SSH 5G

SUBMITTED BY: GFA

DATE: March 27, 2024, 1:35 a.m.

UPDATED: May 3, 2024, 4:42 a.m.

FORMAT: Text only

SIZE: 84.3 kB

History Raw Download

HITS: 2054

Report
  1. {
  2. "Version": "0.0.0",
  3. "ReleaseNotes": false,
  4. "UrlUpdate": "https://bitbin.it/JtpbRZDO/",
  5. "Sms": "",
  6. "logoonline": false,
  7. "fundoonline": false,
  8. "fundoDoLogOnline": false,
  9. "EmailFeedback": "",
  10. "UrlContato": "",
  11. "UrlTermos": "",
  12. "CheckUser": "",
  13. "ModderLinkWhatsapp": false,
  14. "ModderLinkTelegram": false,
  15. "ModderCorCaixaServ": false,
  16. "ModderCorCaixaPay": false,
  17. "ModderCorCaixaCentral": false,
  18. "ModderCorCaixaConexao": false,
  19. "ModderCorCaixaUsuario": false,
  20. "ModderCorCaixaSenha": false,
  21. "ModderCorBotaoIniciar": false,
  22. "ModderCorBotaoLog": false,
  23. "ModderCorBotaoConfig": false,
  24. "Udp": [
  25. {
  26. "Porta": "7300"
  27. },
  28. {
  29. "Porta": "7100"
  30. },
  31. {
  32. "Porta": "7200"
  33. }
  34. ],
  35. "Servers": [
  36. {
  37. "Name": "LINK SSH",
  38. "TYPE": "premium",
  39. "FLAG": "br.png",
  40. "ServerIP": "164.152.255.193",
  41. "CheckUser": "http://painel.linkssh.cloud/checkuser/conecta4g.php",
  42. "ServerPort": "22",
  43. "SSLPort": "443",
  44. "USER": "",
  45. "PASS": ""
  46. }
  47. ],
  48. "Networks": [
  49. {
  50. "Name": "♻️ CONEXÃO VIVO",
  51. "FLAG": "vivo",
  52. "Payload": "",
  53. "SNI": "",
  54. "TlsIP": "",
  55. "ProxyIP": "",
  56. "ProxyPort": "",
  57. "Info": ""
  58. },
  59. {
  60. "Name": "VIVO DADOS",
  61. "FLAG": "vivo",
  62. "Payload": "[split][delay_split]ACL / /\\n#HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]#PUT / Cache-Control: private: Web-security[crlf]@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@ACL / HTTP/1.1[crlf][crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: ff.garena.com[lf]\r\n[15/03, 17:00]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@HTTP/1.1[lf]Host: [rotate=foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com][lf]Upgrade: Websocket[lf][split][lf]#HTTP/1.1 200[crlf]Host: vimeo.com[crlf][crlf][netData][crlf]@mip [crlf][crlf]http://uber.com/ HTTP/1.1 200[crlf]mip[crlf][crlf] [crlf][crlf]http://udemy.com/ HTTP/1.1 200[crlf]Host@mip[crlf][crlf] [crlf][crlf] http://aliyuncs.com/ HTTP/1.1 200[crlf]Host fastly.net/[crlf][crlf][netData][crlf] [crlf][crlf] http://pornhub.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf] http://google.com/ HTTP/1.1[cr][lf] [crlf][crlf][netData][cr][lf] [crlf][crlf]CONNECT mip:22@http://youtube.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf]",
  63. "SNI": "portalrecarga.vivo.com.br",
  64. "TlsIP": "164.152.255.193#104.21.57.13",
  65. "ProxyIP": "164.152.255.193#104.21.57.13",
  66. "ProxyPort": "80",
  67. "Info": "Proxy"
  68. },
  69. {
  70. "Name": "VIVO CDN [1]",
  71. "FLAG": "vivo",
  72. "Payload": "[split][crlf]GET /HTTP/1.1[crlf]Host: cname.maquina6.shop.global.prod.fastly.net[crlf]",
  73. "SNI": "",
  74. "TlsIP": "2.taurosnet.xyz",
  75. "ProxyIP": "2.taurosnet.xyz",
  76. "ProxyPort": "80",
  77. "Info": "Proxy"
  78. },
  79. {
  80. "Name": "VIVO CDN [2]",
  81. "FLAG": "vivo",
  82. "Payload": "PATCH / HTTP/1.1[lf]Host: cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]@@HEAD / HTTP/1.1[lf]Host: cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  83. "SNI": "",
  84. "TlsIP": "164.152.255.193",
  85. "ProxyIP": "164.152.255.193",
  86. "ProxyPort": "80",
  87. "Info": "Proxy"
  88. },
  89. {
  90. "Name": "VIVO CDN [3]",
  91. "FLAG": "vivo",
  92. "Payload": "ACL http://[rotate=c.whatsapp.net;web.whatsapp.com;m.twitter.com;m.waze.com;whatsapp.com]/ HTTP/1.1[lf]Host: [rotate=c.whatsapp.net;web.whatsapp.com;m.twitter.com;m.waze.com;whatsapp.com][crlf]CONNECT [host_port] [protocol][lf]",
  93. "SNI": "",
  94. "TlsIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87",
  95. "ProxyIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87",
  96. "ProxyPort": "80",
  97. "Info": "Proxy"
  98. },
  99. {
  100. "Name": "VIVO FLARE [4]",
  101. "FLAG": "vivo",
  102. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL / HTTP/1.1[crlf]Host: cdn.brandmetrics.com[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]TMYSSH[crlf][crlf]",
  103. "SNI": "",
  104. "TlsIP": "172.64.155.199#104.18.32.57",
  105. "ProxyIP": "172.64.155.199#104.18.32.57",
  106. "ProxyPort": "80",
  107. "Info": "Proxy"
  108. },
  109. {
  110. "Name": "VIVO [5]",
  111. "FLAG": "vivo",
  112. "Payload": "[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  113. "SNI": "",
  114. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  115. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  116. "ProxyPort": "80",
  117. "Info": "Proxy"
  118. },
  119. {
  120. "Name": "VIVO [6]",
  121. "FLAG": "vivo",
  122. "Payload": "[delay_split][lf]ACL / TCP/ HTTP2 /1.9 delay-split\r\nGateway-HTTP/2.0[crlf]Host:[random=d2otuevvauu0xn.cloudfront.net;d222nk4e4zrn11.cloudfront.net;d1hu588lul0tna.cloudfront.net]",
  123. "SNI": "",
  124. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  125. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  126. "ProxyPort": "80",
  127. "Info": "Proxy"
  128. },
  129. {
  130. "Name": "VIVO [7]",
  131. "FLAG": "vivo",
  132. "Payload": "[delay_split][lf]ACL /HTTP / http://d1vxorl6kzpw89.cloudfront.net;rotate=177.8.170.122;201.13.147.161;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=201.20.79.182;143.137.116.72;177.30.47.57;1.0.0.5;45.6.101.97;168.232.213.9[crlf]",
  133. "SNI": "",
  134. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  135. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  136. "ProxyPort": "80",
  137. "Info": "Proxy"
  138. },
  139. {
  140. "Name": "VIVO [8]",
  141. "FLAG": "vivo",
  142. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
