Joaojm123

SUBMITTED BY: Joaojm123

DATE: June 3, 2023, 3:13 a.m.

FORMAT: Text only

SIZE: 73.8 kB

Raw Download

HITS: 471

Report
  1. {
  2. "Version": "1.0.3",
  3. "ReleaseNotes": "SERVIDOR FREE ATUALIZAR",
  4. "Sms": "",
  5. "UrlUpdate": "",
  6. "EmailFeedback": "",
  7. "UrlContato": "",
  8. "UrlTermos": "",
  9. "CheckUser": "true",
  10. "UdpPort": "7300",
  11. "Servers": [
  12. {
  13. "Name": "SERVIDOR PREMIUM",
  14. "TYPE": "Premium",
  15. "FLAG": "br.png",
  16. "ServerIP": "p01.sshtproect.shop",
  17. "CheckUser": "",
  18. "ServerPort": "80",
  19. "SSLPort": "80",
  20. "USER": "",
  21. "PASS": ""
  22. },
  23. {
  24. "Name": "SERVIDOR PREMIUM 1",
  25. "TYPE": "Premium",
  26. "FLAG": "br.png",
  27. "ServerIP": "br1.vtnetplus.shop",
  28. "CheckUser": "http://149.78.185.56:8182/checkUser",
  29. "ServerPort": "80",
  30. "SSLPort": "443",
  31. "USER": "",
  32. "PASS": ""
  33. },
  34. {
  35. "Name": "SERVIDOR FREE",
  36. "TYPE": "Free",
  37. "FLAG": "br.png",
  38. "ServerIP": "08.sshtproect.shop",
  39. "CheckUser": "",
  40. "ServerPort": "80",
  41. "SSLPort": "80",
  42. "USER": "ssht",
  43. "PASS": "ssht"
  44. },
  45. {
  46. "Name": "SERVIDOR FREE",
  47. "TYPE": "Free",
  48. "FLAG": "br.png",
  49. "ServerIP": "marceloxdroid.fredbs1.space",
  50. "CheckUser": "",
  51. "ServerPort": "21",
  52. "SSLPort": "80",
  53. "USER": "free",
  54. "PASS": "free"
  55. },
  56. {
  57. "Name": "SERVIDOR FREE",
  58. "TYPE": "Free",
  59. "FLAG": "br.png",
  60. "ServerIP": "tharsysrs.ml",
  61. "CheckUser": "",
  62. "ServerPort": "80",
  63. "SSLPort": "80",
  64. "USER": "free",
  65. "PASS": "1234"
  66. }
  67. ],
  68. "Networks": [
  69. {
  70. "Name": "TIM VÁLIDO [01]",
  71. "FLAG": "tim",
  72. "Payload": "CONNECT / HTTP/1.9[crlf]host: mail.taipei2025.com[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  73. "SNI": "",
  74. "TlsIP": "",
  75. "ProxyIP": "104.16.19.94",
  76. "ProxyPort": "80",
  77. "Info": "Proxy"
  78. },
  79. {
  80. "Name": "TIM VÁLIDO [02]",
  81. "FLAG": "tim",
  82. "Payload": "GET / HTTP/1.1[lf]Host: mobile.hom.c6bank.app[lf]:[lf][split][lf]GET- / HTTP/1.1[lf] Host:[app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  83. "SNI": "",
  84. "TlsIP": "",
  85. "ProxyIP": "104.16.51.111",
  86. "ProxyPort": "80",
  87. "Info": "Proxy"
  88. },
  89. {
  90. "Name": "TIM VÁLIDO [03]",
  91. "FLAG": "tim",
  92. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  93. "SNI": "",
  94. "TlsIP": "",
  95. "ProxyIP": "104.19.239.25",
  96. "ProxyPort": "80",
  97. "Info": "Proxy"
  98. },
  99. {
  100. "Name": "TIM VÁLIDO [04]",
  101. "FLAG": "tim",
  102. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  103. "SNI": "",
  104. "TlsIP": "",
  105. "ProxyIP": "104.18.27.160",
  106. "ProxyPort": "80",
  107. "Info": "Proxy"
  108. },
  109. {
  110. "Name": "TIM VÁLIDO [05]",
  111. "FLAG": "tim",
  112. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.1[crlf]Host: [app_host] [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  113. "SNI": "carreiras.landing.stoodi.com.br",
  114. "TlsIP": "",
  115. "ProxyIP": "172.67.162.233",
  116. "ProxyPort": "80",
  117. "Info": "Proxy"
  118. },
  119. {
  120. "Name": "TIM VÁLIDO [06]",
  121. "FLAG": "tim",
  122. "Payload": "GET / HTTP/1.1[crlf]Host: zen-deezer.com[crlf]Expect: 100-continue
  123. [crlf][crlf][split]ACL- / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade [crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  124. "SNI": "",
  125. "TlsIP": "",
  126. "ProxyIP": "104.16.51.111",
  127. "ProxyPort": "80",
  128. "Info": "Proxy"
  129. },
  130. {
  131. "Name": "TIM VÁLIDO [07]",
  132. "FLAG": "tim",
  133. "Payload": "GET / HTTP/1.1[crlf]Host: www.zen-deezer.com[crlf]Expect: 100-continue
  134. [crlf][crlf][split]ACL- / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade [crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  135. "SNI": "",
  136. "TlsIP": "",
  137. "ProxyIP": "104.16.51.111",
  138. "ProxyPort": "80",
  139. "Info": "Proxy"
  140. },
  141. {
  142. "Name": "TIM VÁLIDO [08]",
  143. "FLAG": "tim",
  144. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host:[app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  145. "SNI": "",
  146. "TlsIP": "",
  147. "ProxyIP": "support.quali.com",
  148. "ProxyPort": "80",
  149. "Info": "Proxy"
  150. },
  151. {
  152. "Name": "TIM VÁLIDO [09]",
  153. "FLAG": "tim",
  154. "Payload": "GET /cdn-cgi/trace HTTP/1.1[crlf]Host: www.opensignal.com[crlf][crlf]CF-RAY / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: upgrade[crlf]Proxy-Connection: keep-alive[crlf]X-Online-Host: www.opensignal.com[crlf]X-Forward-Host: www.opensignal.com[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  155. "SNI": "",
  156. "TlsIP": "",
  157. "ProxyIP": "104.26.10.155",
  158. "ProxyPort": "80",
  159. "Info": "Proxy"
  160. },
  161. {
  162. "Name": "TIM VÁLIDO [10]",
  163. "FLAG": "tim",
  164. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: boleto.c6bank.com.br[crlf]X-Online-Host: boleto.c6bank.com.br[crlf]X-Forward-Host: boleto.c6bank.com.br[crlf]X-Forwarded-For: boleto.c6bank.com.br[crlf]Expect: 100-continue[crlf][delay_split][crlf]PUT- /@/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]User-Agent: yes[crlf][crlf]",
  165. "SNI": "",
  166. "TlsIP": "",
  167. "ProxyIP": "pre-onboarding-p.c6bank.app",
  168. "ProxyPort": "80",
  169. "Info": "Proxy"
  170. },
  171. {
  172. "Name": "TIM VÁLIDO [11]",
  173. "FLAG": "tim",
  174. "Payload": "PUTwss://jobs.deezer.com/ HTTP/1.1[crlf]Host: jobs.deezer.com[crlf]X-Online-Host: jobs.deezer.com[crlf]X-Forward-Host: jobs.deezer.com[crlf]X-Forwarded-For: jobs.deezer.com[crlf]Expect: 100-continue[crlf][delay_split][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: yes[crlf][crlf]",
  175. "SNI": "",
  176. "TlsIP": "",
  177. "ProxyIP": "104.16.51.111",
  178. "ProxyPort": "80",
  179. "Info": "Direct"
  180. },
  181. {
  182. "Name": "TIM VÁLIDO [12]",
  183. "FLAG": "tim",
  184. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  185. "SNI": "",
  186. "TlsIP": "",
  187. "ProxyIP": "104.19.239.25",
  188. "ProxyPort": "80",
  189. "Info": "Proxy"
  190. },
  191. {
  192. "Name": "TIM VÁLIDO [13]",
  193. "FLAG": "tim",
  194. "Payload": "GET / HTTP/1.1
  195. Host: api.onesignal.com
