123

SUBMITTED BY: ascnet

DATE: Feb. 16, 2024, 3:31 a.m.

UPDATED: Feb. 16, 2024, 3:32 a.m.

FORMAT: Text only

SIZE: 77.9 kB

History Raw Download

HITS: 536

Report
  1. {
  2. "Version": "100",
  3. "PainelConecta5G": false,
  4. "ReleaseNotes": "",
  5. "UrlUpdate": "https://painelconecta5g.com/update/pasta_SNCNETPRO5G/config",
  6. "Sms": "https://painelconecta5g.com/update/pasta_SNCNETPRO5G/sms",
  7. "logoonline": "",
  8. "fundoonline": "",
  9. "fundoDoLogOnline": "",
  10. "EmailFeedback": "",
  11. "UrlContato": "",
  12. "UrlTermos": "",
  13. "CheckUser": "true",
  14. "ModderLinkWhatsapp": "",
  15. "ModderLinkTelegram": "",
  16. "ModderCorCaixaServ": "",
  17. "ModderCorCaixaPay": "",
  18. "ModderCorCaixaCentral": "",
  19. "ModderCorCaixaConexao": "",
  20. "ModderCorCaixaUsuario": "",
  21. "ModderCorCaixaSenha": "",
  22. "ModderCorBotaoIniciar": "rgba(0,102,255,0.1)",
  23. "ModderCorBotaoLog": "",
  24. "ModderCorBotaoConfig": "",
  25. "Udp": [
  26. {
  27. "Porta": "7300"
  28. },
  29. {
  30. "Porta": "7100"
  31. },
  32. {
  33. "Porta": "7200"
  34. },
  35. {
  36. "Porta": "7400"
  37. },
  38. {
  39. "Porta": "7500"
  40. }
  41. ],
  42. "Servers": [
  43. {
  44. "Name": "SERVIDORES ALEATÓRIOS 🔁",
  45. "TYPE": "premium",
  46. "FLAG": "br.png",
  47. "ServerIP": "sncnet16.com",
  48. "CheckUser": "http://painel.snc16.com/checkuser/conecta4g.php",
  49. "ServerPort": "22",
  50. "SSLPort": "443",
  51. "USER": "",
  52. "PASS": ""
  53. },
  54. {
  55. "Name": "SERVIDOR BR 01 🇧🇷",
  56. "TYPE": "premium",
  57. "FLAG": "br.png",
  58. "ServerIP": "snc1.sncnet16.com",
  59. "CheckUser": "http://painel.snc16.com/checkuser/conecta4g.php",
  60. "ServerPort": "22",
  61. "SSLPort": "443",
  62. "USER": "",
  63. "PASS": ""
  64. },
  65. {
  66. "Name": "SERVIDOR BR 02 🇧🇷",
  67. "TYPE": "premium",
  68. "FLAG": "br.png",
  69. "ServerIP": "snc2.sncnet16.com",
  70. "CheckUser": "http://painel.snc16.com/checkuser/conecta4g.php",
  71. "ServerPort": "22",
  72. "SSLPort": "443",
  73. "USER": "",
  74. "PASS": ""
  75. },
  76. {
  77. "Name": "SERVIDOR BR 03 🇧🇷",
  78. "TYPE": "premium",
  79. "FLAG": "br.png",
  80. "ServerIP": "snc3.sncnet16.com",
  81. "CheckUser": "http://painel.snc16.com/checkuser/conecta4g.php",
  82. "ServerPort": "22",
  83. "SSLPort": "443",
  84. "USER": "",
  85. "PASS": ""
  86. }
  87. ],
  88. "Networks": [
  89. {
  90. "Name": "VIVO - TIM 1 🟣🔵✅",
  91. "FLAG": "vivo",
  92. "Payload": "[delay_split]PROPPATCH /analytics.google.com HTTP/1.0[crlf]Host: [rotate=sncnet16.com;global-4-lvs-colossus-10.opera-mini.net][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]@TSTOPSPEED[crlf][crlf]",
  93. "SNI": "",
  94. "TlsIP": "",
  95. "ProxyIP": "186.233.118.139#104.16.51.111#::ffff:186.233.118.139#::ffff:104.16.51.111",
  96. "ProxyPort": "80",
  97. "Info": "Proxy"
  98. },
  99. {
  100. "Name": "VIVO - TIM 2 🟣🔵",
  101. "FLAG": "vivo",
  102. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
  103. "SNI": "",
  104. "TlsIP": "",
  105. "ProxyIP": "186.233.118.139#177.67.82.201",
  106. "ProxyPort": "80",
  107. "Info": "Proxy"
  108. },
  109. {
  110. "Name": "VIVO - CLARO 🟣🔴",
  111. "FLAG": "vivo",
  112. "Payload": "GET ws://[rotate=d37lx9e954u3qw.cloudfront.net]/app28 HTTP/1.1[lf]Host:lio-multicanalidade-app.m4u.com.br[lf]Connection: Upgrade[lf]Upgrade: websocket[lf][lf]",
  113. "SNI": "lio-multicanalidade-app.m4u.com.br",
  114. "TlsIP": "lio-multicanalidade-app.m4u.com.br",
  115. "ProxyIP": "",
  116. "ProxyPort": "443",
  117. "Info": "Tlsws"
  118. },
  119. {
  120. "Name": "VIVO PRÉ - TIM - CLARO 🟣🔵🔴",
  121. "FLAG": "vivo",
  122. "Payload": "HEAD /app28 HTTP/1.1[lf]Host: [rotate=d37lx9e954u3qw.cloudfront.net][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]@@@PATCH /app28 HTTP/1.1[lf]Host: [app_host][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]@@@GET /app28 HTTP/1.1[lf]Host: [app_host][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  123. "SNI": "d37lx9e954u3qw.cloudfront.net",
  124. "TlsIP": "d37lx9e954u3qw.cloudfront.net",
  125. "ProxyIP": "",
  126. "ProxyPort": "443",
  127. "Info": "Tlsws"
  128. },
  129. {
  130. "Name": "VIVO FLARE 1 🟣",
  131. "FLAG": "vivo",
  132. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  133. "SNI": "",
  134. "TlsIP": "",
  135. "ProxyIP": "162.159.128.53#104.24.10.16#104.24.11.16#104.24.24.34#104.24.25.34#172.64.130.2#172.64.131.2#172.64.194.2#172.64.195.2#fr.poichongterbackrote.cf#pt.roagzipel.tk#104.18.22.26#support.deezer.com#104.16.51.111#104.16.53.111",
  136. "ProxyPort": "80",
  137. "Info": "Proxy"
  138. },
  139. {
  140. "Name": "VIVO FLARE 2 🟣",
  141. "FLAG": "vivo",
  142. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  143. "SNI": "",
  144. "TlsIP": "",
  145. "ProxyIP": "[app_host]",
  146. "ProxyPort": "80",
  147. "Info": "Proxy"
  148. },
  149. {
  150. "Name": "VIVO FLARE 3 🟣",
  151. "FLAG": "vivo",
  152. "Payload": "[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud][crlf][crlf][crlf]",
  153. "SNI": "",
  154. "TlsIP": "",
  155. "ProxyIP": "186.233.118.139#177.67.82.201",
  156. "ProxyPort": "80",
  157. "Info": "Proxy"
  158. },
  159. {
  160. "Name": "VIVO FLARE 4 🟣",
  161. "FLAG": "vivo",