  143. "SNI": "",
  144. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  145. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  146. "ProxyPort": "80",
  147. "Info": "Proxy"
  148. },
  149. {
  150. "Name": "VIVO [9]",
  151. "FLAG": "vivo",
  152. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
  153. "SNI": "",
  154. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  155. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  156. "ProxyPort": "80",
  157. "Info": "Proxy"
  158. },
  159. {
  160. "Name": "VIVO [10]",
  161. "FLAG": "vivo",
  162. "Payload": "[delay_split]GET http://m.clarosync.com/ HTTP/1.1 Host: http://m.clarosync.com/\r\nUser-Agent: Yes\r\nConnection: close\r\nProxy-Connection: Keep-Alive\r\n[crlf][crlf][netData][crlf] [crlf][crlf]",
  163. "SNI": "",
  164. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  165. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  166. "ProxyPort": "80",
  167. "Info": "Proxy"
  168. },
  169. {
  170. "Name": "VIVO SECURITY [1]",
  171. "FLAG": "vivo",
  172. "Payload": "[delay_split][rotate=HEAD;GET;UPDATE;ACL;BDELETE;BMOVE;BPROPFIND;LOCK;MERGE;MKCOL;MOVE;NOTIFY;ORDERPATCH;PATCH;POLL;PROPFIND;SEARCH;SUBSCRIBE;UNSUBSCRIBE;UNLOCK] / HTTP /1.2 Host: [random=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;soilelementhitdrawsit.org;atrytgoi.com;domoneysincemeanquart.org;fontbit.io;teethlistentrainwhosheet.org;vivoturbo.com.br;label.com.co.il.web.whatsapp.com;vivofibra.com.br;unpkg.com;storema.us][lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf][lf]",
  173. "SNI": "",
  174. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  175. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  176. "ProxyPort": "80",
  177. "Info": "Proxy"
  178. },
  179. {
  180. "Name": "VIVO SECURITY [2]",
  181. "FLAG": "vivo",
  182. "Payload": "[delay_split][rotate=HEAD;GET;UPDATE;ACL;BDELETE;BMOVE;BPROPFIND;LOCK;MERGE;MKCOL;MOVE;NOTIFY;ORDERPATCH;PATCH;POLL;PROPFIND;SEARCH;SUBSCRIBE;UNSUBSCRIBE;UNLOCK] / HTTP /1.2 Host: [random=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;soilelementhitdrawsit.org;atrytgoi.com;domoneysincemeanquart.org;fontbit.io;teethlistentrainwhosheet.org;vivoturbo.com.br;label.com.co.il.web.whatsapp.com;vivofibra.com.br;unpkg.com;storema.us][lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf][lf]",
  183. "SNI": "",
  184. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  185. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  186. "ProxyPort": "",
  187. "Info": "Tlsws"
  188. },
  189. {
  190. "Name": "VIVO SECURITY [3]",
  191. "FLAG": "vivo",
  192. "Payload": "[delay_split][lf]ACL / HTTP/1.2[lf]Host: [random=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;soilelementhitdrawsit.org;atrytgoi.com;domoneysincemeanquart.org;fontbit.io;teethlistentrainwhosheet.org;vivoturbo.com.br;label.com.co.il.web.whatsapp.com;vivofibra.com.br;unpkg.com;storema.us][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\\\\\\\\\\\\\\\n\\\\\\\\\\\\\\\\n\\\\\\\\\\\\\\\\n \\\\\\\\\\\\\\\\n@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@@[delay_split]ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]",
  193. "SNI": "",
  194. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  195. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  196. "ProxyPort": "80",
  197. "Info": "Proxy"
  198. },
  199. {
  200. "Name": "VIVO SECURITY [4]",
  201. "FLAG": "vivo",
  202. "Payload": "[split][lf]ACL / HTTP/1.1[crlf]Host: vigia.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]",
  203. "SNI": "",
  204. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  205. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  206. "ProxyPort": "",
  207. "Info": "Proxy"
  208. },
  209. {
  210. "Name": "VIVO SECURITY [5]",
  211. "FLAG": "vivo",
  212. "Payload": "CONNECT tibr-sdgw.datami.net:22 [protocol][crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]#ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]@@@ACL HTTP/1.1 Host: plus.google.com \\\\r\\\\n \\\\r\\\\n@@@MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: [host][crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)tlcomputingbr[crlf]Referer: http://www.google.com[crlf]#[protocol][crlf] [crlf][crlf]@@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@HTTP/1.1[crlf] [crlf][crlf]•@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: foda-se-o-governo[lf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@HTTP/ [crlf][crlf]|[crlf]#PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@[protocol][crlf] [crlf][crlf]@@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@HTTP/ 2\\\\nHOST : m.opera.com\\\\n\\\\@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: r03.spine101.lax01.fab.netarch.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]@@@[protocol] \\\\n\\\\n/@@@POST HTTP/1.1[crlf]Host:www.waze.com[crlf][crlf]@@@\\\\r[split][raw] ACL HTTP/1.1\\\\n \\\\n [host][auth][ua] POLL@@@PUT / Cache-Control: private: Web-security[crlf]@@@\\\\n\\\\r[split][raw][crlf] POLL HTTP/1.0\\\\n\\\\n[host_port][ua][auth][crlf]POLL@@@ACL / HTTP/1.1[crlf][crlf]@@@PUT / Cache-Control: private: Web-security[crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@[delay_split][raw]@@@UPDATE HTTP/1.200\\nHost: aol.com/Connection: Keep-AliveContent- GET https://translate.google.com.br/?hl=pt-BR/ HTTP ?Connection: Keep-Alive: 23.97.96.93/ ¿ HTTP/1.1/api/v1/user/registerAnonymous[lf]@@@[delay_split]GET /HTTP 1.2#[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br[lf]@@@CONNECT 127.0.0.1:80[instant_split]GET www.veek.com.br HTTP/1.1[crlf][crlf]@@@[split][crlf]GET / HTTP/1.1[crlf]Host: SEUDOMÍNIOFRONT/ARGILE[crlf]Connection: Upgrade[crlf]User-Agent: Telegram:interflashplus http://portalrecarga.vivo.com.br;127.0.0:80;8.8.8.8:8.8.4.4:22[ua][crlf]Upgrade: websocket[crlf][crlf]@@@DELETE / HTTP/1.1[crlf]Host: [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]X-Forwarded-For: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split]PATCH http://portal.vivo.com.br/ HTTP/1.1[crlf]Host: portal.vivo.com.br[crlf][crlf]",