  197. [split]
  199. GET-CONTROL / HTTP/1.1
  200. Host: [app_host]
  201. Upgrade: WebSocket
  202. Connection: Upgrade
  203. Connection: keep-alive\r\n\r\n",
  204. "SNI": "",
  205. "TlsIP": "",
  206. "ProxyIP": "104.18.225.52",
  207. "ProxyPort": "80",
  208. "Info": "Proxy"
  209. },
  210. {
  211. "Name": "TIM VÁLIDO [14]",
  212. "FLAG": "tim",
  213. "Payload": "GET / HTTP/1.1[crlf]Host: jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  214. "SNI": "",
  215. "TlsIP": "",
  216. "ProxyIP": "support.jungledisk.com",
  217. "ProxyPort": "80",
  218. "Info": "Proxy"
  219. },
  220. {
  221. "Name": "TIM VÁLIDO [15]",
  222. "FLAG": "tim",
  223. "Payload": "GET / HTTP/1.1\nHost: c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  224. "SNI": "",
  225. "TlsIP": "",
  226. "ProxyIP": "104.18.28.182",
  227. "ProxyPort": "80",
  228. "Info": "Proxy"
  229. },
  230. {
  231. "Name": "TIM VÁLIDO [16]",
  232. "FLAG": "tim",
  233. "Payload": "GET / HTTP/1.1\nHost: c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  234. "SNI": "",
  235. "TlsIP": "",
  236. "ProxyIP": "104.19.239.25",
  237. "ProxyPort": "80",
  238. "Info": "Proxy"
  239. },
  240. {
  241. "Name": "TIM VÁLIDO [17]",
  242. "FLAG": "tim",
  243. "Payload": "GET / HTTP/1.1[crlf]Host: dommoenergia.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  244. "SNI": "",
  245. "TlsIP": "",
  246. "ProxyIP": "172.67.162.233",
  247. "ProxyPort": "80",
  248. "Info": "Proxy"
  249. },
  250. {
  251. "Name": "TIM VÁLIDO [18]",
  252. "FLAG": "tim",
  253. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  254. "SNI": "appdev.c6bank.app",
  255. "TlsIP": "",
  256. "ProxyIP": "104.16.51.111",
  257. "ProxyPort": "80",
  258. "Info": "Proxy"
  259. },
  260. {
  261. "Name": "TIM VÁLIDO [19]",
  262. "FLAG": "tim",
  263. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  264. "SNI": "helpypro.stoodi.com.br",
  265. "TlsIP": "",
  266. "ProxyIP": "104.19.239.25",
  267. "ProxyPort": "80",
  268. "Info": "Proxy"
  269. },
  270. {
  271. "Name": "TIM EXPIRADO [01]",
  272. "FLAG": "tim",
  273. "Payload": "HEAD wss://[app_host] HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]",
  274. "SNI": "[app_host]",
  275. "TlsIP": "",
  276. "ProxyIP": "104.18.29.182 ",
  277. "ProxyPort": "80",
  278. "Info": "Direct"
  279. },
  280. {
  281. "Name": "TIM EXPIRADO [02]",
  282. "FLAG": "tim",
  283. "Payload": "[protocol][crlf] [crlf][crlf]@",
  284. "TlsIP": "",
  285. "ProxyIP": "[app_host]",
  286. "ProxyPort": "80",
  287. "Info": "Direct"
  288. },
  289. {
  290. "Name": "TIM EXPIRADO [03]",
  291. "FLAG": "tim",
  292. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: websocket[crlf][crlf]",
  293. "SNI": "feedback.infinitepay.io",
  294. "TlsIP": "",
  295. "ProxyIP": "104.16.18.94",
  296. "ProxyPort": "80",
  297. "Info": "Direct"
  298. },
  299. {
  300. "Name": "TIM EXPIRADO [04]",
  301. "FLAG": "tim",
  302. "Payload": "PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]",
  303. "SNI": "",
  304. "TlsIP": "",
  305. "ProxyIP": "[app_host]",
  306. "ProxyPort": "80",
  307. "Info": "Direct"
  308. },
  309. {
  310. "Name":"TIM EXPIRADO [05]",
  311. "FLAG":"tim",
  312. "Payload":"HTTP/1.1[crlf] [crlf][crlf]•",
  313. "SNI":"",
  314. "TlsIP":"",
  315. "ProxyIP":"[app_host]",
  316. "ProxyPort":"80",
  317. "Info": "Direct"
  318. },
  319. {
  320. "Name":"TIM EXPIRADO [06]",
  321. "FLAG":"tim",
  322. "Payload":"[protocol] \n\n/",
  323. "SNI":"",
  324. "TlsIP":"",
  325. "ProxyIP":"[app_host]",
  326. "ProxyPort":"80",
  327. "Info": "Proxy"
  328. },
  329. {
  330. "Name":"TIM EXPIRADO [07]",
  331. "FLAG":"tim",
  332. "Payload":"HTTP/ [crlf][crlf]|[crlf]",
  333. "SNI":"",
  334. "TlsIP":"",
  335. "ProxyIP":"[app_host]",
  336. "ProxyPort":"80",
  337. "Info": "Direct"
  338. },
  339. {
  340. "Name":"TIM EXPIRADO [08]",
  341. "FLAG":"tim",
  342. "Payload":"PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  343. "SNI":"",
  344. "TlsIP":"",
  345. "ProxyIP":"[app_host]",
  346. "ProxyPort":"80",
  347. "Info": "Proxy"
  348. },
  349. {
  350. "Name": "TIM EXPIRADO [09]",
  351. "FLAG": "tim",
  352. "Payload": "ACL [app_host] HTTP/2[crlf]Host: google.es[crlf]Referer: @Laranjo01[crlf]",
  353. "SNI": "[app_host]",
  354. "TlsIP": "[app_host]",
  355. "ProxyIP": "[app_host]",
  356. "ProxyPort": "80",
  357. "Info": "Proxy"
  358. },
  359. {
  360. "Name": "TIM EXPIRADO [10]",
  361. "FLAG": "tim",
  362. "Payload": "HTTP/ \n\n\ ",
  363. "SNI": "",
  364. "TlsIP": "",
  365. "ProxyIP": "[app_host]",
  366. "ProxyPort": "80",
  367. "Info": "Direct"
  368. },
  369. {
  370. "Name": "TIM EXPIRADO [11]",
  371. "FLAG": "tim",
  372. "Payload": "ACL HTTP/2[crlf]Host: plus.google.com[crlf]",
  373. "SNI": "",
  374. "TlsIP": "",
  375. "ProxyIP": "[app_host]",
  376. "ProxyPort": "80",
  377. "Info": "Direct"
  378. },
  379. {
  380. "Name": "TIM EXPIRADO [12]",
  381. "FLAG": "tim",
  382. "Payload": "MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]",
  383. "SNI": "",
  384. "TlsIP": "",
  385. "ProxyIP": "[app_host]",
  386. "ProxyPort": "80",
  387. "Info": "Direct"
  388. },
  389. {
  390. "Name":"TIM EXPIRADO [13]",
  391. "FLAG":"tim",
  392. "Payload":"HTTP/ 2\nHOST : m.opera.com\n\n",
  393. "SNI":"",
  394. "TlsIP":"",
  395. "ProxyIP":"[app_host]",
  396. "ProxyPort":"80",
  397. "Info": "Direct"
  398. },
  399. {
  400. "Name":"TIM EXPIRADO [14]",
  401. "FLAG":"tim",
  402. "Payload":"HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]",
  403. "SNI":"",
  404. "TlsIP":"",
  405. "ProxyIP":"[app_host]",
  406. "ProxyPort":"80",
  407. "Info": "Direct"
  408. },
  409. {
  410. "Name": "TIM EXPIRADO [15]",
  411. "FLAG": "tim",
  412. "Payload": "HTTP/ [crlf][crlf]|[crlf]]]",
  413. "SNI": "",
  414. "TlsIP": "",
  415. "ProxyIP": "[app_host]",
  416. "ProxyPort": "80",
  417. "Info": "Direct"
  418. },
  419. {
  420. "Name": "TIM EXPIRADO [16]",
  421. "FLAG": "tim",
  422. "Payload": "MERGE mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]",
  423. "SNI": "",
  424. "TlsIP": "",
  425. "ProxyIP": "[app_host]",
  426. "ProxyPort": "80",
  427. "Info": "Proxy"
  428. },
  429. {
  430. "Name": "TIM EXPIRADO [17]",
  431. "FLAG": "tim",
  432. "Payload": "ACL http://1.1.1.1rotate=www.waze.com;buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;www.myspace.com.br;www.waze.com;1.0.0.5[crlf]",