  162. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim. com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify. com;pagamentoonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com; c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2. interflashplusvpnpro.cloud][crlf][crlf][crlf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: recarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: vigia.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: workplaceservices.surveymonkey.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]",
  163. "SNI": "",
  164. "TlsIP": "",
  165. "ProxyIP": "186.233.118.139#177.67.82.201",
  166. "ProxyPort": "80",
  167. "Info": "Proxy"
  168. },
  169. {
  170. "Name": "VIVO FLARE 5 🟣",
  171. "FLAG": "vivo",
  172. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[split][delay_split]ACL / /n@@@[split][delay_split]ACL / /\n@@@[split]GET HTTP/1.1[crlf][crlf]HTTP/2: Ua[crlf]@@@[split]GET HTTP/1.1[crlf][crlf]HTTP/2: [crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUICK/11: Ua[crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUIC/11: Ua[crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf@@@[split] [crlf]GET ua.com@sncnet16.com[protocol][crlf]CONNECT sncnet16.com[protocol][crlf][crlf]@@@[delay_split]ACL / /\n[delay]",
  173. "SNI": "",
  174. "TlsIP": "",
  175. "ProxyIP": "186.233.118.139#177.67.82.201",
  176. "ProxyPort": "80",
  177. "Info": "Proxy"
  178. },
  179. {
  180. "Name": "VIVO FLARE 6 🟣",
  181. "FLAG": "vivo",
  182. "Payload": "[delay_split]CONNECT sncnet16.com:22 HTTP/1.1[crlf]Host: sncnet16.com[crlf]X-Online-Host: sncnet16.com[crlf]X-Forward-Host: sncnet16.com[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[delay_split]ACL sncnet16.com:22 HTTP/1.1[crlf]Host: sncnet16.com[crlf]X-Online-Host: sncnet16.com[crlf]X-Forward-Host: sncnet16.com[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[split][lf]ACL / [lf][auth]:80[lf]@@@[split]ACL / \n@@@[split][lf]ACL / [auth][lf]@@@[split][delay_split]ACL / /\n",
  183. "SNI": "",
  184. "TlsIP": "",
  185. "ProxyIP": "sncnet16.com",
  186. "ProxyPort": "80",
  187. "Info": "Proxy"
  188. },
  189. {
  190. "Name": "VIVO FLARE 7 🟣",
  191. "FLAG": "vivo",
  192. "Payload": "[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]@@@[delay_split]GET /HTTP 1.2@@@[delay_split]GET http://[rotate=google.com.br;vivo.com.br;deezer.com]/ HTTP/1.1[crlf]Host: [rotate=google.com.br;vivo.com.br;deezer.com][crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split]GET http://vivo.com.br/ HTTP/1.1[crlf]Host: vivo.com.br[crlf][crlf]@@@[delay_split]GET http://google.com/ HTTP/1.1[crlf]Host: google.com[crlf][crlf]",
  193. "SNI": "",
  194. "TlsIP": "",
  195. "ProxyIP": "177.67.82.201#186.233.118.139",
  196. "ProxyPort": "80",
  197. "Info": "Proxy"
  198. },
  199. {
  200. "Name": "VIVO FLARE 8 🟣",
  201. "FLAG": "vivo",
  202. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  203. "SNI": "",
  204. "TlsIP": "",
  205. "ProxyIP": "[app_host]",
  206. "ProxyPort": "80",
  207. "Info": "Proxy"
  208. },
  209. {
  210. "Name": "VIVO SECURITY 1 💜✅",
  211. "FLAG": "vivo",
  212. "Payload": "[split] ACL http:// stats.g.doubleclick.net HTTP/1.3[crlf] http:// www.comarkinstruments.net[split][crlf][lf]@@@[split] ACL http://interatividade.vivo.ddivulga.com/produto/ HTTP/1.3[crlf] http:// www.comarkinstruments.net[split][crlf][lf]@@@CONNECT 127.0.0.1:80[crlf][instant_split]ACL HTTP/1.1[auth][ssh][crlf]Upgrade: Websocket[crlf]@@@[delay_split][lf]ACL / HTTP/1.9[lf]Host: tim.curcumy-saude.site; vivo-pr.curcumy-saude.site;google.com;ec2-100-20-0-0.us-west-2.compute.amazonaws.com\\\\n\\\\n\\\\n\\\\@@@[split][delay_split] ACL / STATUS200@@@[split]ACL HTTP/1.9[crlf][crlf]QUIC/11:80 Ua[crlf]@@@ACL / HTTP/1.1[crlf]Host: [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: [random=www.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]X-Forwarded-For: [rotate=www.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit]@openkf3[crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: microsoft.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: amazonaws.com[crlf]Upgrade: Keep-Alive[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n@@@[delay_split]PUT / Cache-Control: private: 13.33.131.6[crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]",
  213. "SNI": "",
  214. "TlsIP": "",
  215. "ProxyIP": "177.67.82.201#186.233.118.58",
  216. "ProxyPort": "8080",
  217. "Info": "Proxy"
  218. },
  219. {
  220. "Name": "VIVO SECURITY 2 💜",
  221. "FLAG": "vivo",
  222. "Payload": "GET / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim. com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify. com;pagamentoonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com; c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2. interflashplusvpnpro.cloud][crlf][crlf][crlf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split]ACL AtlasN42/ HTTP/1.1[crlf]Host: 204.216.165.239[crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br[lf]@@@ACL / HTTP/1.1[crlf]Host: [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]X-Forwarded-For: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net [crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]",
  223. "SNI": "",
  224. "TlsIP": "",
  225. "ProxyIP": "177.67.82.201#186.233.118.58",
  226. "ProxyPort": "8080",
  227. "Info": "Proxy"
  228. },
  229. {
