2 💜",
  128. "FLAG": "vivo",
  129. "Payload": "GET / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim. com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify. com;pagamentoonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com; c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2. interflashplusvpnpro.cloud][crlf][crlf][crlf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split]ACL AtlasN42/ HTTP/1.1[crlf]Host: 204.216.165.239[crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br[lf]@@@ACL / HTTP/1.1[crlf]Host: [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]X-Forwarded-For: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net [crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]",
  130. "SNI": "",
  131. "TlsIP": "",
  132. "ProxyIP": "45.95.66.95",
  133. "ProxyPort": "8080",
  134. "Info": "Proxy"
  135. },
  136. {
  137. "Name": "VIVO SECURITY 3 💜",
  138. "FLAG": "vivo",
  139. "Payload": "ACL HTTP/1.1 Host: plus.google.com \r\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\n\\n\\n \\n@@@CONNECT 127.0.0.1:8080[instant_split]GET www.veek.com.br HTTP/1.1[crlf][crlf]@@@CONNECT [host_port] [protocol][crlf][crlf]@@@CONNECT [host_port] [protocol][crlf][crlf]@@@CONNECT [host_port] HTTP/1.1[crlf][crlf]HEAD http:/// [protocol][crlf][crlf]@@@CONNECT 45.95.66.95:8080HTTP/1.1[crlf][crlf]@@@[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: www.vivo.com.br\\\\n\\\\n\\\\n \\\\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: chat.whatsapp.com/EOb866Y9YUE4yZ3JDTPW1m[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split]GET SASK / HTTP/1.1[crlf]Host: gedoc.vivo.com.br[crlf]Connection: Upgrade[crlf]@@@[delay_split][lf]GET / 55@@@GET-CONTROL ws://[app_host] HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split]ACL AtlasN42/ HTTP/1.1[crlf]Host: 45.95.66.95[crlf]Upgrade: websocket[crlf][crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: 45.95.66.95[crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]",
  140. "SNI": "",
  141. "TlsIP": "",
  142. "ProxyIP": "45.95.66.95",
  143. "ProxyPort": "8080",
  144. "Info": "Proxy"
  145. },
  146. {
  147. "Name": "VIVO SECURITY 4 💜",
  148. "FLAG": "vivo",
  149. "Payload": "[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote HTTP/1.1[lf][lf]@@@[split][method][host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote HTTP/1.1[lf][lf]@@@[delay_split]GET http://d1n212ccp6ldpw.cloudfront.net HTTP/1.1\r\n\r\n\r\nCONNECT 127.0.0.1:443HTTP/1.0X-Online-Host: http://download-this-pl.info/124BR/MP.html \r\n\r\n@@@[delay_split]CONNECT http://i.vivo.ddivulga.com/i/gp/ HTTP/1.1[crlf][split]@@@[delay_split]CONNECT http://interatividade.vivo.ddivulga.com/produto/ HTTP/1.0[crlf][split]@@@[delay_split]CONNECT http://navegue.vivo.ddivulga.com/pacote/ HTTP/1.1[crlf][split]@@@[delay_split]CONNECT http://portalrecarga.vivo.com.br/recarga/home/ HTTP/1.1[lf]@@@[split]\r\nCONNECT [host_port]@portalrecarga.vivo.com.br/recarga/home/[protocol]\r\nGETÂ http://sdp.vivo.com.br/ HTTP/1.1\r\nHost: portalrecarga.vivo.com.br/recarga/home/produto[crlf]X-Forwarded-For: portalrecarga.vivo.com.br/recarga/home/\r\n\r\n\r\n@@@[delay_split]CONNECT [host_port] GET http://portalrecarga.vivo.com.br/recarga/home/187.8.166.33 [protocol][lf][split]CONNECT 187.8.166.33 CONNECT [host_port]149.56.42.236 HTTP/1.1[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: tiktok.com[lf]@@@GET / HTTP/1.4[crlf]Host: 2804:5364:7000:1:1:1:64ad:7ebe[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][rotate=GET;ACL;CONNECT;HEAD;PROPATCH;DEBELETE] / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split]ACL /Set-Cookie: sessionID=fbafa6258966f49f252b404ab9e5c219; path=/admin; domain=revive.vivointernetgratis.com.br; secure; HttpOnly; SameSite=strict HTTP/1.1][lf]@@@[delay_split]ACL /revive.vivointernetgratis.com.br HTTP/1.1][lf]@@@ACL http://1.1.1.1rotate= buzzfeed.com ; mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com ; myspace .com ; mobile.google.com ;1.0.0.5[crlf]@@@[delay_split]ACL / HTTP/1.1[lf]Host: gedoc.vivo.com.br[crlf][crlf]Pz4 / HTTP/1.1[lf]Host:gauchossh.xyz[crlf]Connection: Upgrade[lf]Upgrade: Websocket[crlf][crlf]@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  150. "SNI": "",
  151. "TlsIP": "",
  152. "ProxyIP": "45.95.66.95",
  153. "ProxyPort": "8080",
  154. "Info": "Proxy"
  155. },
  156. {
  157. "Name": "VIVO SECURITY 5 💜",
  158. "FLAG": "vivo",