  433. "SNI": "",
  434. "TlsIP": "",
  435. "ProxyIP": "[app_host]",
  436. "ProxyPort": "80",
  437. "Info": "Proxy"
  438. },
  439. {
  440. "Name": "TIM EXPIRADO [18]",
  441. "FLAG": "tim",
  442. "Payload": "PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]",
  443. "SNI": "",
  444. "TlsIP": "",
  445. "ProxyIP": "[app_host]",
  446. "ProxyPort": "80",
  447. "Info": "Proxy"
  448. },
  449. {
  450. "Name": "TIM EXPIRADO [19]",
  451. "FLAG": "tim",
  452. "Payload": "MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]",
  453. "SNI": "",
  454. "TlsIP": "",
  455. "ProxyIP": "[app_host]",
  456. "ProxyPort": "80",
  457. "Info": "Proxy"
  458. },
  459. {
  460. "Name": "TIM EXPIRADO [20]",
  461. "FLAG": "tim",
  462. "Payload": "HTTP/ [crlf][crlf]|[crlf",
  463. "SNI": "",
  464. "TlsIP": "",
  465. "ProxyIP": "[app_host]",
  466. "ProxyPort": "80",
  467. "Info": "Direct"
  468. },
  469. {
  470. "Name":"TIM EXPIRADO [21]",
  471. "FLAG":"tim",
  472. "Payload":"MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  473. "SNI":"",
  474. "TlsIP":"",
  475. "ProxyIP":"[app_host]",
  476. "ProxyPort":"80",
  477. "Info": "Direct"
  478. },
  479. {
  480. "Name": "TIM EXPIRADO [22]",
  481. "FLAG": "tim",
  482. "Payload": "http/ \n\n/",
  483. "SNI": "",
  484. "TlsIP": "",
  485. "ProxyIP": "[app_host]",
  486. "ProxyPort": "80",
  487. "Info": "Direct"
  488. },
  489. {
  490. "Name": "TIM EXPIRADO [23]",
  491. "FLAG": "tim",
  492. "Payload": "PATCH HTTP/1.0 [crlf]Host: map.qq.com[crlf]",
  493. "SNI": "",
  494. "TlsIP": "",
  495. "ProxyIP": "[app_host]",
  496. "ProxyPort": "80",
  497. "Info": "Direct"
  498. },
  499. {
  500. "Name": "TIM EXPIRADO [24]",
  501. "FLAG": "tim",
  502. "Payload": "PROPFIND http://www.microsoft.com HTTP/1.0 Host: www.microsoft.com HTTP/1.0\n \n",
  503. "SNI": "",
  504. "TlsIP": "",
  505. "ProxyIP": "[app_host]",
  506. "ProxyPort": "80",
  507. "Info": "Direct"
  508. },
  509. {
  510. "Name": "TIM EXPIRADO [25]",
  511. "FLAG": "tim",
  512. "Payload": "UNLOCK www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0 Host: www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0\n \n",
  513. "SNI": "",
  514. "TlsIP": "",
  515. "ProxyIP": "[app_host]",
  516. "ProxyPort": "80",
  517. "Info": "Direct"
  518. },
  519. {
  520. "Name":"TIM EXPIRADO [26]",
  521. "FLAG":"tim",
  522. "Payload":"ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]",
  523. "SNI":"",
  524. "TlsIP":"",
  525. "ProxyIP":"[app_host]",
  526. "ProxyPort":"80",
  527. "Info": "Proxy"
  528. },
  529. {
  530. "Name":"TIM EXPIRADO [27]",
  531. "FLAG":"tim",
  532. "Payload": "GET http://chat.mundiale.claro.com.br HTTP/1.0[crlf]Host: [app_host]http://chat.mundiale.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  533. "SNI":"",
  534. "TlsIP":"",
  535. "ProxyIP":"[app_host]",
  536. "ProxyPort":"80",
  537. "Info": "Proxy"
  538. },
  539. {
  540. "Name": "TIM EXPIRADO [28]",
  541. "FLAG": "tim",
  542. "Payload": "GET wss://api.onesignal.com/ HTTP/1.1[crlf]Host: [app_host][rlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Referer: google.com[crlf][crlf]",
  543. "SNI": "",
  544. "TlsIP": "",
  545. "ProxyIP": "104.18.225.52",
  546. "ProxyPort": "80",
  547. "Info": "Proxy"
  548. },
  549. {
  550. "Name": "TIM REGIÕES [01]",
  551. "FLAG": "tim",
  552. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  553. "SNI": "",
  554. "TlsIP": "",
  555. "ProxyIP": "104.16.51.111",
  556. "ProxyPort": "80",
  557. "Info": "Direct"
  558. },
  559. {
  560. "Name": "TIM REGIÕES [02]",
  561. "FLAG": "tim",
  562. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  563. "SNI": "",
  564. "TlsIP": "",
  565. "ProxyIP": "104.16.53.111",
  566. "ProxyPort": "80",
  567. "Info": "Direct"
  568. },
  569. {
  570. "Name": "TIM REGIÕES [03]",
  571. "FLAG": "tim",
  572. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: websocket[lf]User-Agent: yes[lf][lf]",
  573. "SNI": "",
  574. "TlsIP": "",
  575. "ProxyIP": "helpypro.stoodi.com.br",
  576. "ProxyPort": "80",
  577. "Info": "Direct"
  578. },
  579. {
  580. "Name": "TIM REGIÕES [04]",
  581. "FLAG": "tim",
  582. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  583. "SNI": "duvidas.ampli.com.br",
  584. "TlsIP": "104.16.53.111",
  585. "ProxyIP": "",
  586. "ProxyPort": "443",
  587. "Info": "Tlsws"
  588. },
  589. {
  590. "Name": "TIM REGIÕES [05]",
  591. "FLAG": "tim",
  592. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  593. "SNI": "duvidas.ampli.com.br",
  594. "TlsIP": "duvidas.ampli.com.br",
  595. "ProxyIP": "",
  596. "ProxyPort": "443",
  597. "Info": "Tlsws"
  598. },
  599. {
  600. "Name": "TIM REGIÕES [06]",
  601. "FLAG": "tim",
  602. "Payload": "GET wss://support.deezer.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  603. "SNI": "support.deezer.com",
  604. "TlsIP": "support.deezer.com",
  605. "ProxyIP": "",
  606. "ProxyPort": "443",
  607. "Info": "Tlsws"
  608. },
  609. {
  610. "Name": "TIM REGIÕES [07]",
  611. "FLAG": "tim",
  612. "Payload": "GET wss://auth-uat-us.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  613. "SNI": "auth-uat-us.surveymonkey.com",
  614. "TlsIP": "104.18.7.22",
  615. "ProxyIP": "",
  616. "ProxyPort": "443",
  617. "Info": "Tlsws"
  618. },
  619. {
  620. "Name": "TIM REGIÕES [08]",
  621. "FLAG": "tim",
  622. "Payload": "GET wss://workplaceservices.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  623. "SNI": "workplaceservices.surveymonkey.com",
  624. "TlsIP": "workplaceservices.surveymonkey.com",
  625. "ProxyIP": "",
  626. "ProxyPort": "443",
  627. "Info": "Tlsws"
  628. },
  629. {
  630. "Name": "VIVO PRÉ [01]",
  631. "FLAG": "vivo",
  632. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  633. "SNI": "[app_host]",
  634. "TlsIP": "",
  635. "ProxyIP": "104.16.51.111",
  636. "ProxyPort": "80",
  637. "Info": "Proxy"
  638. },
  639. {
  640. "Name": "VIVO PRÉ [02]",
  641. "FLAG": "vivo",
  642. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: [app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  643. "SNI": "",
  644. "TlsIP": "",
  645. "ProxyIP": "104.16.51.111",
  646. "ProxyPort": "80",
  647. "Info": "Proxy"
  648. },
  649. {
  650. "Name": "VIVO PRÉ [03]",
  651. "FLAG": "vivo",