  230. "Name": "VIVO SECURITY 3 💜",
  231. "FLAG": "vivo",
  232. "Payload": "ACL HTTP/1.1 Host: plus.google.com \r\n \r\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\n\\n\\n \\n@@@CONNECT 127.0.0.1:8080[instant_split]GET www.veek.com.br HTTP/1.1[crlf][crlf]@@@CONNECT [host_port] [protocol][crlf][crlf]@@@CONNECT [host_port] [protocol][crlf][crlf]@@@CONNECT [host_port] HTTP/1.1[crlf][crlf]HEAD http:/// [protocol][crlf][crlf]@@@CONNECT 186.233.118.58:8080HTTP/1.1[crlf][crlf]@@@[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: www.vivo.com.br\\\\n\\\\n\\\\n \\\\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: chat.whatsapp.com/EOb866Y9YUE4yZ3JDTPW1m[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split]GET SASK / HTTP/1.1[crlf]Host: gedoc.vivo.com.br[crlf]Connection: Upgrade[crlf]@@@[delay_split][lf]GET / 55@@@GET-CONTROL ws://[app_host] HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split]ACL AtlasN42/ HTTP/1.1[crlf]Host: 186.233.118.163[crlf]Upgrade: websocket[crlf][crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: 186.233.118.58[crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]",
  233. "SNI": "",
  234. "TlsIP": "",
  235. "ProxyIP": "177.67.82.201#186.233.118.58",
  236. "ProxyPort": "8080",
  237. "Info": "Proxy"
  238. },
  239. {
  240. "Name": "VIVO SECURITY 4 💜",
  241. "FLAG": "vivo",
  242. "Payload": "[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote HTTP/1.1[lf][lf]@@@[split][method][host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote HTTP/1.1[lf][lf]@@@[delay_split]GET http://d1n212ccp6ldpw.cloudfront.net HTTP/1.1\n\r\n\r\nCONNECT 127.0.0.1:443HTTP/1.0X-Online-Host: http://download-this-pl.info/124BR/MP.html \r\n\r\n@@@[delay_split]CONNECT http://i.vivo.ddivulga.com/i/gp/ HTTP/1.1[crlf][split]@@@[delay_split]CONNECT http://interatividade.vivo.ddivulga.com/produto/ HTTP/1.0[crlf][split]@@@[delay_split]CONNECT http://navegue.vivo.ddivulga.com/pacote/ HTTP/1.1[crlf][split]@@@[delay_split]CONNECT http://portalrecarga.vivo.com.br/recarga/home/ HTTP/1.1[lf]@@@[split]\nCONNECT [host_port]@portalrecarga.vivo.com.br/recarga/home/[protocol]\nGET http://sdp.vivo.com.br/ HTTP/1.1\nHost: portalrecarga.vivo.com.br/recarga/home/produto[crlf]X-Forwarded-For: portalrecarga.vivo.com.br/recarga/home/\n\n\n@@@[delay_split]CONNECT [host_port] GET http://portalrecarga.vivo.com.br/recarga/home/187.8.166.33 [protocol][lf][split]CONNECT 187.8.166.33 CONNECT [host_port]149.56.42.236 HTTP/1.1[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: tiktok.com[lf]@@@GET / HTTP/1.4[crlf]Host: 2804:5364:7000:1:1:1:64ad:7ebe[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][rotate=GET;ACL;CONNECT;HEAD;PROPATCH;DEBELETE] / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split]ACL /Set-Cookie: sessionID=fbafa6258966f49f252b404ab9e5c219; path=/admin; domain=revive.vivointernetgratis.com.br; secure; HttpOnly; SameSite=strict HTTP/1.1][lf]@@@[delay_split]ACL /revive.vivointernetgratis.com.br HTTP/1.1][lf]@@@ACL http://1.1.1.1rotate= buzzfeed.com ; mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com ; myspace .com ; mobile.google.com ;1.0.0.5[crlf]@@@[delay_split]ACL / HTTP/1.1[lf]Host: gedoc.vivo.com.br[crlf][crlf]Pz4 / HTTP/1.1[lf]Host:gauchossh.xyz[crlf]Connection: Upgrade[lf]Upgrade: Websocket[crlf][crlf]@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  243. "SNI": "",
  244. "TlsIP": "",
  245. "ProxyIP": "177.67.82.201#186.233.118.58",
  246. "ProxyPort": "8080",
  247. "Info": "Proxy"
  248. },
  249. {
  250. "Name": "VIVO SECURITY 5 💜",
  251. "FLAG": "vivo",
  252. "Payload": "[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[delay_split]ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]@@@[delay_split]ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: hmg-embed.claromusica.com\n\n\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: premium.sshtunnelcloud.store[lf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portalrecarga.vivo.com.br/recarga/[lf]@@@[delay_split][lf]GET / HTTP/1.1][lf]Host: reinaldo2.allproxy.cloud[lf]@@@[delay_split][lf]GET / HTTP/1.1][lf]Host: reinaldo2.allproxy.cloud][lf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[delay_split]ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]@@@[delay_split]ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: hmg-embed.claromusica.com\n\n\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: premium.sshtunnelcloud.store[lf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portalrecarga.vivo.com.br/recarga/[lf]@@@[delay_split][lf]GET / HTTP/1.1][lf]Host: reinaldo2.allproxy.cloud[lf]@@@[delay_split][lf]GET / HTTP/1.1][lf]Host: reinaldo2.allproxy.cloud][lf]",
  253. "SNI": "",
  254. "TlsIP": "",
  255. "ProxyIP": "177.67.82.201#186.233.118.58",
  256. "ProxyPort": "8080",
  257. "Info": "Proxy"
  258. },
  259. {
  260. "Name": "VIVO EASY 1 💚",
  261. "FLAG": "vivo",
  262. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  263. "SNI": "",
  264. "TlsIP": "",
  265. "ProxyIP": "172.64.144.109#104.18.43.147#172.64.195.2#172.64.194.2#172.64.131.2#172.64.130.2#104.24.10.16#104.24.11.16#104.24.25.34#104.24.24.34#172.64.144.109#vigia.vivo.com.br#104.18.7.80#legado.vivo.com.br#104.18.6.41#104.18.6.80#104.17.70.206#104.17.71.206#104.17.72.206#104.17.73.206#104.17.74.206#104.17.75.206#104.18.6.80#104.18.7.80#104.18.7.41#104.18.6.41#162.159.128.7#162.159.138.6#sso.hotjar.com#learning.hotjar.com#js.partnerstack.com#insights.hotjar.com#images.ctfassets.net#hotjar.wistia.com#www.hotjar.com#cloud.vivo.com.br",