  159. "Payload": "GET /websocket-endpoint HTTP/1.1\r\nHost: vivo.com.br\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Key: [random-key]\r\nSec-WebSocket-Version: 13\r\nAuthorization: Bearer [W+zwGjMsFLzD5KV7FHANQg==]@@@CONNECT 127.0.0.1:80[split]\\nACL / HTTP/1.1\\nUpgrade: websocket\\n\\n@@@[split]\\nACL / HTTP/1.1\\nUpgrade: websocket\\n\\n@@@[delay_split][lf]ACL / HTTP 1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[delay_split]BCOPY / [crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: vigia.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@GET / HTTP/1.1\\r\\n\r\nHost: [app_host]\\r\\n\r\nConnection: Upgrade\\r\\n\r\nUser-Agent: [ua]\\r\\n\r\nUpgrade: websocket\\r\\n\\r\\n@@@[delay_split]ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com]@SSHPLUSPRO[crlf]@@@[delay_split][crlf] SEARCH HTTP/1.1[crlf]Host: www.google.com.br[crlf]Connection: keep-alive[crlf]Referer: http://www.google.com.br[crlf][crlf]@@@CONNECT tibr-sdgw.datami.net:22 [protocol][crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: [host] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]@@@ACL HTTP/1.1 Host: plus.google.com \\r\\n \\r\\n@@@[delay_split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: orion.c6bank.app[crlf][crlf]@@@[delay_split]GET / HTTP/1.1[crlf]Host: vivo.com.br[crlf]Upgrade: websocket[crlf][crlf]@@@[split]GET HTTP/1.1[crlf][crlf]Host: Websocket[crlf]@@@[split]GET / HTTP/1.1[crlf][crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocket[crlf][crlf]@@@ACL 127.0.0.1:80[instant_split]ACL www.veek.com.br HTTP/1.9[crlf][crlf]@@@MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: [app_host][crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)tlcomputingbr[crlf]Referer: http://www.google.com[crlf]@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split][lf]ACL / [protocol] [crlf]Host: microsoft.com[crlf]Connection: Upgrade[crlf]@@@[delay_split]BCOPY / [crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: 45.95.66.95]@@@POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: [app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]@@@[delay_split][raw] ACL HTTP/2.0[crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portalrecarga.vivo.com.br[lf]",
  160. "SNI": "",
  161. "TlsIP": "",
  162. "ProxyIP": "45.95.66.95",
  163. "ProxyPort": "8080",
  164. "Info": "Proxy"
  165. },
  166. {
  167. "Name": "VIVO SECURITY 6 💜✅",
  168. "FLAG": "vivo",
  169. "Payload": "GET / HTTP/1.1[crlf]Host: [random=api.whatsapp.com;m.twitter.com;m.waze.com;web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;twitter.com;dns.web.whatsapp.com;static.whatsapp.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@PATCH / HTTP/1.1[crlf]Host: [random=api.whatsapp.com;m.twitter.com;m.waze.com;web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;twitter.com;dns.web.whatsapp.com;static.whatsapp.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@HEAD / HTTP/1.1[crlf]Host: [random=api.whatsapp.com;m.twitter.com;m.waze.com;web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;twitter.com;dns.web.whatsapp.com;static.whatsapp.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  170. "SNI": "",
  171. "TlsIP": "",
  172. "ProxyIP": "177.67.82.201",
  173. "ProxyPort": "8080",
  174. "Info": "Proxy"
  175. },
  176. {
  177. "Name": "VIVO EASY 1 💚",
  178. "FLAG": "vivo",
  179. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  180. "SNI": "",
  181. "TlsIP": "",
  182. "ProxyIP": "172.64.144.109#104.18.43.147#172.64.195.2#172.64.194.2#172.64.131.2#172.64.130.2#104.24.10.16#104.24.11.16#104.24.25.34#104.24.24.34#172.64.144.109#vigia.vivo.com.br#104.18.7.80#legado.vivo.com.br#104.18.6.41#104.18.6.80#104.17.70.206#104.17.71.206#104.17.72.206#104.17.73.206#104.17.74.206#104.17.75.206#104.18.6.80#104.18.7.80#104.18.7.41#104.18.6.41#162.159.128.7#162.159.138.6#sso.hotjar.com#learning.hotjar.com#js.partnerstack.com#insights.hotjar.com#images.ctfassets.net#hotjar.wistia.com#www.hotjar.com#cloud.vivo.com.br",
  183. "ProxyPort": "80",
  184. "Info": "Proxy"
  185. },
  186. {
  187. "Name": "VIVO EASY 2 💚",
  188. "FLAG": "vivo",
  189. "Payload": "GET /app46 HTTP/1.1[crlf]Host: [random=lt1.inthend.shop;lt2.inthend.shop;lt3.inthend.shop][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  190. "SNI": "",
  191. "TlsIP": "",
  192. "ProxyIP": "store-front.ampli.com.br#paypal-logos.babbel.com#108.139.182.14#108.139.182.31#99.84.31.35#99.84.31.66#99.84.31.129#18.161.200.107#18.161.200.104#18.161.200.59#18.161.200.55#18.161.200.16#18.67.129.23#18.67.129.74#18.67.129.99#18.67.129.104#99.84.31.7#99.84.31.66#99.84.31.129#65.8.214.18#65.8.214.30#65.8.214.65#65.8.214.76#65.8.214.80#65.8.214.104#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.138.64.15#18.67.76.54#63.34.109.75#18.67.76.95#108.158.161.49#13.227.126.39#99.84.37.44#13.226.22.87#108.138.64.15#18.67.76.54#63.34.109.75#18.67.76.95",
  193. "ProxyPort": "80",
  194. "Info": "Proxy"
  195. },
  196. {
  197. "Name": "CONEXÃO UNIVERSAL 2 🟣🟢🔵🔴✅",
  198. "FLAG": "vivo",