  652. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  653. "SNI": "",
  654. "TlsIP": "",
  655. "ProxyIP": "ffsupportbd.garena.com",
  656. "ProxyPort": "80",
  657. "Info": "Proxy"
  658. },
  659. {
  660. "Name": "VIVO PRÉ [04]",
  661. "FLAG": "vivo",
  662. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  663. "SNI": "",
  664. "TlsIP": "",
  665. "ProxyIP": "104.16.51.111",
  666. "ProxyPort": "80",
  667. "Info": "Proxy"
  668. },
  669. {
  670. "Name": "VIVO PRÉ [05]",
  671. "FLAG": "vivo",
  672. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  673. "SNI": "",
  674. "TlsIP": "",
  675. "ProxyIP": "ayuda.tigo.com.gt",
  676. "ProxyPort": "80",
  677. "Info": "Proxy"
  678. },
  679. {
  680. "Name": "VIVO PRÉ [06]",
  681. "FLAG": "vivo",
  682. "Payload": "GET / HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  683. "SNI": "[app_host]",
  684. "TlsIP": "",
  685. "ProxyIP": "104.18.29.182 ",
  686. "ProxyPort": "80",
  687. "Info": "Direct"
  688. },
  689. {
  690. "Name": "VIVO PRÉ [07]",
  691. "FLAG": "vivo.png",
  692. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  693. "SNI": "[app_host]",
  694. "TlsIP": "104.16.51.111",
  695. "ProxyIP": "",
  696. "ProxyPort": "",
  697. "Info": "Tlsws"
  698. },
  699. {
  700. "Name": "VIVO PRÉ [08]",
  701. "FLAG": "vivo.png",
  702. "Payload": "GET / HTTP/1.1
  703. Host: infoprodutos.stoodi.com.br
  704. Connection: Upgrade
  706. [instant_split]
  708. GET- / HTTP/1.1
  709. Host:[app_host]
  710. Expect: 100-continue
  711. Upgrade: WebSocket
  712. Connection: keep-alive\r\n\r\n",
  713. "SNI": "",
  714. "TlsIP": "",
  715. "ProxyIP": "104.18.102.194",
  716. "ProxyPort": "80",
  717. "Info": "Proxy"
  718. },
  719. {
  720. "Name": "VIVO PRÉ [09]",
  721. "FLAG": "vivo",
  722. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf][lf]",
  723. "SNI": "",
  724. "TlsIP": "",
  725. "ProxyIP": "104.16.51.111",
  726. "ProxyPort": "80",
  727. "Info": "Direct"
  728. },
  729. {
  730. "Name": "VIVO PRÉ [10]",
  731. "FLAG": "vivo",
  732. "Payload": "GET / HTTP/1.1[lf]Host: support.deezer.com[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host:[app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  733. "SNI": "",
  734. "TlsIP": "",
  735. "ProxyIP": "104.18.22.26",
  736. "ProxyPort": "80",
  737. "Info": "Proxy"
  738. },
  739. {
  740. "Name": "VIVO PRÉ [11]",
  741. "FLAG": "vivo",
  742. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  743. "SNI": "",
  744. "TlsIP": "",
  745. "ProxyIP": "helpypro.stoodi.com.br",
  746. "ProxyPort": "80",
  747. "Info": "Proxy"
  748. },
  749. {
  750. "Name": "VIVO PRÉ [12]",
  751. "FLAG": "vivo",
  752. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  753. "SNI": "",
  754. "TlsIP": "",
  755. "ProxyIP": "unpkg.com",
  756. "ProxyPort": "80",
  757. "Info": "Direct"
  758. },
  759. {
  760. "Name": "VIVO PRÉ [13]",
  761. "FLAG": "vivo",
  762. "Payload": "BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]SAMU[crlf][crlf]",
  763. "SNI": "[app_host]",
  764. "TlsIP": "104.16.51.111",
  765. "ProxyIP": "",
  766. "ProxyPort": "443",
  767. "Info": "Tlsws"
  768. },
  769. {
  770. "Name": "VIVO PRÉ [14]",
  771. "FLAG": "vivo",
  772. "Payload": "BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]SAMU[crlf][crlf]",
  773. "SNI": "[app_host]",
  774. "TlsIP": "104.16.53.111",
  775. "ProxyIP": "",
  776. "ProxyPort": "443",
  777. "Info": "Tlsws"
  778. },
  779. {
  780. "Name": "VIVO PRÉ [15]",
  781. "FLAG": "vivo",
  782. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  783. "SNI": "[app_host]",
  784. "TlsIP": "104.16.53.111",
  785. "ProxyIP": "",
  786. "ProxyPort": "443",
  787. "Info": "Tlsws"
  788. },
  789. {
  790. "Name": "VIVO PRÉ [16]",
  791. "FLAG": "vivo",
  792. "Payload": "GET HTTP://[random=[app_host]] HTTP/1.1[crlf]Host: [rotate=atendimento.lojadointer.com.br;atendimento.magazineluiza.com.br;mycannabisconversation.com.br;compre.vivo.com.br;snow.vivo.com.br;backoffice-equipamentos01.vivo.com.br][crlf]Upgrade: Websocket[crlf][crlf]",
  793. "SNI": "[app_host]",
  794. "TlsIP": "atendimento.lojadointer.com.br",
  795. "ProxyIP": "",
  796. "ProxyPort": "",
  797. "Info": "Tlsws"
  798. },
  799. {
  800. "Name": "VIVO PRÉ [17]",
  801. "FLAG": "vivo",
  802. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf][lf]",
  803. "SNI": "",
  804. "TlsIP": "",
  805. "ProxyIP": "104.17.74.206",
  806. "ProxyPort": "80",
  807. "Info": "Direct"
  808. },
  809. {
  810. "Name": "VIVO PRÉ [18]",
  811. "FLAG": "vivo",
  812. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf][lf]",
  813. "SNI": "",
  814. "TlsIP": "",
  815. "ProxyIP": "104.16.111.133",
  816. "ProxyPort": "80",
  817. "Info": "Direct"
  818. },
  819. {
  820. "Name": "VIVO PRÉ [19]",
  821. "FLAG": "vivo",
  822. "Payload": "GET / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  823. "SNI": "",
  824. "TlsIP": "",
  825. "ProxyIP": "104.16.53.111",
  826. "ProxyPort": "80",
  827. "Info": "Proxy"
  828. },
  829. {
  830. "Name": "VIVO PRÉ [20]",
  831. "FLAG": "vivo",
  832. "Payload": "GET / Index.html HTTP/1.9[crlf]Host: [app_host] [crlf]Upgrade: Streamwebsocket[crlf]Connection: Upgrade
  833. Sec-WebSocket-Key: x3JJHMbDL1EzLkh9GBhXDw==[crlf]Sec-WebSocket-Protocol: chat[crlf]Sec-WebSocket-Version: 13[crlf]Set-Cookie: Key=value; SameSite=Strict[crlf]Origin: https://portalrecarga.vivo.com.br/recarga/home/[crlf][crlf]",
  834. "SNI": "",
  835. "TlsIP": "",
  836. "ProxyIP": "104.16.51.111",
  837. "ProxyPort": "80",
  838. "Info": "Proxy"
  839. },
  840. {
  841. "Name": "VIVO PRÉ [21]",
  842. "FLAG": "vivo",
  843. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  844. "SNI": "[app_host]",
  845. "TlsIP": "",
  846. "ProxyIP": "104.16.51.111",
  847. "ProxyPort": "80",
  848. "Info": "Proxy"
  849. },
  850. {
  851. "Name": "VIVO PRÉ [22]",
  852. "FLAG": "vivo",
  853. "Payload": "GET http://www.claro.com.br HTTP/1.0[crlf]Host: http://www.claro.com.br[crlf]Conexão: keep-alive[crlf]User-Agent: Update [crlf][crlf]",
  854. "SNI": "",
  855. "TlsIP": "",
  856. "ProxyIP": "[app_host]",
  857. "ProxyPort": "80",
  858. "Info": "Direct"
  859. },
  860. {
  861. "Name": "VIVO PRE [23]",
  862. "FLAG": "ic_vivo",
  863. "Payload": "FORCE /? FULL / HTTP/1.0[crlf]HOST: [app_host][crlf]UPGRADE: LaranjoPika[crlf][crlf]",