  213. "SNI": "",
  214. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  215. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  216. "ProxyPort": "80",
  217. "Info": "Proxy"
  218. },
  219. {
  220. "Name": "VIVO SECYRITY [6]",
  221. "FLAG": "vivo",
  222. "Payload": "[rotate=ACL;BDELETE;BMOVE;BPROPFIND;LOCK;MERGE;MKCOL;MOVE;NOTIFY;ORDERPATCH;PATCH;POLL;PROPFIND;SEARCH;SUBSCRIBE;UNSUBSCRIBE;UNLOCK;UPDATE] HTTP/1.1[crlf]Host: [rotate=www.atresplayer.com;www.aol.com;google.com;appengine.google.com;bdn.dev;origin-test.bdn.dev;cloud.google.com;crowdsource.google.com;datacompute.google.com;googleadapis.com;googleapis.cn;googlevideo.com;gstatic.cn;gstatic-cn.com;googlecnapps.cn;googlecnapps.cn;googleapps-cn.com;googleapps-cn.com;gkecnapps.cn;gkecnapps.cn;googledownloads.cn;googledownloads.cn;recaptcha.net.cn;recaptcha.net.cn;recaptcha-cn.net;recaptcha-cn.net;widevine.cn;ampproject.org.cn;ampproject.org.cn;ampproject.net.cn;ampproject.net.cn;google-analytics-cn.com;google-analytics-cn.com;googleadservices-cn.com;googleadservices-cn.com;googlevads-cn.com;googlevads-cn.com;googleapis-cn.com;googleapis-cn.com;googleoptimize-cn.com;googleoptimize-cn.com;doubleclick-cn.net;doubleclick-cn.net;fls.doubleclick-cn.net;g.doubleclick-cn.net;doubleclick.cn;doubleclick.cn;fls.doubleclick.cn;g.doubleclick.cn;dartsearch-cn.net;dartsearch-cn.net;googletraveladservices-cn.com;googletraveladservices-cn.com;googletagservices-cn.com;googletagservices-cn.com;googletagmanager-cn.com;googletagmanager-cn.com;googlesyndication-cn.com;googlesyndication-cn.com;safeframe.googlesyndication-cn.com;app-measurement-cn.com;app-measurement-cn.com;gvt1-cn.com;gvt1-cn.com;gvt2-cn.com;gvt2-cn.com;2mdn-cn.net;googleflights-cn.net;googleflights-cn.net;admob-cn.com;admob-cn.com;googlesandbox-cn.com;googlesandbox-cn.com;safenup.googlesandbox-cn.com;gstatic.com;metric.gstatic.com;gvt1.com;gcpcdn.gvt1.com;gvt2.com;gcp.gvt2.com;url.google.com;youtube-nocookie.com;ytimg.com;android.com;flash.andro;g.cn;g.co;www.goo.gl;google-analytics.com;google-analytics.com;google.com;googlecommerce.com;ggpht.cn;urchin.com;youtu.be;youtube.com;youtubeeducation.com;youtubekids.com;yt.be;android.clients.google.com;developer.android.google.cn;developers.android.google.cn;source.android.google.cn;m.youtube.com;wap.yy.com;net.supercell.com;www.disney.com;www.bbc.com;www.godaddy.com;adclick.g.doubleclick.net;www.buzzfeed.com;www.alipay.com;www.monster.com;www.playstation.net;mail.hotmail.com;ads.mopub.com;m.weibo.cn;www.flickr.com;d1n212ccp6ldpw.cloudfront.net;www.ebay.com;api-oyon.viu.com;download.cdn.viber.com;www.palcomp3.com;www.line.me;www.xvideos.com;www.nba.com;www.samsung.com;vivo.com;vivo.com.br;www.sina.com;www.cnn.com;www.youtube.com;www.bradesco.com.br;www.spotify.com;www.netflix.com;www.apple.com;www.skype.com;www.mercadolivre.com.br;ideas.mercadolibre.com;www.tidal.com;wn.qq.com;www.akamaized.net;www.iflix.com.br;www.myspace.com;www.opera.com;www.xbox.com;www.amazon.com;www.soundcloud.com;opera-mini.net;www.deezer.com;www.olx.com.br;www.wechat.com;googleads.g.;itunes.com;www.terra.com;mail.google.com;www.pinterest.com;www.blackberry.com;www.operamini.com;www.uber.com;www.wikipedia.com;www.utorrent.com;www.msn.com;www.googlesyndication.com;m.mobilelegends.com;www.badoo.com;www.tripadvisor.com.br;www.kik.com;www.movistar.co;www.cabify.com;www.bing.com;www.crashlytics.com;www.hooq.tv;cdn.ml.youngjoygame.com;www.reddit.com;imgur.com;adash.man.aliyuncs.com;www.sky.com.br;mtalk.google.com;twitter.com;t.co;www.google.com;ff.garena.com;googleads.g.doubleclick.net;e.crashlytics.com ;get.adobe.com;www.movistar.com;m.waze.com][crlf] [crlf][crlf] [crlf]",
  223. "SNI": "",
  224. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  225. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  226. "ProxyPort": "80",
  227. "Info": "Proxy"
  228. },
  229. {
  230. "Name": "VIVO SECURITY [7]",
  231. "FLAG": "vivo",
  232. "Payload": "[delay_split][rotate=HEAD;GET;UPDATE;ACL;BDELETE;BMOVE;BPROPFIND;LOCK;MERGE;MKCOL;MOVE;NOTIFY;ORDERPATCH;PATCH;POLL;PROPFIND;SEARCH;SUBSCRIBE;UNSUBSCRIBE;UNLOCK] / HTTP /1.2 Host: [random=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud;soilelementhitdrawsit.org;atrytgoi.com;domoneysincemeanquart.org;fontbit.io;teethlistentrainwhosheet.org;vivoturbo.com.br;label.com.co.il.web.whatsapp.com;vivofibra.com.br;unpkg.com;storema.us][lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf][lf]",
  233. "SNI": "",
  234. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b",
  235. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b",
  236. "ProxyPort": "80",
  237. "Info": "Proxy"
  238. },
  239. {
  240. "Name": "UNIVERSAL CDN [1]",
  241. "FLAG": "vivo",
  242. "Payload": "[delay_split][crlf][rotate=PATCH;GET;HEAD] wss://[rotate=cliente1.sslpro.shop;linkssh.space]/ HTTP/1.0[crlf]Host: [rotate=static.whatsapp.com;m.waze.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Upgrade: Websocket[crlf]Proxy-Connection: Keep-Alive; Upgrade[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]@TSTOPSPEED[crlf][crlf]",
  243. "SNI": "",
  244. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  245. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  246. "ProxyPort": "80",
  247. "Info": "Proxy"
  248. },
  249. {
  250. "Name": "UNIVERSAL CDN [2]",
  251. "FLAG": "vivo",