  266. "ProxyPort": "80",
  267. "Info": "Proxy"
  268. },
  269. {
  270. "Name": "VIVO EASY 2 💚",
  271. "FLAG": "vivo",
  272. "Payload": "GET /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  273. "SNI": "",
  274. "TlsIP": "",
  275. "ProxyIP": "store-front.ampli.com.br#paypal-logos.babbel.com#108.139.182.14#108.139.182.31#99.84.31.35#99.84.31.66#99.84.31.129#18.161.200.107#18.161.200.104#18.161.200.59#18.161.200.55#18.161.200.16#18.67.129.23#18.67.129.74#18.67.129.99#18.67.129.104#99.84.31.7#99.84.31.66#99.84.31.129#65.8.214.18#65.8.214.30#65.8.214.65#65.8.214.76#65.8.214.80#65.8.214.104#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.138.64.15#18.67.76.54#63.34.109.75#18.67.76.95#108.158.161.49#13.227.126.39#99.84.37.44#13.226.22.87#108.138.64.15#18.67.76.54#63.34.109.75#18.67.76.95",
  276. "ProxyPort": "80",
  277. "Info": "Proxy"
  278. },
  279. {
  280. "Name": "VIVO FRONT 1 💟",
  281. "FLAG": "vivo",
  282. "Payload": "GET /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  283. "SNI": "",
  284. "TlsIP": "",
  285. "ProxyIP": "lio-multicanalidade-app.m4u.com.br#cdnssl.clicktale.net#web.vivorecarga.m4u.com.br#108.139.95.90#108.158.122.125",
  286. "ProxyPort": "80",
  287. "Info": "Proxy"
  288. },
  289. {
  290. "Name": "VIVO FRONT 2 💟",
  291. "FLAG": "vivo",
  292. "Payload": "GET /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  293. "SNI": "",
  294. "TlsIP": "",
  295. "ProxyIP": "13.227.97.86#13.227.97.87#13.227.97.89#13.227.97.100#13.227.97.103#13.227.97.110#13.227.97.116#13.227.126.3#13.227.126.11#13.227.126.23#13.227.126.31#13.227.126.34#13.227.126.35#13.227.126.36#13.227.126.39#13.227.126.42#13.227.126.57#13.227.126.58#13.227.126.60#13.227.126.65#13.227.126.68#13.227.126.74#13.227.126.79#13.227.126.81#13.227.126.86#13.227.126.87#13.227.126.90#13.227.126.94#13.227.126.95#13.227.126.96#13.227.126.99#13.227.126.100#13.227.126.107#13.227.126.109#13.227.126.117#13.227.126.123#18.64.174.26#18.64.174.31#18.64.174.118#18.64.174.128#18.67.0.28#18.67.0.114#18.161.200.8#18.161.200.32#18.161.200.54#18.161.200.81#18.161.200.84#18.161.200.85#18.161.200.86#18.161.200.90#18.161.200.92#18.161.200.94#18.161.200.95#18.161.200.98#18.161.200.110#18.161.200.124#18.161.200.126#52.84.83.4#52.84.83.5#52.84.83.6#52.84.83.11#52.84.83.17#52.84.83.20#52.84.83.22#52.84.83.24#52.84.83.27#52.84.83.29#52.84.83.31#52.84.83.34#52.84.83.35#52.84.83.40#52.84.83.41#52.84.83.42#52.84.83.43#52.84.83.44#52.84.83.45#52.84.83.48#52.84.83.50#52.84.83.51#52.84.83.54#52.84.83.57#52.84.83.60#52.84.83.63#52.84.83.64#52.84.83.66#52.84.83.69#52.84.83.71#52.84.83.72#52.84.83.76#52.84.83.78#52.84.83.82#52.84.83.90#52.84.83.91#52.84.83.92#52.84.83.93#52.84.83.94#52.84.83.96",
  296. "ProxyPort": "80",
  297. "Info": "Proxy"
  298. },
  299. {
  300. "Name": "VIVO FRONT 3 💟",
  301. "FLAG": "vivo",
  302. "Payload": "HEAD /app28 HTTP/1.1[lf]Host: [rotate=d37lx9e954u3qw.cloudfront.net][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  303. "SNI": "d37lx9e954u3qw.cloudfront.net",
  304. "TlsIP": "13.33.108.148#13.33.108.108#13.33.108.204#13.33.108.143",
  305. "ProxyIP": "",
  306. "ProxyPort": "443",
  307. "Info": "Tlsws"
  308. },
  309. {
  310. "Name": "VIVO FRONT 4 💟✅",
  311. "FLAG": "vivo",
  312. "Payload": "GET /app28 HTTP/1.1[lf]Host: [rotate=d37lx9e954u3qw.cloudfront.net][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  313. "SNI": "",
  314. "TlsIP": "",
  315. "ProxyIP": "108.158.122.48#108.158.161.49#108.139.182.100#108.139.182.23#108.139.182.102#18.64.174.70#108.139.119.122#108.139.95.111#108.139.119.29#108.139.182.100#108.139.119.50#108.139.119.41#108.139.119.4#108.139.119.33#108.139.119.85#108.139.95.32#99.84.31.92",
  316. "ProxyPort": "80",
  317. "Info": "Proxy"
  318. },
  319. {
  320. "Name": "TIM SALDO VÁLIDO 1 💙",
  321. "FLAG": "tim",
  322. "Payload": "ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@masterpayssh[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: api.digicert.com[crlf][split][crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]",
  323. "SNI": "",
  324. "TlsIP": "",
  325. "ProxyIP": "104.19.241.93#172.64.154.143#104.17.64.225#104.19.239.25#172.64.154.143#104.16.239.166",
  326. "ProxyPort": "80",
  327. "Info": "Proxy"
  328. },
  329. {
  330. "Name": "TIM SALDO VÁLIDO 2 💙",
  331. "FLAG": "tim",
  332. "Payload": "ACL / HTTP/1.9[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.9[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade:Dalvik/2.1.0 (Linux; U; Android 10; moto g(7) play Build/QPYS30.52-22-14)[crlf]Referer: adnqueimaroscadogrupo.xyz[crlf]X-Online-Host: adnqueimaroscadogrupo.xyz[crlf]X-Forward-Host: adnqueimaroscadogrupo.xyz[crlf]X-Forwarded-For: adnqueimaroscadogrupo.xyz[crlf][crlf]#ACL / HTTP/1.3[crlf]Host: [rotate=mtls.sandbox.c6bank.com.br;app.sandbox.c6bank.com.br;api.sandbox.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: sncnet16.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.9[crlf]host: teste.sandbox.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  333. "SNI": "",
  334. "TlsIP": "",