  864. "SNI": "104.16.51.111",
  865. "TlsIP": "104.16.51.111",
  866. "ProxyIP": "104.16.51.111",
  867. "ProxyPort": "80",
  868. "Info": "proxy"
  869. },
  870. {
  871. "Name": "VIVO PRE [24]",
  872. "FLAG": "ic_vivo",
  873. "Payload": "FORCE /? FULL / HTTP/1.0[crlf]HOST: [app_host][crlf]UPGRADE: LaranjoPika[crlf][crlf]",
  874. "SNI": "162.159.133.62",
  875. "TlsIP": "162.159.133.62",
  876. "ProxyIP": "162.159.133.62",
  877. "ProxyPort": "80",
  878. "Info": "proxy"
  879. },
  880. {
  881. "Name": "VIVO PRE [25]",
  882. "FLAG": "ic_vivo",
  883. "Payload": "FORCE /? FULL / HTTP/1.0[crlf]HOST: [app_host][crlf]UPGRADE: LaranjoPika[crlf][crlf]",
  884. "SNI": "104.16.53.111/",
  885. "TlsIP": "104.16.53.111/",
  886. "ProxyIP": "104.16.53.111/",
  887. "ProxyPort": "80",
  888. "Info": "proxy"
  889. },
  890. {
  891. "Name": "VIVO PRE [26]",
  892. "FLAG": "ic_vivo",
  893. "Payload": "LaranjoPika- wss://support.deezer.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  894. "SNI": "support.deezer.com",
  895. "TlsIP": "104.16.53.111",
  896. "ProxyIP": "",
  897. "ProxyPort": "80",
  898. "Info": "Tlsws"
  899. },
  900. {
  901. "Name": "VIVO PRE [27]",
  902. "FLAG": "ic_vivo",
  903. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  904. "SNI": "104.18.23.26",
  905. "TlsIP": "104.18.23.26",
  906. "ProxyIP": "104.18.23.26",
  907. "ProxyPort": "80",
  908. "Info": "proxy"
  909. },
  910. {
  911. "Name": "VIVO PRÉ [28]",
  912. "FLAG": "ic_vivo",
  913. "Payload": "LaranjoPika- wss://auth.of.c6bank.com.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  914. "SNI": "auth.of.c6bank.com.br",
  915. "TlsIP": "104.16.53.111",
  916. "ProxyIP": "",
  917. "ProxyPort": "80",
  918. "Info": "Tlsws"
  919. },
  920. {
  921. "Name": "VIVO FRONT [01]",
  922. "FLAG": "vivo",
  923. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  924. "SNI": "",
  925. "TlsIP": "",
  926. "ProxyIP": "108.139.119.129",
  927. "ProxyPort": "80",
  928. "Info": "Proxy"
  929. },
  930. {
  931. "Name": "VIVO FRONT [02]",
  932. "FLAG": "vivo",
  933. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  934. "SNI": "",
  935. "TlsIP": "",
  936. "ProxyIP": "52.85.213.23",
  937. "ProxyPort": "80",
  938. "Info": "Proxy"
  939. },
  940. {
  941. "Name": "VIVO FRONT [03]",
  942. "FLAG": "vivo",
  943. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  944. "SNI": "",
  945. "TlsIP": "",
  946. "ProxyIP": "52.85.213.59",
  947. "ProxyPort": "80",
  948. "Info": "Proxy"
  949. },
  950. {
  951. "Name": "VIVO FRONT [04]",
  952. "FLAG": "vivo",
  953. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  954. "SNI": "",
  955. "TlsIP": "",
  956. "ProxyIP": "18.64.174.70",
  957. "ProxyPort": "80",
  958. "Info": "Proxy"
  959. },
  960. {
  961. "Name": "VIVO FRONT [05]",
  962. "FLAG": "vivo",
  963. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  964. "SNI": "",
  965. "TlsIP": "",
  966. "ProxyIP": "de.tealeaf.ibmcloud.com",
  967. "ProxyPort": "80",
  968. "Info": "Proxy"
  969. },
  970. {
  971. "Name": "VIVO FRONT [06]",
  972. "FLAG": "vivo",
  973. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  974. "SNI": "",
  975. "TlsIP": "",
  976. "ProxyIP": "imagesjp.ice.ibmcloud.com",
  977. "ProxyPort": "80",
  978. "Info": "Proxy"
  979. },
  980. {
  981. "Name": "VIVO FRONT [07]",
  982. "FLAG": "vivo",
  983. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  984. "SNI": "",
  985. "TlsIP": "",
  986. "ProxyIP": "cdnssl.clicktale.net",
  987. "ProxyPort": "80",
  988. "Info": "Proxy"
  989. },
  990. {
  991. "Name": "VIVO FRONT [08]",
  992. "FLAG": "vivo",
  993. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: WebSocket[crlf][crlf]",
  994. "SNI": "",
  995. "TlsIP": "",
  996. "ProxyIP": "recarga.vivo.com.br",
  997. "ProxyPort": "80",
  998. "Info": "Proxy"
  999. },
  1000. {
  1001. "Name": "VIVO FRONT [09]",
  1002. "FLAG": "vivo",
  1003. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: WebSocket[crlf][crlf]",
  1004. "SNI": "",
  1005. "TlsIP": "",
  1006. "ProxyIP": "cdnssl.clicktale.net",
  1007. "ProxyPort": "80",
  1008. "Info": "Proxy"
  1009. },
  1010. {
  1011. "Name": "VIVO EASY [01]",
  1012. "FLAG": "vivo",
  1013. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1014. "SNI": "",
  1015. "TlsIP": "",
  1016. "ProxyIP": "104.17.72.206",
  1017. "ProxyPort": "80",
  1018. "Info": "Proxy"
  1019. },
  1020. {
  1021. "Name": "VIVO EASY [02]",
  1022. "FLAG": "vivo",
  1023. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1024. "SNI": "",
  1025. "TlsIP": "",
  1026. "ProxyIP": "104.17.70.206",
  1027. "ProxyPort": "80",
  1028. "Info": "Proxy"
  1029. },
  1030. {
  1031. "Name": "VIVO EASY [03]",
  1032. "FLAG": "vivo",
  1033. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1034. "SNI": "[app_host]",
  1035. "TlsIP": "",
  1036. "ProxyIP": "104.18.7.80",
  1037. "ProxyPort": "80",
  1038. "Info": "Proxy"
  1039. },
  1040. {
  1041. "Name": "VIVO EASY [04]",
  1042. "FLAG": "vivo",
  1043. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1044. "SNI": "",
  1045. "TlsIP": "",
  1046. "ProxyIP": "104.17.71.206",
  1047. "ProxyPort": "80",
  1048. "Info": "Proxy"
  1049. },
  1050. {
  1051. "Name": "VIVO EASY [05]",
  1052. "FLAG": "vivo",
  1053. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1054. "SNI": "",
  1055. "TlsIP": "",
  1056. "ProxyIP": "104.18.6.80",
  1057. "ProxyPort": "80",
  1058. "Info": "Proxy"
  1059. },
  1060. {
  1061. "Name": "VIVO EASY [06]",
  1062. "FLAG": "vivo.png",
  1063. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1064. "SNI": "",
  1065. "TlsIP": "",
  1066. "ProxyIP": "162.159.128.7 ",
  1067. "ProxyPort": "80",
  1068. "Info": "Direct"
  1069. },
  1070. {
  1071. "Name": "VIVO EASY [07]",
  1072. "FLAG": "vivo",
  1073. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1074. "SNI": "",
  1075. "TlsIP": "",
  1076. "ProxyIP": "162.159.138.6",
  1077. "ProxyPort": "80",
  1078. "Info": "Proxy"
  1079. },
  1080. {
  1081. "Name": "VIVO EASY [08]",
  1082. "FLAG": "vivo",
  1083. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1084. "SNI": "",
  1085. "TlsIP": "",
  1086. "ProxyIP": "104.18.6.41",
  1087. "ProxyPort": "80",
  1088. "Info": "Proxy"
  1089. },
  1090. {
  1091. "Name": "VIVO EASY [09]",
  1092. "FLAG": "vivo",