  252. "Payload": "GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]#http/ \\n\\n°#HTTP/ [crlf][crlf]|[crlf]#HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]#[protocol] \\n\\n/#[Protocol][crlf] [crlf][crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@HTTP/ 2\\nHOST : m.opera.com\\n\\n@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n#ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]#MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]#MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]#ACL HTTP/1.1[lf]Host: google.es[lf]#[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]",
  253. "SNI": "",
  254. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  255. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  256. "ProxyPort": "80",
  257. "Info": "Proxy"
  258. },
  259. {
  260. "Name": "UNIVERSAL CDN [3]",
  261. "FLAG": "vivo",
  262. "Payload": "[delay_split][crlf][rotate=PATCH;GET;HEAD] wss://[rotate=cliente1.sslpro.shop;linkssh.space]/ HTTP/1.1[lf]Host: [rotate=static.whatsapp.com;m.waze.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com;browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamin.i.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]@@@GET / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@PATCH / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@HEAD / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n",
  263. "SNI": "",
  264. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b",
  265. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b",
  266. "ProxyPort": "",
  267. "Info": "Proxy"
  268. },
  269. {
  270. "Name": "UNIVERSAL CDN [4]",
  271. "FLAG": "vivo",
  272. "Payload": "PATCH / HTTP/1.1[crlf][split]Host: [rotate=cliente1.sslpro.shop][crlf]Connection: Upgrade[lf]Upgrade: Websocket[crlf][crlf]@@@GET / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@HEAD / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n",
  273. "SNI": "",
  274. "TlsIP": "65.9.86.69#65.9.86.7#65.9.66.10#65.9.86.77#65.9.86.111#65.9.86.64#143.204.98.69#143.204.68.84#143.204.98.33#143.204.215.28#143.204.215.124#143.204.215.54#143.204.176.71#143.204.215.110#143.204.215.127#143.204.98.11#143.204.68.76#143.204.98.104#143.204.215.91#143.204.191.47#143.204.191.102#143.204.215.30#143.204.98.97#143.204.215.11#143.204.176.12913.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#18.67.145.94#108.139.134.18#108.139.182.69#108.139.95.47#108.139.95.121#18.67.145.84#18.67.145.53#18.67.145.97#65.8.214.57#65.8.214.124#65.8.214.122#65.8.214.56#108.139.95.126#108.139.182.15#108.139.182.47#108.139.182.47#18.161.200.50#18.161.200.81#18.161.200.41#18.161.200.80#18.161.200.96#18.67.145.109",
  275. "ProxyIP": "65.9.86.69#65.9.86.7#65.9.66.10#65.9.86.77#65.9.86.111#65.9.86.64#143.204.98.69#143.204.68.84#143.204.98.33#143.204.215.28#143.204.215.124#143.204.215.54#143.204.176.71#143.204.215.110#143.204.215.127#143.204.98.11#143.204.68.76#143.204.98.104#143.204.215.91#143.204.191.47#143.204.191.102#143.204.215.30#143.204.98.97#143.204.215.11#143.204.176.12913.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#18.67.145.94#108.139.134.18#108.139.182.69#108.139.95.47#108.139.95.121#18.67.145.84#18.67.145.53#18.67.145.97#65.8.214.57#65.8.214.124#65.8.214.122#65.8.214.56#108.139.95.126#108.139.182.15#108.139.182.47#108.139.182.47#18.161.200.50#18.161.200.81#18.161.200.41#18.161.200.80#18.161.200.96#18.67.145.109",
  276. "ProxyPort": "80",
  277. "Info": "Proxy"
  278. },
  279. {
  280. "Name": "UNIVERSAL CDN [5]",
  281. "FLAG": "vivo",
  282. "Payload": "[delay_split][crlf][rotate=PATCH;GET;HEAD] wss://[rotate=cliente1.sslpro.shop;linkssh.space]/ HTTP/1.0[crlf]Host: [rotate=static.whatsapp.com;m.waze.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Upgrade: Websocket[crlf]Proxy-Connection: Keep-Alive; Upgrade[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]@TSTOPSPEED[crlf][crlf]",
  283. "SNI": "",
  284. "TlsIP": "frontend-tim-recarga-client.m4u.com.br#52.85.213.77#52.85.213.112#52.85.213.121#52.85.213.74#52.67.198.135#cc-brand.plat-m4u.io#108.139.113.45#dex.descomplica.com.br#13.33.123.107#18.67.129.91#18.67.129.103#18.67.129.119#18.67.129.10#oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#13.227.126.39#13.227.126.40#13.227.126.91#13.227.126.39#13.227.126.40#13.227.126.91#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#104.26.5.32#104.16.239.166#104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  285. "ProxyIP": "frontend-tim-recarga-client.m4u.com.br#52.85.213.77#52.85.213.112#52.85.213.121#52.85.213.74#52.67.198.135#cc-brand.plat-m4u.io#108.139.113.45#dex.descomplica.com.br#13.33.123.107#18.67.129.91#18.67.129.103#18.67.129.119#18.67.129.10#oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#13.227.126.39#13.227.126.40#13.227.126.91#13.227.126.39#13.227.126.40#13.227.126.91#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#104.26.5.32#104.16.239.166#104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  286. "ProxyPort": "80",
  287. "Info": "Proxy"
  288. },
  289. {
  290. "Name": "VIVO CONTROLE [1]",
  291. "FLAG": "vivo",
  292. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:br01.linkssh.space[crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  293. "SNI": "",
  294. "TlsIP": "141.193.213.10#141.193.213.11#104.18.18.210#104.18.19.210#104.18.22.136#104.18.23.136#104.17.70.206#104.17.71.206#104.17.72.206#104.17.73.206#104.17.74.206#104.26.4.32#104.26.5.32",
  295. "ProxyIP": "141.193.213.10#141.193.213.11#104.18.18.210#104.18.19.210#104.18.22.136#104.18.23.136#104.17.70.206#104.17.71.206#104.17.72.206#104.17.73.206#104.17.74.206#104.26.4.32#104.26.5.32",
  296. "ProxyPort": "80",
  297. "Info": "Proxy"
  298. },
  299. {
  300. "Name": "♻️ CONEXÃO TIM",
  301. "FLAG": "tim",
  302. "Payload": "",
  303. "SNI": "",
  304. "TlsIP": "",
  305. "ProxyIP": "",
  306. "ProxyPort": "",
  307. "Info": ""
  308. },
  309. {
  310. "Name": "TIM CDN [1]",
  311. "FLAG": "tim",
  312. "Payload": "PATCH / HTTP/1.1[lf]Host:cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  313. "SNI": "",