  335. "ProxyIP": "104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225#172.64.154.143#104.16.53.111#152.67.41.238#146.235.28.41#104.26.8.84",
  336. "ProxyPort": "80",
  337. "Info": "Proxy"
  338. },
  339. {
  340. "Name": "TIM SALDO VÁLIDO 3 💙✅",
  341. "FLAG": "tim",
  342. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: www.vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: www.vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@ACL wss://sncnet16.com HTTP/1.1[lf]Host: [rotate=google.es;www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]@@@ACL /index.html HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.9[crlf]host:accounts.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL /cdn-cgi/trace HTTP/1.9[crlf]host:accounts.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  343. "SNI": "",
  344. "TlsIP": "",
  345. "ProxyIP": "pre-onboarding-p.c6bank.app#3.126.202.50#108.138.17.1918.66.122.124#52.30.35.186#10.101.50.118#108.138.17.113#www.pomonaelectronics.com#www.beha-amprobe.com#www.pomonaelectronics.com#www.oiplace.com.br#www.usclaro.com#www.pruftechnik.com#104.17.64.225#104.16.239.166#104.16.51.111#104.18.33.113#104.18.99.70#104.19.241.93",
  346. "ProxyPort": "80",
  347. "Info": "Proxy"
  348. },
  349. {
  350. "Name": "TIM SALDO VÁLIDO 4 💙✅",
  351. "FLAG": "tim",
  352. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=support.snapfish.com;support.mapmyfitness.com;sncnet16.com;support.kontakt.io;uarecord.zendesk.com;sweetroad.zendesk.com;vsco.zendesk.com;support.onetwotrip.com;support.viki.com;support.holmsecurity.com;support.mobileroadie.com;support.neuronmocap.com;support.dxo.com;help.clickfunnels.com;screencastsonline.zendesk.com;support.celtx.com;support.muslimpro.com;support.discogs.com;sginteractive.zendesk.com;support.credly.com;support.sugarsync.com;help.rushlimbaugh.com;support.kidizen.com;support.twilio.com;support.mumbojumbo.com;tpbgame.zendesk.com;ingresshelp.zendesk.com;help.ableton.com;help.spreadshirt.com;wetransfer.zendesk.com;help.issuu.com;meetv.zendesk.com;eight.zendesk.com;help.iheart.com;help.standingstonegames.com;help.trainerize.com;help.coasttocoastam.com;support.securly.com;workflowy.zendesk.com;support.renvu.com;g5entertainment.zendesk.com;support.zipcar.com;gemsofwar.zendesk.com;support.watch.nba.com;faq.hellosign.com;screenad.eu;support.riotgames.com;support.paradoxplaza.com;layananku.airavpn.site;drpanda.zendesk.com;support.fiplab.com;help.behance.net;slack.zendesk.com;aide.e-monsite.com;support.cwtv.com;support.strikingly.com;prodigygame.zendesk.com;support.nixplay.com;flaregames.zendesk.com:support.cmon.com;faq.mightynetworks.com;support.wealthnavi.com;help.musicnotes.com;help.makemeslick.com;help.getmevo.com;support.abra.com;help.tcgplayer.com;mykronoz.zendesk.com;support.ankama.com;help.grindr.com;support.gordonedwards.net;support.mobi2go.com;support.ipvanish.com;support.withings.com;lykkex.zendesk.com;pggmencoleden.zendesk.com;help.positivegrid.com;helpdesk.flexradio.com;help.dreamhost.com;support.cambr;dgeenglish.org;support.ask.fm;care.pressreader.com;help.olx.in;moonactive.zendesk.com;support.getbase.com;history.zendesk.com;produttivo.zendesk.com;support.orcid.org;support.golocalapps.com;support.moneytap.jp;help.acuityscheduling.com;support-pocket.sumally.com;help.remind.com;support.awesome-table.com;support.ampleair.com.au;cs.vtcmobile.vn;support.oneup.com;sup;ort.scribd.com;ecosia.zendesk.com;support.dbconvert.com;cbchelp.cbc.ca;get.cloudapp.help;support.thetileapp.com;support.taskrabbit.com;support.clickcease.com;support.bestwebsoft.com;support.waveapps.com;support.oceanex.pro;autovit.zendesk.com][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: [crlf]Referer:@TMYCOMNECTVPN [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@TMYCOMNECTVPN[crlf]",
  353. "SNI": "",
  354. "TlsIP": "",
  355. "ProxyIP": "ffsupportbd.garena.com#172.64.146.157#104.18.41.99#141.193.213.20#141.193.213.21#104.18.99.70",
  356. "ProxyPort": "80",
  357. "Info": "Proxy"
  358. },
  359. {
  360. "Name": "TIM DIRECT 💙✅",
  361. "FLAG": "tim",
  362. "Payload": "ACL HTTP/ \r\nhost: www.google.com[lf]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n",
  363. "SNI": "",
  364. "TlsIP": "",
  365. "ProxyIP": "177.67.82.201#186.233.118.58",
  366. "ProxyPort": "80",
  367. "Info": "Proxy"
  368. },
  369. {
  370. "Name": "TIM FRONT 1 💙",
  371. "FLAG": "tim",
  372. "Payload": "GET ws://[rotate=d37lx9e954u3qw.cloudfront.net]/app28 HTTP/1.1[lf]Host: tim-controle-captive-portal.stg.m4u.com.br[lf]Connection: Upgrade[lf]Upgrade: websocket[lf][lf]",
  373. "SNI": "tim-controle-captive-portal.stg.m4u.com.br",
  374. "TlsIP": "13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.8",
  375. "ProxyIP": "",
  376. "ProxyPort": "443",
  377. "Info": "Tlsws"
  378. },
  379. {
  380. "Name": "TIM FRONT 2 💙✅",
  381. "FLAG": "tim",
  382. "Payload": "PATCH /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]@@@HEAD /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  383. "SNI": "",
  384. "TlsIP": "",
  385. "ProxyIP": "13.227.97.49#13.227.97.116#13.227.97.28#13.227.97.69#3.163.10.121#3.163.10.54#3.163.10.104#conversions.appsflyer.com#3.163.10.112#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#Atendimento.descomplica.com.br#launches.appsflyer.com#13.33.131.9#13.33.131.6#13.33.131.90#13.33.131.92#13.33.131.123#13.227.126.39#13.227.126.95#99.84.31.10#99.84.31.24#99.84.31.39#99.84.31.54#99.84.31.55#99.84.31.72#99.84.31.92#108.139.113.89#108.139.113.53#108.139.113.49#108.139.113.4#108.139.95.19#108.139.95.5#108.139.95.50#108.139.95.87#3.163.10.104#3.163.10.121#3.163.10.112#3.163.10.54",