  199. "Payload": "[rotate=ACL;GET;PATCH;HEAD] wss://[rotate=lt12.inthend.shop;lt22.inthend.shop;lt33.inthend.shop;www.galego.store]/app46 HTTP/1.0[crlf]Host: [rotate=web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;m.waze.com;m.twitter.com;twitter.com;c.whatsapp.net;media.whatsapp.net;web.whatsapp.com;m.waze.com;web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;m.waze.com;m.twitter.com;twitter.com;web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;musicaclaro.com.br][crlf]Upgrade: Websocket[crlf]Proxy-Connection: Keep-Alive; Upgrade[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]tl[crlf][crlf]",
  200. "SNI": "",
  201. "TlsIP": "",
  202. "ProxyIP": "frontend-tim-recarga-client.m4u.com.br#52.85.213.77#52.85.213.112#52.85.213.121#52.85.213.74#52.67.198.135#cc-brand.plat-m4u.io#108.139.113.45#dex.descomplica.com.br#13.33.123.107#18.67.129.91#18.67.129.103#18.67.129.119#18.67.129.10#oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#13.227.126.39#13.227.126.40#13.227.126.91#13.227.126.39#13.227.126.40#13.227.126.91#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#104.26.5.32#104.16.239.166#104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  203. "ProxyPort": "80",
  204. "Info": "Proxy"
  205. },
  206. {
  207. "Name": "VIVO - TIM 🟣🟢🔵",
  208. "FLAG": "vivo",
  209. "Payload": "[delay_split][crlf][rotate=PROPFIND;PROPPATCH;MKCOL;COPY;MOVE;LOCK;UNLOCK;UPDATE;MERGE;ORDERPATCH;PATCH;SEARCH] /[rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com;analytics.google.com;www.c6bank.app;www.c6bank.com.br] HTTP/1.0[crlf]Host: [rotate=www.galego.store;global-4-lvs-colossus-10.opera-mini.net][crlf]Upgrade: Websocket[crlf]Proxy-Connection: Keep-Alive; Upgrade[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]@TSTOPSPEED[crlf][crlf]",
  210. "SNI": "",
  211. "TlsIP": "",
  212. "ProxyIP": "::ffff:177.67.82.201#::ffff:45.95.66.95#www.galego.store#104.16.51.111#104.18.6.41#172.64.150.8#104.18.37.248#www.c6bank.app",
  213. "ProxyPort": "80",
  214. "Info": "Proxy"
  215. },
  216. {
  217. "Name": "VIVO - TIM 1 🟣🔵",
  218. "FLAG": "vivo",
  219. "Payload": "[delay_split]PROPPATCH /analytics.google.com HTTP/1.0[crlf]Host: [rotate=www.galego.store;global-4-lvs-colossus-10.opera-mini.net][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]@TSTOPSPEED[crlf][crlf]@@@[delay_split][crlf]POLL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Connection: Keep-Alive[crlf]Upgrade:Websocket[crlf][crlf]",
  220. "SNI": "",
  221. "TlsIP": "",
  222. "ProxyIP": "177.67.82.201#162.159.6.80#45.95.66.95#104.16.51.111#::ffff:45.95.66.95#::ffff:104.16.51.111",
  223. "ProxyPort": "80",
  224. "Info": "Proxy"
  225. },
  226. {
  227. "Name": "VIVO - TIM 2 🟣🔵",
  228. "FLAG": "vivo",
  229. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
  230. "SNI": "",
  231. "TlsIP": "",
  232. "ProxyIP": "45.95.66.95#177.67.82.201",
  233. "ProxyPort": "80",
  234. "Info": "Proxy"
  235. },
  236. {
  237. "Name": "VIVO - TIM 3 🟣🔵",
  238. "FLAG": "vivo",
  239. "Payload": "GET / HTTP/1.1 Host: www.galego.store Connection: Upgrade Upgrade: websocket\r\n\r\n@@@ACL / HTTP/1.9[crlf]Host: c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf][split]ACL / HTTP/1.9[crlf]Host: www.galego.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  240. "SNI": "",
  241. "TlsIP": "",
  242. "ProxyIP": "104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  243. "ProxyPort": "80",
  244. "Info": "Proxy"
  245. },
  246. {
  247. "Name": "TIM FLARE 1 💙",
  248. "FLAG": "tim",
  249. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=mtls.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;www.c6bank.com.br;creatorsupport.deezer.com;www.c6bank.com.br;ajuda.c6bank.com.br][crlf][delay_split]ACL / HTTP/1.9[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Dalvik/2.1.0 (Linux; U; Android 10; MED-LX9 Build/HUAWEIMED-LX9)[crlf]X-Online-Host:[app_host]www.youtube.com[crlf]X-Forwarded-For:www.youtube.com[crlf]X-Forward-Host: www.skynet.com[crlf][crlf]",
  250. "SNI": "",
  251. "TlsIP": "",
  252. "ProxyIP": "104.19.241.25",
  253. "ProxyPort": "80",
  254. "Info": "Proxy"
  255. },
  256. {
  257. "Name": "TIM FLARE 2 💙",
  258. "FLAG": "tim",
  259. "Payload": "ACL /index.html HTTP/1.1[crlf]Host: live.vivo.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: www.galego.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@PACL /wss.html HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: www.galego.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.9[lf]Host: www.galego.store[lf]Upgrade: Websocket[lf]User-Agent: Mobile Safari/9 OPR/9 [lf][split][lf]@@@ACL /wss.html HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: Websocket[crlf]Referer:@TMYCOMNECTVPN[crlf][crlf]#ACL /wss.html HTTP/1.1[lf]Host: www.galego.store[lf]Expect: 100-tmyvpn[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]@@@ACL /wss.html HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: Websocket[crlf]Referer:@TMYCOMNECTVPN[crlf][crlf]",