  1093. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1094. "SNI": "",
  1095. "TlsIP": "",
  1096. "ProxyIP": "104.18.7.41",
  1097. "ProxyPort": "80",
  1098. "Info": "Proxy"
  1099. },
  1100. {
  1101. "Name": "VIVO EASY [10]",
  1102. "FLAG": "vivo",
  1103. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1104. "SNI": "",
  1105. "TlsIP": "",
  1106. "ProxyIP": "104.18.7.80",
  1107. "ProxyPort": "80",
  1108. "Info": "Proxy"
  1109. },
  1110. {
  1111. "Name": "VIVO EASY [11]",
  1112. "FLAG": "vivo",
  1113. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1114. "SNI": "",
  1115. "TlsIP": "",
  1116. "ProxyIP": "104.17.75.206",
  1117. "ProxyPort": "80",
  1118. "Info": "Proxy"
  1119. },
  1120. {
  1121. "Name": "VIVO EASY [12]",
  1122. "FLAG": "vivo",
  1123. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1124. "SNI": "",
  1125. "TlsIP": "",
  1126. "ProxyIP": "104.17.73.206",
  1127. "ProxyPort": "80",
  1128. "Info": "Proxy"
  1129. },
  1130. {
  1131. "Name": "VIVO EASY [13]",
  1132. "FLAG": "vivo",
  1133. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  1134. "SNI": "",
  1135. "TlsIP": "",
  1136. "ProxyIP": "104.17.74.206",
  1137. "ProxyPort": "80",
  1138. "Info": "Proxy"
  1139. },
  1140. {
  1141. "Name": "CLARO PLANOS [01]",
  1142. "FLAG": "claro",
  1143. "Payload": "",
  1144. "SNI": "api.whatsapp.com",
  1145. "TlsIP": "[app_host]",
  1146. "ProxyIP": "",
  1147. "ProxyPort": "",
  1148. "Info": "Ssl"
  1149. },
  1150. {
  1151. "Name": "CLARO PLANOS [02]",
  1152. "FLAG": "claro",
  1153. "Payload": "",
  1154. "SNI": "web.whatsapp.com",
  1155. "TlsIP": "[app_host]",
  1156. "ProxyIP": "",
  1157. "ProxyPort": "",
  1158. "Info": "Ssl"
  1159. },
  1160. {
  1161. "Name": "CLARO PLANOS [03]",
  1162. "FLAG": "claro",
  1163. "Payload": "",
  1164. "SNI": "m.twitter.com",
  1165. "TlsIP": "[app_host]",
  1166. "ProxyIP": "",
  1167. "ProxyPort": "",
  1168. "Info": "Ssl"
  1169. },
  1170. {
  1171. "Name": "CLARO PLANOS [04]",
  1172. "FLAG": "claro",
  1173. "Payload": "",
  1174. "SNI": "musicaclaro.com.br",
  1175. "TlsIP": "[app_host]",
  1176. "ProxyIP": "",
  1177. "ProxyPort": "",
  1178. "Info": "Ssl"
  1179. },
  1180. {
  1181. "Name": "CLARO PLANOS [05]",
  1182. "FLAG": "claro",
  1183. "Payload": "GET wss://minhaclaronxt.claro.com.br HTTP/1.0[crlf]Host: minhaclaronxt.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  1184. "SNI": "",
  1185. "TlsIP": "",
  1186. "ProxyIP": "minhaclaronxt.claro.com.br",
  1187. "ProxyPort": "80",
  1188. "Info": "Direct"
  1189. },
  1190. {
  1191. "Name": "CLARO PLANOS [06]",
  1192. "FLAG": "claro",
  1193. "Payload": "",
  1194. "SNI": "dns.web.whatsapp.com",
  1195. "TlsIP": "",
  1196. "ProxyIP": "",
  1197. "ProxyPort": "443",
  1198. "Info": "Ssl"
  1199. },
  1200. {
  1201. "Name": "TIM VÁLIDO IPV6 [01]",
  1202. "FLAG": "tim",
  1203. "Payload": "CONNECT / HTTP/1.9[crlf]host: mail.taipei2025.com[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  1204. "SNI": "",
  1205. "TlsIP": "",
  1206. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:135e",
  1207. "ProxyPort": "80",
  1208. "Info": "Proxy"
  1209. },
  1210. {
  1211. "Name": "TIM VÁLIDO IPV6 [02]",
  1212. "FLAG": "tim",
  1213. "Payload": "GET / HTTP/1.1[lf]Host: mobile.hom.c6bank.app[lf]:[lf][split][lf]GET- / HTTP/1.1[lf] Host:[app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  1214. "SNI": "",
  1215. "TlsIP": "",
  1216. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1217. "ProxyPort": "80",
  1218. "Info": "Proxy"
  1219. },
  1220. {
  1221. "Name": "TIM VÁLIDO IPV6 [03]",
  1222. "FLAG": "tim",
  1223. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  1224. "SNI": "",
  1225. "TlsIP": "",
  1226. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6813:ef19",
  1227. "ProxyPort": "80",
  1228. "Info": "Proxy"
  1229. },
  1230. {
  1231. "Name": "TIM VÁLIDO IPV6 [04]",
  1232. "FLAG": "tim",
  1233. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  1234. "SNI": "",
  1235. "TlsIP": "",
  1236. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:1ba0",
  1237. "ProxyPort": "80",
  1238. "Info": "Proxy"
  1239. },
  1240. {
  1241. "Name": "TIM VÁLIDO IPV6 [05]",
  1242. "FLAG": "tim",
  1243. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.1[crlf]Host: [app_host] [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1244. "SNI": "carreiras.landing.stoodi.com.br",
  1245. "TlsIP": "",
  1246. "ProxyIP": "0000:0000:0000:0000:0000:ffff:ac43:a2e9",
  1247. "ProxyPort": "80",
  1248. "Info": "Proxy"
  1249. },
  1250. {
  1251. "Name": "TIM VÁLIDO IPV6 [06]",
  1252. "FLAG": "tim",
  1253. "Payload": "GET / HTTP/1.1[crlf]Host: zen-deezer.com[crlf]Expect: 100-continue
  1254. [crlf][crlf][split]ACL- / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade [crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  1255. "SNI": "",
  1256. "TlsIP": "",
  1257. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1258. "ProxyPort": "80",
  1259. "Info": "Proxy"
  1260. },
  1261. {
  1262. "Name": "TIM VÁLIDO IPV6 [07]",
  1263. "FLAG": "tim",
  1264. "Payload": "GET / HTTP/1.1[crlf]Host: www.zen-deezer.com[crlf]Expect: 100-continue
  1265. [crlf][crlf][split]ACL- / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade [crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  1266. "SNI": "",
  1267. "TlsIP": "",
  1268. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1269. "ProxyPort": "80",
  1270. "Info": "Proxy"
  1271. },
  1272. {
  1273. "Name": "TIM VÁLIDO IPV6 [08]",
  1274. "FLAG": "tim",
  1275. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host:[app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1276. "SNI": "",
  1277. "TlsIP": "",
  1278. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1279. "ProxyPort": "80",
  1280. "Info": "Proxy"
  1281. },
  1282. {
  1283. "Name": "TIM VÁLIDO IPV6 [09]",
  1284. "FLAG": "tim",
  1285. "Payload": "GET /cdn-cgi/trace HTTP/1.1[crlf]Host: www.opensignal.com[crlf][crlf]CF-RAY / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: upgrade[crlf]Proxy-Connection: keep-alive[crlf]X-Online-Host: www.opensignal.com[crlf]X-Forward-Host: www.opensignal.com[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  1286. "SNI": "",
  1287. "TlsIP": "",
  1288. "ProxyIP": "0000:0000:0000:0000:0000:ffff:681a:0a9b",
  1289. "ProxyPort": "80",