  386. "ProxyPort": "80",
  387. "Info": "Proxy"
  388. },
  389. {
  390. "Name": "TIM VÁLIDO E EXPIRADO 1 🔵",
  391. "FLAG": "tim",
  392. "Payload": "ACL / HTTP/1.1[crlf]Host: [app_host][split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[rotate=OPTIONS;GET;HEAD;POST;PUT;DELETE;TRACE;CONNECT;PROPFIND;PROPPATCH;MKCOL;COPY;MOVE;LOCK;UNLOCK;VERSION-CONTROL;REPORT;CHECKOUT;CHECKIN;UNCHECKOUT;MKWORKSPACE;UPDATE;LABEL;MERGE;BASELINE-CONTROL;MKACTIVITY;RFC;ORDERPATCH;PATCH;SEARCH] /cdn-cgi/trace/ HTTP/1.1[crlf]Host: www.c6bank.app[crlf][crlf][split][crlf][crlf]MOVE / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Pragma: no-cache[crlf]Cache-Control: no-cache[crlf]@TSTOPSPEED[crlf][crlf]@@@NOTIFY / HTTP/1.9[crlf]host: cdn.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  393. "SNI": "",
  394. "TlsIP": "",
  395. "ProxyIP": "172.64.154.143#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  396. "ProxyPort": "80",
  397. "Info": "Proxy"
  398. },
  399. {
  400. "Name": "TIM VÁLIDO E EXPIRADO 2 🔵",
  401. "FLAG": "tim",
  402. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@canaldotl[crlf][crlf]@@@CHECKOUT / HTTP/1.1[crlf]Host: apptest2.c6bank.app [crlf]Upgrade: HTTP/2.0, SHTTP/1.3, IRC/6.9, RTA/x11[crlf]@TSTOPSPEED[crlf][crlf]@@@UNCHECKOUT / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@canaldotl[crlf][crlf]",
  403. "SNI": "",
  404. "TlsIP": "",
  405. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  406. "ProxyPort": "80",
  407. "Info": "Proxy"
  408. },
  409. {
  410. "Name": "TIM VÁLIDO E EXPIRADO 3 🔵",
  411. "FLAG": "tim",
  412. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: mobile-privacy-techie-web.autos[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@GurusSSH[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@GurusSSH[crlf][crlf]@@@GET / HTTP/1.3[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@masterpayssh[crlf][crlf]",
  413. "SNI": "",
  414. "TlsIP": "",
  415. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  416. "ProxyPort": "80",
  417. "Info": "Proxy"
  418. },
  419. {
  420. "Name": "TIM VÁLIDO E EXPIRADO 4 🔵",
  421. "FLAG": "tim",
  422. "Payload": "ACL / HTTP/1.1[crlf]Host:landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]@@@ACL / HTTP/1.3[crlf]host: urlbuildertim.descomplica.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://connect4g.geralnet.com.br[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]host: [random=app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest2.c6bank.app;mobile.c6bank.app;mobile.c6bank.tech;pre-onboarding-h.c6bank.app;pre-onboarding-p.c6bank.app;saas-h.c6bank.app;saas-h.c6bank.app;saas.c6bank.app;tim.adfast.com.br;www.c6bank.tech][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: tim.adfast.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  423. "SNI": "",
  424. "TlsIP": "",
  425. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25",
  426. "ProxyPort": "80",
  427. "Info": "Proxy"
  428. },
  429. {
  430. "Name": "TIM VÁLIDO E EXPIRADO 5 🔵",
  431. "FLAG": "tim",
  432. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: mobile.hom.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://wa.me/84996862124 [crlf]Referer: https://t.me/starlinkoficial [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: appdev.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  433. "SNI": "",
  434. "TlsIP": "",
  435. "ProxyIP": "104.18.33.113#help.artifactuprising.com#104.19.240.25#104.18.27.160",
  436. "ProxyPort": "80",
  437. "Info": "Proxy"
  438. },
  439. {
  440. "Name": "TIM VÁLIDO E EXPIRADO 6 🔵",
  441. "FLAG": "tim",
  442. "Payload": "[split]ACL / HTTP/1.9[crlf]host:[random=1pass-poc.hom.c6bank.com.br;cms-assets-p.c6bank.com.br;cdn.c6bank.com.br; blog.c6bank.com.br;www.c6bank.com.br;ajuda.c6bank.com.br;cloud.mail.c6bank.com.br;image.mail.c6bank.com.br;ajuda.c6bank.com.br;auth.of.c6bank.com.br;click.mail.c6bank.com.br;cloud;mail.c6bank.com.br;image.mail.c6bank.com.br;mail.c6bank.com.br;view.mail.c6bank.com.br;web.of.c6bank.com.br;www.c6bank.com.br;app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest2.c6bank.app;mobile.c6bank.app;mobile.hom.c6bank.app;saas.c6bank.app;saas-d.c6bank.app;saas-h.c6bank.app;apptest.c6bank.app;app.c6bank.app;apphom.c6bank.app;app1.c6bank.app;saas-h.c6bank.app;app2.c6bank.app;saas.c6bank.app;mobile.c6bank.app;saas-d.c6bank.app;apptest2.c6bank.app;apptest1.c6bank.app][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  443. "SNI": "",
  444. "TlsIP": "",
  445. "ProxyIP": "104.19.241.93#104.19.241.25#104.16.239.166#104.18.28.182",
  446. "ProxyPort": "80",
  447. "Info": "Proxy"
  448. },
  449. {
  450. "Name": "TIM VÁLIDO E EXPIRADO 7 🔵",
  451. "FLAG": "tim",
  452. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: [random=mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  453. "SNI": "",
  454. "TlsIP": "",
  455. "ProxyIP": "162.159.152.26#162.159.153.238#104.18.99.70#atendimento.lojadointer.com.br#104.19.239.25#162.159.152.26#104.18.33.113#172.64.154.143",
  456. "ProxyPort": "80",
  457. "Info": "Proxy"