  260. "SNI": "",
  261. "TlsIP": "",
  262. "ProxyIP": "docs.datalogz.io#www.psagot.co.il#investnews.com.br#www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.18.33.113",
  263. "ProxyPort": "80",
  264. "Info": "Proxy"
  265. },
  266. {
  267. "Name": "TIM FLARE 3 💙",
  268. "FLAG": "tim",
  269. "Payload": "ACL / HTTP/1.3[crlf]Host: cdn.permutive.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: www.galego.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: login-homebroker.c6bank.com.br [crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: www.galego.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL wss://www.galego.store HTTP/1.1[lf]Host: [rotate=google.es;www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]",
  270. "SNI": "",
  271. "TlsIP": "",
  272. "ProxyIP": "api.vivo.com.br#tecnoblog.com.br#172.64.154.143",
  273. "ProxyPort": "80",
  274. "Info": "Proxy"
  275. },
  276. {
  277. "Name": "TIM FLARE 4 💙",
  278. "FLAG": "tim",
  279. "Payload": "[delay_split]ACL wss://www.galego.store HTTP/1.1[lf]Host: [rotate=browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]@@@GET / HTTP/1.1[crlf]Host: www.galego.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/4.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: cdn.cookielaw.org [crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf][crlf]@@@GET /cdn-cgi/trace HTTP/1.1[crlf]Host: gw.ruangguru.com[crlf][crlf]GET-RAY / HTTP/1.1[crlf]Host: www.galego.store[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  280. "SNI": "",
  281. "TlsIP": "",
  282. "ProxyIP": "substack.com#fee.org#tender.cash#explore.zoom.us#community.zoom.com#kit.fontawesome.com#developers.zoom.us#ticketing.ruangguru.com#edu.ruangguru.com#www.brainacademy.id",
  283. "ProxyPort": "80",
  284. "Info": "Proxy"
  285. },
  286. {
  287. "Name": "TIM DIRECT 1 💙",
  288. "FLAG": "tim",
  289. "Payload": "[delay_split] ACL / HTTP/1.1[crlf]Host:[rotate= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@ACL HTTP/ \\nhost: www.google.com[lf]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@HTTP/1.1[lf]HTTP/ [lf]X-Status-Identifier: ANYPROXY[lf]Host: [rotate=yhjq23.360.com.fail;alt4.aspmx.l.google.com;www.xhtsw.163.com.fail;www.storm.canny.io;www.reimaginetomorrow-qa.disney.com;www.minecraft.msgfocus.com;www.netflixawards.com;x115gzbrpk.execute-api.us-east-1.amazonaws.com;google.traiteurjongen.com;aspmx.l.google.com.4xfun.com;aspmx.l.google.com.469.it. 20secondenhandenwassen.nl;aspmx.l.google.com.469.it;alt2.aspmx.l.google.com.0088.tv;alt1.aspmx.l.google.com.123sexshop.be;alt2.aspmx.l.google.com.sac-surveyors.org;alt2.aspmx.l.google.com.meta-meta.com;slcch03bl9.execute-api.us-east-1.amazonaws.com][lf]",
  290. "SNI": "",
  291. "TlsIP": "",
  292. "ProxyIP": "177.67.82.201#45.95.66.95",
  293. "ProxyPort": "80",
  294. "Info": "Proxy"
  295. },
  296. {
  297. "Name": "TIM DIRECT 2 💙",
  298. "FLAG": "tim",
  299. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=mtls.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;www.c6bank.com.br;creatorsupport.deezer.com;www.c6bank.com.br;ajuda.c6bank.com.br][crlf][delay_split]ACL / HTTP/1.9[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: Dalvik/2.1.0 (Linux; U; Android 10; MED-LX9 Build/HUAWEIMED-LX9)[crlf]X-Online-Host:[app_host]www.youtube.com[crlf]X-Forwarded-For:www.youtube.com[crlf]X-Forward-Host: www.skynet.com[crlf][crlf]@@@ACL wss://www.galego.store HTTP/1.1[lf]Host: [rotate=google.es;www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]",
  300. "SNI": "",
  301. "TlsIP": "",
  302. "ProxyIP": "177.67.82.201#45.95.66.95",
  303. "ProxyPort": "80",
  304. "Info": "Proxy"
  305. },
  306. {
  307. "Name": "TIM DIRECT 3 💙",
  308. "FLAG": "tim",
  309. "Payload": "HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]",
  310. "SNI": "",
  311. "TlsIP": "",
  312. "ProxyIP": "177.67.82.201#45.95.66.95",
  313. "ProxyPort": "80",
  314. "Info": "Proxy"
  315. },
  316. {
  317. "Name": "TIM DIRECT 4 💙",
  318. "FLAG": "tim",
  319. "Payload": "HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\n@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.m;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;cloudfront.net;www.dropbox.com][lf]@@@HTTP/ 1[lf]Host: ok.ru HTTP/1.1[crlf]Host: ok.ru",
  320. "SNI": "",
  321. "TlsIP": "",
  322. "ProxyIP": "177.67.82.201#45.95.66.95",
  323. "ProxyPort": "80",
  324. "Info": "Proxy"
  325. },
  326. {
  327. "Name": "TIM SALDO VÁLIDO 1 💙",
  328. "FLAG": "tim",
  329. "Payload": "ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@masterpayssh[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: api.digicert.com[crlf][split][crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]",