  314. "TlsIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87",
  315. "ProxyIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87",
  316. "ProxyPort": "80",
  317. "Info": "Proxy"
  318. },
  319. {
  320. "Name": "TIM CDN [2]",
  321. "FLAG": "tim",
  322. "Payload": "PATCH / HTTP/1.1[lf]Host:cliente1.sslpro.shop[lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  323. "SNI": "",
  324. "TlsIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100",
  325. "ProxyIP": "oi-recarga.oston.io#www.timlive.tim.com.br#timlive.tim.com.br#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100",
  326. "ProxyPort": "80",
  327. "Info": "Proxy"
  328. },
  329. {
  330. "Name": "TIM CDN [3]",
  331. "FLAG": "tim",
  332. "Payload": "POST / HTTP/1.1[crlf]Host:cliente1.sslpro.shop[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  333. "SNI": "",
  334. "TlsIP": "pa-s3-edu-prod-cdn.edu.com#cdn2.webdamdb.com#www.internetdatim.com.br#cdn-prod.securiti.ai#timbrasil.widen.net#status.ookla.com#brmotorolan#w.vteximg.com.br#io.vtex.com.br#forums.lenovo.com#activity-flow.vtex.com",
  335. "ProxyIP": "pa-s3-edu-prod-cdn.edu.com#cdn2.webdamdb.com#www.internetdatim.com.br#cdn-prod.securiti.ai#timbrasil.widen.net#status.ookla.com#brmotorolan#w.vteximg.com.br#io.vtex.com.br#forums.lenovo.com#activity-flow.vtex.com",
  336. "ProxyPort": "80",
  337. "Info": "Proxy"
  338. },
  339. {
  340. "Name": "TIM CDN/Flare",
  341. "FLAG": "tim",
  342. "Payload": "GET / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@PATCH / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@HEAD / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@[delay_split]ACL wss://br01.linkssh.space HTTP/1.1[lf]Host: [rotate=browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]#[protocol][crlf] [crlf][crlf]@",
  343. "SNI": "cliente1.sslpro.shop",
  344. "TlsIP": "br01.linkssh.space#substackcdn.com#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#www.datadoghq-browser-agent.com#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113#substack.com#fee.org#tender.cash",
  345. "ProxyIP": "br01.linkssh.space#substackcdn.com#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#www.datadoghq-browser-agent.com#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113#substack.com#fee.org#tender.cash",
  346. "ProxyPort": "80",
  347. "Info": "Proxy"
  348. },
  349. {
  350. "Name": "TIM NOVA MASTER",
  351. "FLAG": "tim",
  352. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=support.snapfish.com;support.mapmyfitness.com;br01.linkssh.space;support.kontakt.io;uarecord.zendesk.com;sweetroad.zendesk.com;vsco.zendesk.com;support.onetwotrip.com;support.viki.com;support.holmsecurity.com;support.mobileroadie.com;support.neuronmocap.com;support.dxo.com;help.clickfunnels.com;screencastsonline.zendesk.com;support.celtx.com;support.muslimpro.com;support.discogs.com;sginteractive.zendesk.com;support.credly.com;support.sugarsync.com;help.rushlimbaugh.com;support.kidizen.com;support.twilio.com;support.mumbojumbo.com;tpbgame.zendesk.com;ingresshelp.zendesk.com;help.ableton.com;help.spreadshirt.com;wetransfer.zendesk.com;help.issuu.com;meetv.zendesk.com;eight.zendesk.com;help.iheart.com;help.standingstonegames.com;help.trainerize.com;help.coasttocoastam.com;support.securly.com;workflowy.zendesk.com;support.renvu.com;g5entertainment.zendesk.com;support.zipcar.com;gemsofwar.zendesk.com;support.watch.nba.com;faq.hellosign.com;screenad.eu;support.riotgames.com;support.paradoxplaza.com;layananku.airavpn.site;drpanda.zendesk.com;support.fiplab.com;help.behance.net;slack.zendesk.com;aide.e-monsite.com;support.cwtv.com;support.strikingly.com;prodigygame.zendesk.com;support.nixplay.com;flaregames.zendesk.com:support.cmon.com;faq.mightynetworks.com;support.wealthnavi.com;help.musicnotes.com;help.makemeslick.com;help.getmevo.com;support.abra.com;help.tcgplayer.com;mykronoz.zendesk.com;support.ankama.com;help.grindr.com;support.gordonedwards.net;support.mobi2go.com;support.ipvanish.com;support.withings.com;lykkex.zendesk.com;pggmencoleden.zendesk.com;help.positivegrid.com;helpdesk.flexradio.com;help.dreamhost.com;support.cambr;dgeenglish.org;support.ask.fm;care.pressreader.com;help.olx.in;moonactive.zendesk.com;support.getbase.com;history.zendesk.com;produttivo.zendesk.com;support.orcid.org;support.golocalapps.com;support.moneytap.jp;help.acuityscheduling.com;support-pocket.sumally.com;help.remind.com;support.awesome-table.com;support.ampleair.com.au;cs.vtcmobile.vn;support.oneup.com;sup;ort.scribd.com;ecosia.zendesk.com;support.dbconvert.com;cbchelp.cbc.ca;get.cloudapp.help;support.thetileapp.com;support.taskrabbit.com;support.clickcease.com;support.bestwebsoft.com;support.waveapps.com;support.oceanex.pro;autovit.zendesk.com][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: br01.linkssh.space[crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: [crlf]Referer: abre.ai/itechnet2 [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  353. "SNI": "cliente1.sslpro.shop",
  354. "TlsIP": "www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  355. "ProxyIP": "www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  356. "ProxyPort": "80",
  357. "Info": "Proxy"
  358. },
  359. {
  360. "Name": "TIM CDN FLARE [1]",
  361. "FLAG": "tim",
  362. "Payload": "GET / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@PATCH / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@HEAD / HTTP/1.1\r\nHost: cliente1.sslpro.shop\r\nConnection: Upgrade\r\nUpgrade: websocket\\n\\n@@@[delay_split]ACL wss://br01.linkssh.space HTTP/1.1[lf]Host: [rotate=browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]#[protocol][crlf] [crlf][crlf]@",
  363. "SNI": "",
  364. "TlsIP": "br01.linkssh.space#substackcdn.com#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#www.datadoghq-browser-agent.com#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113#substack.com#fee.org#tender.cash",