  458. },
  459. {
  460. "Name": "TIM VÁLIDO E EXPIRADO 8 🔵",
  461. "FLAG": "tim",
  462. "Payload": "[split]ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  463. "SNI": "",
  464. "TlsIP": "",
  465. "ProxyIP": "104.18.27.160#104.16.53.111#mobile.c6bank.app#104.19.239.25#172.67.162.233#104.19.239.25#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.2510#4.18.27.160#104.19.239.25#104.16.19.94#104.16.18.94#atendimento.lojadointer.com.br#mobile.c6bank.app#104.18.98.70",
  466. "ProxyPort": "80",
  467. "Info": "Proxy"
  468. },
  469. {
  470. "Name": "TIM VÁLIDO E EXPIRADO 9 🔵",
  471. "FLAG": "tim",
  472. "Payload": "[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: mobile.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: cdn.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  473. "SNI": "",
  474. "TlsIP": "",
  475. "ProxyIP": "104.18.98.70#104.18.99.70",
  476. "ProxyPort": "80",
  477. "Info": "Proxy"
  478. },
  479. {
  480. "Name": "TIM VÁLIDO E EXPIRADO 10 🔵",
  481. "FLAG": "tim",
  482. "Payload": "[split]ACL / HTTP/1.1[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: ubisoft.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  483. "SNI": "",
  484. "TlsIP": "",
  485. "ProxyIP": "atendimento.lojadointer.com.br",
  486. "ProxyPort": "80",
  487. "Info": "Proxy"
  488. },
  489. {
  490. "Name": "TIM VÁLIDO E EXPIRADO 11 🔵",
  491. "FLAG": "tim",
  492. "Payload": "[split]ACL / HTTP/1.3[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://t.me/masterpayssh[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: melhorplano.net[crlf]Expect: 100-continue[lf][lf][split][lf][lf]ACL / DarkMaster / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-continue[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]@@@[split]ACL / HTTP/1.1[crlf]host: assets.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[lf]Host: dataacademy.descomplica.com.br[lf][lf][lf][lf]PUT- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: websocket[lf]User-Agent: Mobile Safari/9 OPR/9[lf][lf]@@@[split]ACL / HTTP/1.3[crlf]host: urlbuildertim.descomplica.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://connect4g.geralnet.com.br[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.9[crlf]host: upages.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.1[crlf]Host: descomplica.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.1[crlf]Host: wtaphf.descomplica.com.br[crlf][crlf][crlf][crlf]PUT- / HTTP/1.1[crlf]Host: [app_host][crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]",
  493. "SNI": "",
  494. "TlsIP": "",
  495. "ProxyIP": "104.19.239.25#104.26.13.249#104.16.53.111#dataacademy.descomplica.com.br#104.19.241.93",
  496. "ProxyPort": "80",
  497. "Info": "Proxy"
  498. },
  499. {
  500. "Name": "TIM VÁLIDO E EXPIRADO 12 🔵",
  501. "FLAG": "tim",
  502. "Payload": "[split]ACL / HTTP/1.9[crlf]host: [random=cms-assets-p.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Loncation: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: [random=image.mail.c6bank.com.br;c6bank.com.br;cloud.mail.c6bank.com.br;apptest.c6bank.app;jobs.deezer.com;cms-assets-p.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: [random=cdn.c6bank.com.br;support.deezer.com;mobile.c6bank.app;appdev.c6bank.app][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1\\nHost: c6bank.com.br\\n\\nOPTIONS- // HTTP/1.1\\nHost: [app_host]\\nConnection: Upgrade\\nUpgrade: ws\\n\\n@@@[split]ACL / HTTP/1.9[crlf]host: [random=checkv.c6bank.com.br;api.sandbox.c6bank.com.br;c6bank.app;c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  503. "SNI": "",
  504. "TlsIP": "",
  505. "ProxyIP": "104.18.211.56#apptest2.c6bank.app#104.18.211.56#104.16.53.111#104.18.27.160#104.19.239.25#104.19.240.25#104.19.242.25#app.c6bank.tech#alointernet.duckdns.org#crm-leads-p.c6bank.info#cerc-p.c6bank.tech",
  506. "ProxyPort": "80",
  507. "Info": "Proxy"
  508. },
  509. {
  510. "Name": "TIM VÁLIDO E EXPIRADO 13 🔵",
  511. "FLAG": "tim",
  512. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]host: mobile.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  513. "SNI": "",
  514. "TlsIP": "",
  515. "ProxyIP": "104.19.240.25#104.16.51.111#mobile.c6bank.app",
  516. "ProxyPort": "80",
  517. "Info": "Proxy"
  518. },
  519. {
  520. "Name": "TIM EXPIRADO 1 🔵",
  521. "FLAG": "tim",
  522. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]@@@ACL HTTP/2[crlf]Host: plus.google.com[crlf]@@@PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]@@@PROPPATCH http://mercadolivre.com.br HTTP/2[crlf]Host: http://mercadolivre.com.br[crlf]",
  523. "SNI": "",
  524. "TlsIP": "",
  525. "ProxyIP": "177.67.82.201#186.233.118.139",
  526. "ProxyPort": "80",
  527. "Info": "Proxy"
  528. },
  529. {
  530. "Name": "TIM EXPIRADO 2 🔵",
  531. "FLAG": "tim",