  330. "SNI": "",
  331. "TlsIP": "",
  332. "ProxyIP": "104.19.241.93#172.64.154.143#104.17.64.225#104.19.239.25#172.64.154.143#104.16.239.166",
  333. "ProxyPort": "80",
  334. "Info": "Proxy"
  335. },
  336. {
  337. "Name": "TIM SALDO VÁLIDO 2 💙",
  338. "FLAG": "tim",
  339. "Payload": "ACL / HTTP/1.9[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.9[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade:Dalvik/2.1.0 (Linux; U; Android 10; moto g(7) play Build/QPYS30.52-22-14)[crlf]Referer: adnqueimaroscadogrupo.xyz[crlf]X-Online-Host: adnqueimaroscadogrupo.xyz[crlf]X-Forward-Host: adnqueimaroscadogrupo.xyz[crlf]X-Forwarded-For: adnqueimaroscadogrupo.xyz[crlf][crlf]#ACL / HTTP/1.3[crlf]Host: [rotate=mtls.sandbox.c6bank.com.br;app.sandbox.c6bank.com.br;api.sandbox.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: www.galego.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.9[crlf]host: teste.sandbox.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  340. "SNI": "",
  341. "TlsIP": "",
  342. "ProxyIP": "104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225#172.64.154.143#104.16.53.111#152.67.41.238#146.235.28.41#104.26.8.84",
  343. "ProxyPort": "80",
  344. "Info": "Proxy"
  345. },
  346. {
  347. "Name": "TIM SALDO VÁLIDO 3 💙",
  348. "FLAG": "tim",
  349. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: www.vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: www.vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@ACL wss://www.galego.store HTTP/1.1[lf]Host: [rotate=google.es;www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]@@@ACL /index.html HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.9[crlf]host:accounts.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL /cdn-cgi/trace HTTP/1.9[crlf]host:accounts.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  350. "SNI": "",
  351. "TlsIP": "",
  352. "ProxyIP": "pre-onboarding-p.c6bank.app#3.126.202.50#108.138.17.1918.66.122.124#52.30.35.186#10.101.50.118#108.138.17.113#www.pomonaelectronics.com#www.beha-amprobe.com#www.pomonaelectronics.com#www.oiplace.com.br#www.usclaro.com#www.pruftechnik.com#104.17.64.225#104.16.239.166#104.16.51.111#104.18.33.113#104.18.99.70#104.19.241.93",
  353. "ProxyPort": "80",
  354. "Info": "Proxy"
  355. },
  356. {
  357. "Name": "TIM SALDO VÁLIDO 4 💙",
  358. "FLAG": "tim",
  359. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=support.snapfish.com;support.mapmyfitness.com;www.galego.store;support.kontakt.io;uarecord.zendesk.com;sweetroad.zendesk.com;vsco.zendesk.com;support.onetwotrip.com;support.viki.com;support.holmsecurity.com;support.mobileroadie.com;support.neuronmocap.com;support.dxo.com;help.clickfunnels.com;screencastsonline.zendesk.com;support.celtx.com;support.muslimpro.com;support.discogs.com;sginteractive.zendesk.com;support.credly.com;support.sugarsync.com;help.rushlimbaugh.com;support.kidizen.com;support.twilio.com;support.mumbojumbo.com;tpbgame.zendesk.com;ingresshelp.zendesk.com;help.ableton.com;help.spreadshirt.com;wetransfer.zendesk.com;help.issuu.com;meetv.zendesk.com;eight.zendesk.com;help.iheart.com;help.standingstonegames.com;help.trainerize.com;help.coasttocoastam.com;support.securly.com;workflowy.zendesk.com;support.renvu.com;g5entertainment.zendesk.com;support.zipcar.com;gemsofwar.zendesk.com;support.watch.nba.com;faq.hellosign.com;screenad.eu;support.riotgames.com;support.paradoxplaza.com;layananku.airavpn.site;drpanda.zendesk.com;support.fiplab.com;help.behance.net;slack.zendesk.com;aide.e-monsite.com;support.cwtv.com;support.strikingly.com;prodigygame.zendesk.com;support.nixplay.com;flaregames.zendesk.com:support.cmon.com;faq.mightynetworks.com;support.wealthnavi.com;help.musicnotes.com;help.makemeslick.com;help.getmevo.com;support.abra.com;help.tcgplayer.com;mykronoz.zendesk.com;support.ankama.com;help.grindr.com;support.gordonedwards.net;support.mobi2go.com;support.ipvanish.com;support.withings.com;lykkex.zendesk.com;pggmencoleden.zendesk.com;help.positivegrid.com;helpdesk.flexradio.com;help.dreamhost.com;support.cambr;dgeenglish.org;support.ask.fm;care.pressreader.com;help.olx.in;moonactive.zendesk.com;support.getbase.com;history.zendesk.com;produttivo.zendesk.com;support.orcid.org;support.golocalapps.com;support.moneytap.jp;help.acuityscheduling.com;support-pocket.sumally.com;help.remind.com;support.awesome-table.com;support.ampleair.com.au;cs.vtcmobile.vn;support.oneup.com;sup;ort.scribd.com;ecosia.zendesk.com;support.dbconvert.com;cbchelp.cbc.ca;get.cloudapp.help;support.thetileapp.com;support.taskrabbit.com;support.clickcease.com;support.bestwebsoft.com;support.waveapps.com;support.oceanex.pro;autovit.zendesk.com][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: [crlf]Referer:@TMYCOMNECTVPN [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@TMYCOMNECTVPN[crlf]",