  1290. "Info": "Proxy"
  1291. },
  1292. {
  1293. "Name": "TIM VÁLIDO IPV6 [10]",
  1294. "FLAG": "tim",
  1295. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: boleto.c6bank.com.br[crlf]X-Online-Host: boleto.c6bank.com.br[crlf]X-Forward-Host: boleto.c6bank.com.br[crlf]X-Forwarded-For: boleto.c6bank.com.br[crlf]Expect: 100-continue[crlf][delay_split][crlf]PUT- /@/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]User-Agent: yes[crlf][crlf]",
  1296. "SNI": "",
  1297. "TlsIP": "",
  1298. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6813:ef19",
  1299. "ProxyPort": "80",
  1300. "Info": "Proxy"
  1301. },
  1302. {
  1303. "Name": "TIM VÁLIDO IPV6 [11]",
  1304. "FLAG": "tim",
  1305. "Payload": "PUTwss://jobs.deezer.com/ HTTP/1.1[crlf]Host: jobs.deezer.com[crlf]X-Online-Host: jobs.deezer.com[crlf]X-Forward-Host: jobs.deezer.com[crlf]X-Forwarded-For: jobs.deezer.com[crlf]Expect: 100-continue[crlf][delay_split][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: yes[crlf][crlf]",
  1306. "SNI": "",
  1307. "TlsIP": "",
  1308. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1309. "ProxyPort": "80",
  1310. "Info": "Direct"
  1311. },
  1312. {
  1313. "Name": "TIM VÁLIDO IPV6 [12]",
  1314. "FLAG": "tim",
  1315. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  1316. "SNI": "",
  1317. "TlsIP": "",
  1318. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6813:ef19",
  1319. "ProxyPort": "80",
  1320. "Info": "Proxy"
  1321. },
  1322. {
  1323. "Name": "TIM VÁLIDO IPV6 [13]",
  1324. "FLAG": "tim",
  1325. "Payload": "GET / HTTP/1.1
  1326. Host: api.onesignal.com
  1328. [split]
  1330. GET-CONTROL / HTTP/1.1
  1331. Host: [app_host]
  1332. Upgrade: WebSocket
  1333. Connection: Upgrade
  1334. Connection: keep-alive\r\n\r\n",
  1335. "SNI": "",
  1336. "TlsIP": "",
  1337. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:e134",
  1338. "ProxyPort": "80",
  1339. "Info": "Proxy"
  1340. },
  1341. {
  1342. "Name": "TIM VÁLIDO IPV6 [14]",
  1343. "FLAG": "tim",
  1344. "Payload": "GET / HTTP/1.1[crlf]Host: jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1345. "SNI": "",
  1346. "TlsIP": "",
  1347. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1348. "ProxyPort": "80",
  1349. "Info": "Proxy"
  1350. },
  1351. {
  1352. "Name": "TIM VÁLIDO IPV6 [15]",
  1353. "FLAG": "tim",
  1354. "Payload": "GET / HTTP/1.1\nHost: c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1355. "SNI": "",
  1356. "TlsIP": "",
  1357. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:1cb6",
  1358. "ProxyPort": "80",
  1359. "Info": "Proxy"
  1360. },
  1361. {
  1362. "Name": "TIM VÁLIDO IPV6 [16]",
  1363. "FLAG": "tim",
  1364. "Payload": "GET / HTTP/1.1\nHost: c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1365. "SNI": "",
  1366. "TlsIP": "",
  1367. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6813:ef19",
  1368. "ProxyPort": "80",
  1369. "Info": "Proxy"
  1370. },
  1371. {
  1372. "Name": "TIM VÁLIDO IPV6 [17]",
  1373. "FLAG": "tim",
  1374. "Payload": "GET / HTTP/1.1[crlf]Host: dommoenergia.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1375. "SNI": "",
  1376. "TlsIP": "",
  1377. "ProxyIP": "0000:0000:0000:0000:0000:ffff:ac43:a2e9",
  1378. "ProxyPort": "80",
  1379. "Info": "Proxy"
  1380. },
  1381. {
  1382. "Name": "TIM VÁLIDO IPV6 [18]",
  1383. "FLAG": "tim",
  1384. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1385. "SNI": "appdev.c6bank.app",
  1386. "TlsIP": "",
  1387. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1388. "ProxyPort": "80",
  1389. "Info": "Proxy"
  1390. },
  1391. {
  1392. "Name": "TIM VÁLIDO IPV6 [19]",
  1393. "FLAG": "tim",
  1394. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1395. "SNI": "helpypro.stoodi.com.br",
  1396. "TlsIP": "",
  1397. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6813:ef19",
  1398. "ProxyPort": "80",
  1399. "Info": "Proxy"
  1400. },
  1401. {
  1402. "Name": "TIM EXPIRADO IPV6 [01]",
  1403. "FLAG": "tim",
  1404. "Payload": "HEAD wss://[app_host] HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]",
  1405. "SNI": "[app_host]",
  1406. "TlsIP": "",
  1407. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:1db6",
  1408. "ProxyPort": "80",
  1409. "Info": "Direct"
  1410. },
  1411. {
  1412. "Name": "TIM EXPIRADO IPV6 [02]",
  1413. "FLAG": "tim",
  1414. "Payload": "[protocol][crlf] [crlf][crlf]@",
  1415. "TlsIP": "",
  1416. "ProxyIP": "[app_host]",
  1417. "ProxyPort": "80",
  1418. "Info": "Direct"
  1419. },
  1420. {
  1421. "Name": "TIM EXPIRADO IPV6 [03]",
  1422. "FLAG": "tim",
  1423. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: websocket[crlf][crlf]",
  1424. "SNI": "feedback.infinitepay.io",
  1425. "TlsIP": "",
  1426. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:125e",
  1427. "ProxyPort": "80",
  1428. "Info": "Direct"
  1429. },
  1430. {
  1431. "Name": "TIM EXPIRADO IPV6 [04]",
  1432. "FLAG": "tim",
  1433. "Payload": "PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]",
  1434. "SNI": "",
  1435. "TlsIP": "",
  1436. "ProxyIP": "[app_host]",
  1437. "ProxyPort": "80",
  1438. "Info": "Direct"
  1439. },
  1440. {
  1441. "Name":"TIM EXPIRADO IPV6 [05]",
  1442. "FLAG":"tim",
  1443. "Payload":"HTTP/1.1[crlf] [crlf][crlf]•",
  1444. "SNI":"",
  1445. "TlsIP":"",
  1446. "ProxyIP":"[app_host]",
  1447. "ProxyPort":"80",
  1448. "Info": "Direct"
  1449. },
  1450. {
  1451. "Name":"TIM EXPIRADO IPV6 [06]",
  1452. "FLAG":"tim",
  1453. "Payload":"[protocol] \n\n/",
  1454. "SNI":"",
  1455. "TlsIP":"",
  1456. "ProxyIP":"[app_host]",
  1457. "ProxyPort":"80",
  1458. "Info": "Proxy"
  1459. },
  1460. {
  1461. "Name":"TIM EXPIRADO IPV6 [07]",
  1462. "FLAG":"tim",
  1463. "Payload":"HTTP/ [crlf][crlf]|[crlf]",
  1464. "SNI":"",
  1465. "TlsIP":"",
  1466. "ProxyIP":"[app_host]",
  1467. "ProxyPort":"80",
  1468. "Info": "Direct"
  1469. },
  1470. {
  1471. "Name":"TIM EXPIRADO IPV6 [08]",
  1472. "FLAG":"tim",
  1473. "Payload":"PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  1474. "SNI":"",
  1475. "TlsIP":"",
  1476. "ProxyIP":"[app_host]",
  1477. "ProxyPort":"80",
  1478. "Info": "Proxy"
  1479. },
  1480. {
  1481. "Name": "TIM EXPIRADO IPV6 [09]",
  1482. "FLAG": "tim",
  1483. "Payload": "ACL [app_host] HTTP/2[crlf]Host: google.es[crlf]Referer: @Laranjo01[crlf]",