  532. "Payload": "HEAD wss://[host] HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]@@@[protocol][crlf] [crlf][crlf]@@@@GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [host] [crlf]Upgrade: websocket[crlf][crlf]@@@PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]@@@HTTP/1.1[crlf] [crlf][crlf]•@@@[protocol] \n\n/@@@HTTP/ [crlf][crlf]|[crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@ACL [host] HTTP/2[crlf]Host: google.es[crlf]Referer: @Laranjo01[crlf]@@@HTTP//@@@ACL HTTP/2[crlf]Host: plus.google.com[crlf]@@@MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]@@@HTTP/ 2\nHOST : m.opera.com\n\n@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@HTTP/ [crlf][crlf]|[crlf]]]@@@MERGE mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]@@@ACL http://1.1.1.1rotate=www.waze.com;buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;www.myspace.com.br;www.waze.com;1.0.0.5[crlf]@@@PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]@@@HTTP/ [crlf][crlf]|[crlf@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]@@@http/ \n\n/@@@PATCH HTTP/1.0 [crlf]Host: map.qq.com[crlf]@@@PROPFIND http://www.microsoft.com HTTP/1.0 Host: www.microsoft.com HTTP/1.0\n \n@@@UNLOCK www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0 Host: www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0\n \n@@@ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]@@@GET http://chat.mundiale.claro.com.br HTTP/1.0[crlf]Host: [app_host]http://chat.mundiale.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@GET wss://api.onesignal.com/ HTTP/1.1[crlf]Host: [host][rlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Referer: google.com[crlf][crlf]@@@ACL /index.html HTTP/1.1[crlf]Host: [host][crlf]Upgrade: websocket[crlf][crlf]",
  533. "SNI": "",
  534. "TlsIP": "",
  535. "ProxyIP": "177.67.82.201#186.233.118.139",
  536. "ProxyPort": "80",
  537. "Info": "Proxy"
  538. },
  539. {
  540. "Name": "TIM EXPIRADO 3 🔵",
  541. "FLAG": "tim",
  542. "Payload": "ACL / HTTP/1.1[crlf]Host: sncnet16.com[split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@RevTunnel[crlf][crlf]@@@[delay_split]ACL / HTTP/1.1[crlf]Host: sncnet16.com[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@RevTunnel[crlf][crlf]",
  543. "SNI": "",
  544. "TlsIP": "",
  545. "ProxyIP": "172.64.154.143#tinyurl.com#104.26.10.41#172.67.69.69#104.26.11.41",
  546. "ProxyPort": "80",
  547. "Info": "Proxy"
  548. },
  549. {
  550. "Name": "TIM SECURITY 🔵",
  551. "FLAG": "tim",
  552. "Payload": "ACL /index.html HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]]",
  553. "SNI": "",
  554. "TlsIP": "",
  555. "ProxyIP": "177.67.82.201#186.233.118.139",
  556. "ProxyPort": "80",
  557. "Info": "Proxy"
  558. },
  559. {
  560. "Name": "TIM TESTE",
  561. "FLAG": "tim",
  562. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]PATCH / HTTP/1.1[crlf]Host: [rotate=www.c6bank.com.br;topspeed.c6bank.app][crlf][crlf][delay_split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 100-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Referer: https://bit.ly/3sk7k0z; https://bit.ly/47ehRco [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  563. "SNI": "",
  564. "TlsIP": "",
  565. "ProxyIP": "104.16.239.166",
  566. "ProxyPort": "80",
  567. "Info": "Proxy"
  568. },
  569. {
  570. "Name": "CLARO FRONT 1 🔴✅",
  571. "FLAG": "claro",
  572. "Payload": "GET /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]@@@GET / HTTP/1.5[crlf]Host: [rotate=d37lx9e954u3qw.cloudfront.net][crlf]backend: app28[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  573. "SNI": "",
  574. "TlsIP": "",
  575. "ProxyIP": "ni.portal-universal.com#mobile2.twimg.com",
  576. "ProxyPort": "80",
  577. "Info": "Proxy"
  578. },
  579. {
  580. "Name": "CLARO FRONT 2 🔴",
  581. "FLAG": "claro",
  582. "Payload": "GET ws://[rotate=d37lx9e954u3qw.cloudfront.net]/app28 HTTP/1.1[lf]Host: lio-x-onboarding-app.m4u.com.br[lf]Connection: Upgrade[lf]Upgrade: websocket[lf][lf]",
  583. "SNI": "",
  584. "TlsIP": "",
  585. "ProxyIP": "lio-x-onboarding-app.m4u.com.br#tim-controle-captive-portal.stg.m4u.com.br",
  586. "ProxyPort": "80",
  587. "Info": "Proxy"
  588. },
  589. {
  590. "Name": "CLARO SECURITY 🔴",
  591. "FLAG": "claro",
  592. "Payload": "[delay_split][lf]HTTP/ \nHost: www.claro.com.br\n\n\n \n@@@GET / HTTP/1.1[crlf]@@@HTTP/ \nHost: www.claro.com.br\n\n\n \n@@@HTTP/ \nHost: Romz.ipcdn.shop \n\n\n \n@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;v;mobile.google.com;1.0.0.5[crlf]@@@[delay_split][crlf]GET / HTTP/1.1[lf]Host: 186.233.118.139[lf]Upgrade: websocket[lf]",
  593. "SNI": "",
  594. "TlsIP": "",
  595. "ProxyIP": "177.67.82.201#186.233.118.139",
  596. "ProxyPort": "80",
  597. "Info": "Proxy"
  598. },
  599. {
  600. "Name": "CLARO DIRECT 🔴",
  601. "FLAG": "claro",
  602. "Payload": "BASELINE-CONTROL http://faq.claro.com.br HTTP/1.0[crlf]Host: http://faq.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@BASELINE-CONTROL http://bonuz.claro.com.br HTTP/1.0[crlf]Host: http://contaonline2.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@BASELINE-CONTROL http://www.claro.com.br HTTP/1.0[crlf]Host: http://www.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@BASELINE-CONTROL http://api.commandcenter.claro.com.br HTTP/1.0[crlf]Host: http://api.commandcenter.claro.com.br [crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf] ][crlf]",
  603. "SNI": "",
  604. "TlsIP": "",
  605. "ProxyIP": "177.67.82.201#186.233.118.139",
  606. "ProxyPort": "80",
  607. "Info": "Proxy"
  608. },
  609. {
  610. "Name": "OI 🟡",
  611. "FLAG": "claro",
  612. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  613. "SNI": "",
  614. "TlsIP": "",
  615. "ProxyIP": "104.16.53.111",
  616. "ProxyPort": "80",
  617. "Info": "Proxy"
  618. }
  619. ]
  620. }
comments powered by Disqus