  360. "SNI": "",
  361. "TlsIP": "",
  362. "ProxyIP": "ffsupportbd.garena.com#172.64.146.157#104.18.41.99#141.193.213.20#141.193.213.21#104.18.99.70",
  363. "ProxyPort": "80",
  364. "Info": "Proxy"
  365. },
  366. {
  367. "Name": "TIM SALDO VÁLIDO 5 💙",
  368. "FLAG": "tim",
  369. "Payload": "ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  370. "SNI": "",
  371. "TlsIP": "",
  372. "ProxyIP": "162.159.6.80#www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.18.33.113#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  373. "ProxyPort": "80",
  374. "Info": "Proxy"
  375. },
  376. {
  377. "Name": "TIM VÁLIDO E EXPIRADO 1 🔵",
  378. "FLAG": "tim",
  379. "Payload": "ACL / HTTP/1.1[crlf]Host: [app_host][split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[rotate=OPTIONS;GET;HEAD;POST;PUT;DELETE;TRACE;CONNECT;PROPFIND;PROPPATCH;MKCOL;COPY;MOVE;LOCK;UNLOCK;VERSION-CONTROL;REPORT;CHECKOUT;CHECKIN;UNCHECKOUT;MKWORKSPACE;UPDATE;LABEL;MERGE;BASELINE-CONTROL;MKACTIVITY;RFC;ORDERPATCH;PATCH;SEARCH] /cdn-cgi/trace/ HTTP/1.1[crlf]Host: www.c6bank.app[crlf][crlf][split][crlf][crlf]MOVE / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Pragma: no-cache[crlf]Cache-Control: no-cache[crlf]@TSTOPSPEED[crlf][crlf]@@@NOTIFY / HTTP/1.9[crlf]host: cdn.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  380. "SNI": "",
  381. "TlsIP": "",
  382. "ProxyIP": "172.64.154.143#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  383. "ProxyPort": "80",
  384. "Info": "Proxy"
  385. },
  386. {
  387. "Name": "TIM VÁLIDO E EXPIRADO 2 🔵",
  388. "FLAG": "tim",
  389. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@canaldotl[crlf][crlf]@@@CHECKOUT / HTTP/1.1[crlf]Host: apptest2.c6bank.app [crlf]Upgrade: HTTP/2.0, SHTTP/1.3, IRC/6.9, RTA/x11[crlf]@TSTOPSPEED[crlf][crlf]@@@UNCHECKOUT / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@canaldotl[crlf][crlf]",
  390. "SNI": "",
  391. "TlsIP": "",
  392. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  393. "ProxyPort": "80",
  394. "Info": "Proxy"
  395. },
  396. {
  397. "Name": "TIM VÁLIDO E EXPIRADO 3 🔵",
  398. "FLAG": "tim",
  399. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: mobile-privacy-techie-web.autos[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@GurusSSH[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@GurusSSH[crlf][crlf]@@@GET / HTTP/1.3[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@masterpayssh[crlf][crlf]",
  400. "SNI": "",
  401. "TlsIP": "",
  402. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  403. "ProxyPort": "80",
  404. "Info": "Proxy"
  405. },
  406. {
  407. "Name": "TIM VÁLIDO E EXPIRADO 4 🔵",
  408. "FLAG": "tim",
  409. "Payload": "ACL / HTTP/1.1[crlf]Host:landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]@@@ACL / HTTP/1.3[crlf]host: urlbuildertim.descomplica.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://connect4g.geralnet.com.br[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]host: [random=app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest2.c6bank.app;mobile.c6bank.app;mobile.c6bank.tech;pre-onboarding-h.c6bank.app;pre-onboarding-p.c6bank.app;saas-h.c6bank.app;saas-h.c6bank.app;saas.c6bank.app;tim.adfast.com.br;www.c6bank.tech][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: tim.adfast.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  410. "SNI": "",
  411. "TlsIP": "",
  412. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25",
  413. "ProxyPort": "80",
  414. "Info": "Proxy"
  415. },
  416. {
  417. "Name": "TIM VÁLIDO E EXPIRADO 5 🔵",
  418. "FLAG": "tim",
  419. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: mobile.hom.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://wa.me/84996862124 [crlf]Referer: https://t.me/starlinkoficial [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: appdev.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  420. "SNI": "",
  421. "TlsIP": "",
  422. "ProxyIP": "104.18.33.113#help.artifactuprising.com#104.19.240.25#104.18.27.160",
  423. "ProxyPort": "80",
  424. "Info": "Proxy"
  425. },
  426. {
  427. "Name": "TIM VÁLIDO E EXPIRADO 6 🔵",
  428. "FLAG": "tim",