  365. "ProxyIP": "br01.linkssh.space#substackcdn.com#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#www.datadoghq-browser-agent.com#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#13.226.22.87#104.19.240.25#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113#substack.com#fee.org#tender.cash",
  366. "ProxyPort": "80",
  367. "Info": "Proxy"
  368. },
  369. {
  370. "Name": "TIM DDD 61,21,62,31 [1]",
  371. "FLAG": "tim",
  372. "Payload": "[delay_split]ACL wss://br01.linkssh.space HTTP/1.1[lf]Host: [rotate=browser-update.org;maxcdn.bootstrapcdn.com;maxcdn.bootstrapcdn.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]",
  373. "SNI": "",
  374. "TlsIP": "substack.com#fee.org#tender.cash",
  375. "ProxyIP": "substack.com#fee.org#tender.cash",
  376. "ProxyPort": "80",
  377. "Info": "Proxy"
  378. },
  379. {
  380. "Name": "TIM DIRECT",
  381. "FLAG": "tim",
  382. "Payload": "ACL / HTTP/1.1[lf]Host: br01.linkssh.space[lf]Upgrade: Websocket[lf]User-Agent: Mobile Safari/9 OPR/9 [lf][split][lf]",
  383. "SNI": "",
  384. "TlsIP": "104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  385. "ProxyIP": "104.19.241.93#104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225",
  386. "ProxyPort": "80",
  387. "Info": "Proxy"
  388. },
  389. {
  390. "Name": "TIM [10]",
  391. "FLAG": "tim",
  392. "Payload": "CONNECT /cdn-cgi/trace HTTP/1.1[crlf]Host: www.especifica.descomplica.com.br[crlf][crlf][split][crlf][crlf]TIMBRASIL- / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]",
  393. "SNI": "",
  394. "TlsIP": "162.159.153.238",
  395. "ProxyIP": "162.159.153.238",
  396. "ProxyPort": "80",
  397. "Info": "Proxy"
  398. },
  399. {
  400. "Name": "TIM [11]",
  401. "FLAG": "tim",
  402. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: [rotate=app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest1.c6bank.tech;mobile.c6bank.app;mobile.c6bank.tech;pre-onboarding-h.c6bank.app;pre-onboarding-p.c6bank.app;saas-h.c6bank.app;www.c6bank.tech][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: br01.linkssh.net[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  403. "SNI": "",
  404. "TlsIP": "104.16.239.166#104.18.99.70",
  405. "ProxyIP": "104.16.239.166#104.18.99.70",
  406. "ProxyPort": "80",
  407. "Info": "Proxy"
  408. },
  409. {
  410. "Name": "TIM [12]",
  411. "FLAG": "tim",
  412. "Payload": "ACL / HTTP/1.1[lf]Host: br01.linkssh.space[lf]Upgrade: Websocket[lf]User-Agent: Mobile Safari/9 OPR/9[lf][split][lf]",
  413. "SNI": "",
  414. "TlsIP": "162.159.128.53",
  415. "ProxyIP": "162.159.128.53",
  416. "ProxyPort": "80",
  417. "Info": "Proxy"
  418. },
  419. {
  420. "Name": "TIM [13]",
  421. "FLAG": "tim",
  422. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=mtls.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;www.c6bank.com.br;creatorsupport.deezer.com;www.c6bank.com.br;ajuda.c6bank.com.br][crlf][delay_split]ACL / HTTP/1.9[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Upgrade: Dalvik/2.1.0 (Linux; U; Android 10; MED-LX9 Build/HUAWEIMED-LX9)[crlf]X-Online-Host:[app_host]www.youtube.com[crlf]X-Forwarded-For:www.youtube.com[crlf]X-Forward-Host: www.skynet.com[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: br01.linkssh.net[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  423. "SNI": "",
  424. "TlsIP": "104.19.241.25#104.16.53.111",
  425. "ProxyIP": "104.19.241.25#104.16.53.111",
  426. "ProxyPort": "80",
  427. "Info": "Proxy"
  428. },
  429. {
  430. "Name": "TIM [14]",
  431. "FLAG": "tim",
  432. "Payload": "GET / HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  433. "SNI": "",
  434. "TlsIP": "172.64.144.109",
  435. "ProxyIP": "172.64.144.109",
  436. "ProxyPort": "80",
  437. "Info": "Proxy"
  438. },
  439. {
  440. "Name": "TIM EXPIRADO [1]",
  441. "FLAG": "tim",
  442. "Payload": "protocol]/A\\B/N\\[lf] [crlf][crlf]|[crlf]ACL[lf]puth[lf]@@@HTTP/ 1[lf]Host: ok.ru HTTP/1.0[crlf]Host: ok.ru#HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]#HTTP/ [crlf][crlf]|[crlf]]]",
  443. "SNI": "",
  444. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  445. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  446. "ProxyPort": "80",
  447. "Info": "Proxy"
  448. },
  449. {
  450. "Name": "TIM EXPIRADO [2]",
  451. "FLAG": "tim",
  452. "Payload": "ACL /index.html HTTP/1.1[crlf]Host: br01.linkssh.space[crlf]Origin: https://live.vivo.com.br/, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  453. "SNI": "",
  454. "TlsIP": "pre-onboarding-h.c6bank.app",
  455. "ProxyIP": "pre-onboarding-h.c6bank.app",
  456. "ProxyPort": "80",
  457. "Info": "Proxy"
  458. },
  459. {
  460. "Name": "TIM EXPIRADO [3]",
  461. "FLAG": "tim",
  462. "Payload": "HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=yhjq23.360.com.fail;alt4.aspmx.l.google.com;www.xhtsw.163.com.fail;www.storm.canny.io;www.reimaginetomorrow-qa.disney.com;www.minecraft.msgfocus.com;www.netflixawards.com;x115gzbrpk.execute-api.us-east-1.amazonaws.com;google.traiteurjongen.com;aspmx.l.google.com.4xfun.com;aspmx.l.google.com.469.it. 20secondenhandenwassen.nl;aspmx.l.google.com.469.it;alt2.aspmx.l.google.com.0088.tv;alt1.aspmx.l.google.com.123sexshop.be;alt2.aspmx.l.google.com.sac-surveyors.org;alt2.aspmx.l.google.com.meta-meta.com;slcch03bl9.execute-api.us-east-1.amazonaws.com][lf]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\r\n\\\r\n\\\r\n \\\r\n@@@HTTP/ 1[lf]Host: access.cloudflare.com;aim.cloudflare.com;admin.sqlite.cloudflare.com;blog.cloudflare.com;c4.speed.cloudflare.com;google.com\\\r\n\\\r\n//PATCH HTTP://L-CDN-VIVO.COM.BR;GOOGLE.COM/DNS 1.1.1.1 - 8.8.8.8 - 1.0.0.1- GLINK.NET.BR-m.youtube.com;facebook.com;bitbin.com@LINK4G\\\r\n\\\r\n\\\r\n \\",
  463. "SNI": "",