  429. "Payload": "[split]ACL / HTTP/1.9[crlf]host:[random=1pass-poc.hom.c6bank.com.br;cms-assets-p.c6bank.com.br;cdn.c6bank.com.br; blog.c6bank.com.br;www.c6bank.com.br;ajuda.c6bank.com.br;cloud.mail.c6bank.com.br;image.mail.c6bank.com.br;ajuda.c6bank.com.br;auth.of.c6bank.com.br;click.mail.c6bank.com.br;cloud;mail.c6bank.com.br;image.mail.c6bank.com.br;mail.c6bank.com.br;view.mail.c6bank.com.br;web.of.c6bank.com.br;www.c6bank.com.br;app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest2.c6bank.app;mobile.c6bank.app;mobile.hom.c6bank.app;saas.c6bank.app;saas-d.c6bank.app;saas-h.c6bank.app;apptest.c6bank.app;app.c6bank.app;apphom.c6bank.app;app1.c6bank.app;saas-h.c6bank.app;app2.c6bank.app;saas.c6bank.app;mobile.c6bank.app;saas-d.c6bank.app;apptest2.c6bank.app;apptest1.c6bank.app][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  430. "SNI": "",
  431. "TlsIP": "",
  432. "ProxyIP": "104.19.241.93#104.19.241.25#104.16.239.166#104.18.28.182",
  433. "ProxyPort": "80",
  434. "Info": "Proxy"
  435. },
  436. {
  437. "Name": "TIM VÁLIDO E EXPIRADO 7 🔵",
  438. "FLAG": "tim",
  439. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: [random=mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  440. "SNI": "",
  441. "TlsIP": "",
  442. "ProxyIP": "162.159.152.26#162.159.153.238#104.18.99.70#atendimento.lojadointer.com.br#104.19.239.25#162.159.152.26#104.18.33.113#172.64.154.143",
  443. "ProxyPort": "80",
  444. "Info": "Proxy"
  445. },
  446. {
  447. "Name": "TIM VÁLIDO E EXPIRADO 8 🔵",
  448. "FLAG": "tim",
  449. "Payload": "[split]ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  450. "SNI": "",
  451. "TlsIP": "",
  452. "ProxyIP": "104.18.27.160#104.16.53.111#mobile.c6bank.app#104.19.239.25#172.67.162.233#104.19.239.25#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.2510#4.18.27.160#104.19.239.25#104.16.19.94#104.16.18.94#atendimento.lojadointer.com.br#mobile.c6bank.app#104.18.98.70",
  453. "ProxyPort": "80",
  454. "Info": "Proxy"
  455. },
  456. {
  457. "Name": "TIM VÁLIDO E EXPIRADO 9 🔵",
  458. "FLAG": "tim",
  459. "Payload": "[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: mobile.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: cdn.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  460. "SNI": "",
  461. "TlsIP": "",
  462. "ProxyIP": "104.18.98.70#104.18.99.70",
  463. "ProxyPort": "80",
  464. "Info": "Proxy"
  465. },
  466. {
  467. "Name": "TIM VÁLIDO E EXPIRADO 10 🔵",
  468. "FLAG": "tim",
  469. "Payload": "[split]ACL / HTTP/1.1[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: ubisoft.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  470. "SNI": "",
  471. "TlsIP": "",
  472. "ProxyIP": "atendimento.lojadointer.com.br",
  473. "ProxyPort": "80",
  474. "Info": "Proxy"
  475. },
  476. {
  477. "Name": "TIM VÁLIDO E EXPIRADO 11 🔵",
  478. "FLAG": "tim",
  479. "Payload": "[split]ACL / HTTP/1.3[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://t.me/masterpayssh[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: melhorplano.net[crlf]Expect: 100-continue[lf][lf][split][lf][lf]ACL / DarkMaster / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-continue[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]@@@[split]ACL / HTTP/1.1[crlf]host: assets.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[lf]Host: dataacademy.descomplica.com.br[lf][lf][lf][lf]PUT- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: websocket[lf]User-Agent: Mobile Safari/9 OPR/9[lf][lf]@@@[split]ACL / HTTP/1.3[crlf]host: urlbuildertim.descomplica.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://connect4g.geralnet.com.br[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.9[crlf]host: upages.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.1[crlf]Host: descomplica.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.1[crlf]Host: wtaphf.descomplica.com.br[crlf][crlf][crlf][crlf]PUT- / HTTP/1.1[crlf]Host: [app_host][crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]",
  480. "SNI": "",
  481. "TlsIP": "",
  482. "ProxyIP": "104.19.239.25#104.26.13.249#104.16.53.111#dataacademy.descomplica.com.br#104.19.241.93",
  483. "ProxyPort": "80",
  484. "Info": "Proxy"
  485. },
  486. {
  487. "Name": "TIM VÁLIDO E EXPIRADO 12 🔵",
  488. "FLAG": "tim",
  489. "Payload": "[split]ACL / HTTP/1.9[crlf]host: [random=cms-assets-p.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Loncation: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: [random=image.mail.c6bank.com.br;c6bank.com.br;cloud.mail.c6bank.com.br;apptest.c6bank.app;jobs.deezer.com;cms-assets-p.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: [random=cdn.c6bank.com.br;support.deezer.com;mobile.c6bank.app;appdev.c6bank.app][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1\\nHost: c6bank.com.br\\n\\nOPTIONS- // HTTP/1.1\\nHost: [app_host]\\nConnection: Upgrade\\nUpgrade: ws\\n\\n@@@[split]ACL / HTTP/1.9[crlf]host: [random=checkv.c6bank.com.br;api.sandbox.c6bank.com.br;c6bank.app;c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  490. "SNI": "",
  491. "TlsIP": "",