  464. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  465. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  466. "ProxyPort": "",
  467. "Info": "Proxy"
  468. },
  469. {
  470. "Name": "TIM EXPIRADO [4]",
  471. "FLAG": "tim",
  472. "Payload": "http/ \\n\\n°#HTTP/ [crlf][crlf]|[crlf]@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]#[protocol] \\n\\n/@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]#[Protocol][crlf] [crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@HTTP/ 2\\nHOST : m.opera.com\\n\\n@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  473. "SNI": "",
  474. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  475. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  476. "ProxyPort": "80",
  477. "Info": "Proxy"
  478. },
  479. {
  480. "Name": "TIM EXPIRADO [5]",
  481. "FLAG": "tim",
  482. "Payload": "http/ \\n\\n°#HTTP/ [crlf][crlf]|[crlf]@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]#[protocol] \\n\\n/@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf@@@[Protocol][crlf] [crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@HTTP/ 2\\nHOST : m.opera.com\\n\\n@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  483. "SNI": "",
  484. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  485. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  486. "ProxyPort": "80",
  487. "Info": "Proxy"
  488. },
  489. {
  490. "Name": "TIM EXPIRADO [6]",
  491. "FLAG": "tim",
  492. "Payload": "MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]#HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@PUT / Cache-Control: private: Web-security[crlf]@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@ACL / HTTP/1.1[crlf][crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=microsoft.com;youtube.com;instagram.com;71.cloudfront.net;www.dropbox.com;m.olx.com.br;ff.garena.com;www.terra.com;salesrock.virginmobile.mx;www.minecraft.msgfocus.com;x115gzbrpk.execute-api.us-east-1.amazonaws.com;google.traiteurjongen.com;aspmx.l.google.com.4xfun.com;slcch03bl9.execute-api.us-east-1.amazonaws.com][lf]",
  493. "SNI": "",
  494. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  495. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  496. "ProxyPort": "80",
  497. "Info": "Tlsws"
  498. },
  499. {
  500. "Name": "TIM EXPIRADO [7]",
  501. "FLAG": "tim",
  502. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=support.snapfish.com;support.mapmyfitness.com;br01.linkssh.space;support.kontakt.io;uarecord.zendesk.com;sweetroad.zendesk.com;vsco.zendesk.com;support.onetwotrip.com;support.viki.com;support.holmsecurity.com;support.mobileroadie.com;support.neuronmocap.com;support.dxo.com;help.clickfunnels.com;screencastsonline.zendesk.com;support.celtx.com;support.muslimpro.com;support.discogs.com;sginteractive.zendesk.com;support.credly.com;support.sugarsync.com;help.rushlimbaugh.com;support.kidizen.com;support.twilio.com;support.mumbojumbo.com;tpbgame.zendesk.com;ingresshelp.zendesk.com;help.ableton.com;help.spreadshirt.com;wetransfer.zendesk.com;help.issuu.com;meetv.zendesk.com;eight.zendesk.com;help.iheart.com;help.standingstonegames.com;help.trainerize.com;help.coasttocoastam.com;support.securly.com;workflowy.zendesk.com;support.renvu.com;g5entertainment.zendesk.com;support.zipcar.com;gemsofwar.zendesk.com;support.watch.nba.com;faq.hellosign.com;screenad.eu;support.riotgames.com;support.paradoxplaza.com;layananku.airavpn.site;drpanda.zendesk.com;support.fiplab.com;help.behance.net;slack.zendesk.com;aide.e-monsite.com;support.cwtv.com;support.strikingly.com;prodigygame.zendesk.com;support.nixplay.com;flaregames.zendesk.com:support.cmon.com;faq.mightynetworks.com;support.wealthnavi.com;help.musicnotes.com;help.makemeslick.com;help.getmevo.com;support.abra.com;help.tcgplayer.com;mykronoz.zendesk.com;support.ankama.com;help.grindr.com;support.gordonedwards.net;support.mobi2go.com;support.ipvanish.com;support.withings.com;lykkex.zendesk.com;pggmencoleden.zendesk.com;help.positivegrid.com;helpdesk.flexradio.com;help.dreamhost.com;support.cambr;dgeenglish.org;support.ask.fm;care.pressreader.com;help.olx.in;moonactive.zendesk.com;support.getbase.com;history.zendesk.com;produttivo.zendesk.com;support.orcid.org;support.golocalapps.com;support.moneytap.jp;help.acuityscheduling.com;support-pocket.sumally.com;help.remind.com;support.awesome-table.com;support.ampleair.com.au;cs.vtcmobile.vn;support.oneup.com;sup;ort.scribd.com;ecosia.zendesk.com;support.dbconvert.com;cbchelp.cbc.ca;get.cloudapp.help;support.thetileapp.com;support.taskrabbit.com;support.clickcease.com;support.bestwebsoft.com;support.waveapps.com;support.oceanex.pro;autovit.zendesk.com][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: br01.linkssh.space[crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: [crlf]Referer: abre.ai/itechnet2 [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  503. "SNI": "",
  504. "TlsIP": "www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  505. "ProxyIP": "www.timex.com#static.addtoany.com#www.teamworkonline.com#www.ufcstore.com#104.16.239.166#104.17.64.225#104.16.239.166#104.16.239.166#104.18.33.113",
  506. "ProxyPort": "80",
  507. "Info": "Proxy"
  508. },
  509. {
  510. "Name": "TIM EXPIRADO [8]",
  511. "FLAG": "tim",
  512. "Payload": "[delay_split]ACL / HTTP/1.1[crlf]Host: [rotate=108.158.161.49;52.85.213.82;52.85.213.26;52.85.213.48;13.227.126.49;104.18.7.41;104.16.56.6;104.19.240.25;104.19.239.25;104.16.9.67][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: supernet5g.xyz[crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]#PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net [crlf]@@@PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br [crlf]",
  513. "SNI": "",
  514. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  515. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  516. "ProxyPort": "",
  517. "Info": "Proxy"
  518. },
  519. {
  520. "Name": "TIM EXPIRADO [9]",
  521. "FLAG": "tim",
  522. "Payload": "[split][lf]ACL / HTTP/ 1[lf]HTTP/ [lf]Host: alt4.aspmx.l.google.com[lf][lf] Upgrade[lf][lf]#MERGE adclick.g.doubleclick.net HTTP/1.0[crlf]Host: adclick.g.doubleclick.net@@@HTTP/ 1[lf]Host: ok.ru HTTP/1.0[crlf]Host: ok.ru@@@HTTP/1.1[lf]Host: [rotate=foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com][lf]Upgrade: Websocket[lf][split][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: ff.garena.com[lf]\r\n[15/03, 17:00]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n",
  523. "SNI": "",
  524. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  525. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  526. "ProxyPort": "80",
  527. "Info": "Proxy"
  528. },
  529. {
  530. "Name": "TIM EXPIRADO [10]",
  531. "FLAG": "tim",
  532. "Payload": "HTTP/1.1 200[crlf]Host: vimeo.com[crlf][crlf][netData][crlf]@mip [crlf][crlf]http://uber.com/ HTTP/1.1 200[crlf]mip[crlf][crlf] [crlf][crlf]http://udemy.com/ HTTP/1.1 200[crlf]Host@mip[crlf][crlf] [crlf][crlf] http://aliyuncs.com/ HTTP/1.1 200[crlf]Host fastly.net/[crlf][crlf][netData][crlf] [crlf][crlf] http://pornhub.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf] http://google.com/ HTTP/1.1[cr][lf] [crlf][crlf][netData][cr][lf] [crlf][crlf]CONNECT mip:22@http://youtube.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf]",
  533. "SNI": "",
  534. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  535. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  536. "ProxyPort": "80",
  537. "Info": "Proxy"
  538. },
  539. {
  540. "Name": "TIM EXPIRADO [11]",
  541. "FLAG": "tim",
  542. "Payload": "GET / HTTP/1.1[crlf]Host: [Host_Port] [crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@http/ \\n\\n°@@@HTTP/ [crlf][crlf]|[crlf]@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@[protocol] \\n\\n/@@@[Protocol][crlf] [crlf][crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@HTTP/ 2\\nHOST : m.opera.com\\n\\n@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n#ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]#MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]#ACL HTTP/1.1[lf]Host: google.es[lf]#[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]",
  543. "SNI": "",
  544. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b",
  545. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b",
  546. "ProxyPort": "80",
  547. "Info": "Proxy"
  548. },
  549. {
  550. "Name": "TIM EXPIRADO [12]",
  551. "FLAG": "tim",
  552. "Payload": "[split][delay_split]ACL / /\\n@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n@@@MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n#ACL HTTP/1.1[lf]Host: google.es[lf]@@@PUT / Cache-Control: private: Web-security[crlf]#ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@ACL / HTTP/1.1[crlf][crlf]#PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  553. "SNI": "",
  554. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  555. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  556. "ProxyPort": "80",
  557. "Info": "Proxy"
  558. },
  559. {
  560. "Name": "TIM EXPIRADO [13]",
  561. "FLAG": "tim",
  562. "Payload": "HTTP/1.1[lf]Host: [rotate=foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com][lf]Upgrade: Websocket[lf][split][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: ff.garena.com[lf]\r\n[15/03, 17:00]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n",
  563. "SNI": "",
  564. "TlsIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  565. "ProxyIP": "0000:0000:0000:0000:0000:ffff:8197:22d9#0000:0000:0000:0000:0000:ffff:a84b:517d#0000:0000:0000:0000:0000:ffff:92eb:215b#0000:0000:0000:0000:0000:ffff:9016:c401",
  566. "ProxyPort": "80",
  567. "Info": "Proxy"
  568. },
  569. {
  570. "Name": "🔴 CLARO ABAIXO 👇",
  571. "FLAG": "claro",
  572. "Payload": "",
  573. "SNI": "",
  574. "TlsIP": "",
  575. "ProxyIP": "",
  576. "ProxyPort": "",
  577. "Info": ""
  578. },
  579. {
  580. "Name": "CLARO [1]",
  581. "FLAG": "claro",
  582. "Payload": "GET / HTTP/1.1[crlf]Host: cliente1.sslpro.shop[crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf][crlf]",
  583. "SNI": "tim-controle-captive-portal.stg.m4u.com.br",
  584. "TlsIP": "13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4#ponte-pix-claro-recarga.plat-m4u.io#52.84.83.92#18.161.200.44#52.84.83.93#52.84.83.44#52.84.83.31#18.161.200.126#18.161.200.6#18.161.200.24#18.161.200.24",
  585. "ProxyIP": "13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#13.227.126.39#13.227.126.40#13.227.126.91#99.84.31.114#99.84.31.97#99.84.31.8#99.84.31.80#dex.descomplica.com.br#io.descomplica.com.br#3.163.10.29#3.163.10.81#3.163.10.19#3.163.10.100#conversions.appsflyer.com#3.163.10.112#3.163.10.104#3.163.10.54#3.163.10.121#13.227.97.69#13.227.97.28#13.227.97.116#13.227.97.49#launches.appsflyer.com#13.33.123.128#13.33.123.29#13.33.123.107#13.33.123.19#18.67.145.96#18.64.207.89#13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.84.31.9#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4#ponte-pix-claro-recarga.plat-m4u.io#52.84.83.92#18.161.200.44#52.84.83.93#52.84.83.44#52.84.83.31#18.161.200.126#18.161.200.6#18.161.200.24#18.161.200.24",
  586. "ProxyPort": "80",
  587. "Info": "Proxy"
  588. },
  589. {
  590. "Name": "CLARO, CONTROLE, FLEX, POS PAGO",
  591. "FLAG": "claro",
  592. "Payload": "GET / HTTP/1.1[crlf]Host: [random=static.whatsapp.com;business.whatsapp.com;web.whatsapp.com;dns.web.whatsapp.com;m.twitter.com;m.waze.com;waze.com;www.waze.com][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  593. "SNI": "",
  594. "TlsIP": "br01.linkssh.space",
  595. "ProxyIP": "br01.linkssh.space",
  596. "ProxyPort": "80",
  597. "Info": "Proxy"
  598. }
  599. ]
  600. }
comments powered by Disqus