  492. "ProxyIP": "104.18.211.56#apptest2.c6bank.app#104.18.211.56#104.16.53.111#104.18.27.160#104.19.239.25#104.19.240.25#104.19.242.25#app.c6bank.tech#alointernet.duckdns.org#crm-leads-p.c6bank.info#cerc-p.c6bank.tech",
  493. "ProxyPort": "80",
  494. "Info": "Proxy"
  495. },
  496. {
  497. "Name": "TIM VÁLIDO E EXPIRADO 13 🔵",
  498. "FLAG": "tim",
  499. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]host: mobile.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  500. "SNI": "",
  501. "TlsIP": "",
  502. "ProxyIP": "104.19.240.25#104.16.51.111#mobile.c6bank.app",
  503. "ProxyPort": "80",
  504. "Info": "Proxy"
  505. },
  506. {
  507. "Name": "TIM EXPIRADO 1 🔵",
  508. "FLAG": "tim",
  509. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]@@@ACL HTTP/2[crlf]Host: plus.google.com[crlf]@@@PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]@@@PROPPATCH http://mercadolivre.com.br HTTP/2[crlf]Host: http://mercadolivre.com.br[crlf]",
  510. "SNI": "",
  511. "TlsIP": "",
  512. "ProxyIP": "177.67.82.201#45.95.66.95",
  513. "ProxyPort": "80",
  514. "Info": "Proxy"
  515. },
  516. {
  517. "Name": "TIM EXPIRADO 2 🔵",
  518. "FLAG": "tim",
  519. "Payload": "HEAD wss://[host] HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]@@@[protocol][crlf] [crlf][crlf]@@@@GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [host] [crlf]Upgrade: websocket[crlf][crlf]@@@PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]@@@HTTP/1.1[crlf] [crlf][crlf]•@@@[protocol] \n\n/@@@HTTP/ [crlf][crlf]|[crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@ACL [host] HTTP/2[crlf]Host: google.es[crlf]Referer: @Laranjo01[crlf]@@@HTTP//@@@ACL HTTP/2[crlf]Host: plus.google.com[crlf]@@@MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]@@@HTTP/ 2\nHOST : m.opera.com\n\n@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@HTTP/ [crlf][crlf]|[crlf]]]@@@MERGE mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]@@@ACL http://1.1.1.1rotate=www.waze.com;buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;www.myspace.com.br;www.waze.com;1.0.0.5[crlf]@@@PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]@@@HTTP/ [crlf][crlf]|[crlf@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]@@@http/ \n\n/@@@PATCH HTTP/1.0 [crlf]Host: map.qq.com[crlf]@@@PROPFIND http://www.microsoft.com HTTP/1.0 Host: www.microsoft.com HTTP/1.0\n \n@@@UNLOCK www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0 Host: www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0\n \n@@@ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]@@@GET http://chat.mundiale.claro.com.br HTTP/1.0[crlf]Host: [app_host]http://chat.mundiale.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@GET wss://api.onesignal.com/ HTTP/1.1[crlf]Host: [host][rlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Referer: google.com[crlf][crlf]@@@ACL /index.html HTTP/1.1[crlf]Host: [host][crlf]Upgrade: websocket[crlf][crlf]",
  520. "SNI": "",
  521. "TlsIP": "",
  522. "ProxyIP": "177.67.82.201#45.95.66.95",
  523. "ProxyPort": "80",
  524. "Info": "Proxy"
  525. },
  526. {
  527. "Name": "TIM EXPIRADO 3 🔵",
  528. "FLAG": "tim",
  529. "Payload": "ACL / HTTP/1.1[crlf]Host: www.galego.store[split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@RevTunnel[crlf][crlf]@@@[delay_split]ACL / HTTP/1.1[crlf]Host: www.galego.store[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@RevTunnel[crlf][crlf]",
  530. "SNI": "",
  531. "TlsIP": "",
  532. "ProxyIP": "172.64.154.143#tinyurl.com#104.26.10.41#172.67.69.69#104.26.11.41",
  533. "ProxyPort": "80",
  534. "Info": "Proxy"
  535. },
  536. {
  537. "Name": "TIM SECURITY 🔵",
  538. "FLAG": "tim",
  539. "Payload": "ACL /index.html HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]]",
  540. "SNI": "",
  541. "TlsIP": "",
  542. "ProxyIP": "177.67.82.201#45.95.66.95",
  543. "ProxyPort": "80",
  544. "Info": "Proxy"
  545. },
  546. {
  547. "Name": "CLARO FRONT/FLARE 🔴✅",
  548. "FLAG": "claro",
  549. "Payload": "GET / HTTP/1.1[crlf]Connection: Upgrade[lf]Upgrade: Websocket[lf]@[random=lt1.inthend.shop;lt2.inthend.shop;lt3.inthend.shop][host][lf]Host: [random=lt1.inthend.shop;lt2.inthend.shop;lt3.inthend.shop][lf][host]@[random=lt1.inthend.shop;lt2.inthend.shop;lt3.inthend.shop][lf][lf]#GET / HTTP/1.1[crlf]Upgrade: Websocket[lf]@www.galego.store[host][lf]Host: www.galego.store[lf][host]@www.galego.store[lf][lf]",
  550. "SNI": "",
  551. "TlsIP": "",
  552. "ProxyIP": "13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  553. "ProxyPort": "80",
  554. "Info": "Proxy"
  555. },
  556. {
  557. "Name": "OI 🟡",
  558. "FLAG": "claro",
  559. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  560. "SNI": "",
  561. "TlsIP": "",
  562. "ProxyIP": "104.16.53.111",
  563. "ProxyPort": "80",
  564. "Info": "Proxy"
  565. }
  566. ]
  567. }
comments powered by Disqus