  1484. "SNI": "[app_host]",
  1485. "TlsIP": "[app_host]",
  1486. "ProxyIP": "[app_host]",
  1487. "ProxyPort": "80",
  1488. "Info": "Proxy"
  1489. },
  1490. {
  1491. "Name": "TIM EXPIRADO IPV6 [10]",
  1492. "FLAG": "tim",
  1493. "Payload": "HTTP/ \n\n\ ",
  1494. "SNI": "",
  1495. "TlsIP": "",
  1496. "ProxyIP": "[app_host]",
  1497. "ProxyPort": "80",
  1498. "Info": "Direct"
  1499. },
  1500. {
  1501. "Name": "TIM EXPIRADO IPV6 [11]",
  1502. "FLAG": "tim",
  1503. "Payload": "ACL HTTP/2[crlf]Host: plus.google.com[crlf]",
  1504. "SNI": "",
  1505. "TlsIP": "",
  1506. "ProxyIP": "[app_host]",
  1507. "ProxyPort": "80",
  1508. "Info": "Direct"
  1509. },
  1510. {
  1511. "Name": "TIM EXPIRADO IPV6 [12]",
  1512. "FLAG": "tim",
  1513. "Payload": "MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]",
  1514. "SNI": "",
  1515. "TlsIP": "",
  1516. "ProxyIP": "[app_host]",
  1517. "ProxyPort": "80",
  1518. "Info": "Direct"
  1519. },
  1520. {
  1521. "Name":"TIM EXPIRADO IPV6 [13]",
  1522. "FLAG":"tim",
  1523. "Payload":"HTTP/ 2\nHOST : m.opera.com\n\n",
  1524. "SNI":"",
  1525. "TlsIP":"",
  1526. "ProxyIP":"[app_host]",
  1527. "ProxyPort":"80",
  1528. "Info": "Direct"
  1529. },
  1530. {
  1531. "Name":"TIM EXPIRADO IPV6 [14]",
  1532. "FLAG":"tim",
  1533. "Payload":"HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]",
  1534. "SNI":"",
  1535. "TlsIP":"",
  1536. "ProxyIP":"[app_host]",
  1537. "ProxyPort":"80",
  1538. "Info": "Direct"
  1539. },
  1540. {
  1541. "Name": "TIM EXPIRADO IPV6 [15]",
  1542. "FLAG": "tim",
  1543. "Payload": "HTTP/ [crlf][crlf]|[crlf]]]",
  1544. "SNI": "",
  1545. "TlsIP": "",
  1546. "ProxyIP": "[app_host]",
  1547. "ProxyPort": "80",
  1548. "Info": "Direct"
  1549. },
  1550. {
  1551. "Name": "TIM EXPIRADO IPV6 [16]",
  1552. "FLAG": "tim",
  1553. "Payload": "MERGE mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]",
  1554. "SNI": "",
  1555. "TlsIP": "",
  1556. "ProxyIP": "[app_host]",
  1557. "ProxyPort": "80",
  1558. "Info": "Proxy"
  1559. },
  1560. {
  1561. "Name": "TIM EXPIRADO IPV6 [17]",
  1562. "FLAG": "tim",
  1563. "Payload": "ACL http://1.1.1.1rotate=www.waze.com;buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;www.myspace.com.br;www.waze.com;1.0.0.5[crlf]",
  1564. "SNI": "",
  1565. "TlsIP": "",
  1566. "ProxyIP": "[app_host]",
  1567. "ProxyPort": "80",
  1568. "Info": "Proxy"
  1569. },
  1570. {
  1571. "Name": "TIM EXPIRADO IPV6 [18]",
  1572. "FLAG": "tim",
  1573. "Payload": "PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]",
  1574. "SNI": "",
  1575. "TlsIP": "",
  1576. "ProxyIP": "[app_host]",
  1577. "ProxyPort": "80",
  1578. "Info": "Proxy"
  1579. },
  1580. {
  1581. "Name": "TIM EXPIRADO IPV6 [19]",
  1582. "FLAG": "tim",
  1583. "Payload": "MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]",
  1584. "SNI": "",
  1585. "TlsIP": "",
  1586. "ProxyIP": "[app_host]",
  1587. "ProxyPort": "80",
  1588. "Info": "Proxy"
  1589. },
  1590. {
  1591. "Name": "TIM EXPIRADO IPV6 [20]",
  1592. "FLAG": "tim",
  1593. "Payload": "HTTP/ [crlf][crlf]|[crlf",
  1594. "SNI": "",
  1595. "TlsIP": "",
  1596. "ProxyIP": "[app_host]",
  1597. "ProxyPort": "80",
  1598. "Info": "Direct"
  1599. },
  1600. {
  1601. "Name":"TIM EXPIRADO IPV6 [21]",
  1602. "FLAG":"tim",
  1603. "Payload":"MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  1604. "SNI":"",
  1605. "TlsIP":"",
  1606. "ProxyIP":"[app_host]",
  1607. "ProxyPort":"80",
  1608. "Info": "Direct"
  1609. },
  1610. {
  1611. "Name": "TIM EXPIRADO IPV6 [22]",
  1612. "FLAG": "tim",
  1613. "Payload": "http/ \n\n/",
  1614. "SNI": "",
  1615. "TlsIP": "",
  1616. "ProxyIP": "[app_host]",
  1617. "ProxyPort": "80",
  1618. "Info": "Direct"
  1619. },
  1620. {
  1621. "Name": "TIM EXPIRADO IPV6 [23]",
  1622. "FLAG": "tim",
  1623. "Payload": "PATCH HTTP/1.0 [crlf]Host: map.qq.com[crlf]",
  1624. "SNI": "",
  1625. "TlsIP": "",
  1626. "ProxyIP": "[app_host]",
  1627. "ProxyPort": "80",
  1628. "Info": "Direct"
  1629. },
  1630. {
  1631. "Name": "TIM EXPIRADO IPV6 [24]",
  1632. "FLAG": "tim",
  1633. "Payload": "PROPFIND http://www.microsoft.com HTTP/1.0 Host: www.microsoft.com HTTP/1.0\n \n",
  1634. "SNI": "",
  1635. "TlsIP": "",
  1636. "ProxyIP": "[app_host]",
  1637. "ProxyPort": "80",
  1638. "Info": "Direct"
  1639. },
  1640. {
  1641. "Name": "TIM EXPIRADO IPV6 [25]",
  1642. "FLAG": "tim",
  1643. "Payload": "UNLOCK www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0 Host: www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0\n \n",
  1644. "SNI": "",
  1645. "TlsIP": "",
  1646. "ProxyIP": "[app_host]",
  1647. "ProxyPort": "80",
  1648. "Info": "Direct"
  1649. },
  1650. {
  1651. "Name":"TIM EXPIRADO IPV6 [26]",
  1652. "FLAG":"tim",
  1653. "Payload":"ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]",
  1654. "SNI":"",
  1655. "TlsIP":"",
  1656. "ProxyIP":"[app_host]",
  1657. "ProxyPort":"80",
  1658. "Info": "Proxy"
  1659. },
  1660. {
  1661. "Name":"TIM EXPIRADO IPV6 [27]",
  1662. "FLAG":"tim",
  1663. "Payload": "GET http://chat.mundiale.claro.com.br HTTP/1.0[crlf]Host: [app_host]http://chat.mundiale.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  1664. "SNI":"",
  1665. "TlsIP":"",
  1666. "ProxyIP":"[app_host]",
  1667. "ProxyPort":"80",
  1668. "Info": "Proxy"
  1669. },
  1670. {
  1671. "Name": "TIM EXPIRADO IPV6 [28]",
  1672. "FLAG": "tim",
  1673. "Payload": "GET wss://api.onesignal.com/ HTTP/1.1[crlf]Host: [app_host][rlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Referer: google.com[crlf][crlf]",
  1674. "SNI": "",
  1675. "TlsIP": "",
  1676. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:e134",
  1677. "ProxyPort": "80",
  1678. "Info": "Proxy"
  1679. },
  1680. {
  1681. "Name": "TIM REGIÕES [01]",
  1682. "FLAG": "tim",
  1683. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1684. "SNI": "",
  1685. "TlsIP": "",
  1686. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1687. "ProxyPort": "80",
  1688. "Info": "Direct"
  1689. },
  1690. {
  1691. "Name": "TIM REGIÕES [02]",
  1692. "FLAG": "tim",
  1693. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1694. "SNI": "",
  1695. "TlsIP": "",
  1696. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  1697. "ProxyPort": "80",
  1698. "Info": "Direct"
  1699. },
  1700. {
  1701. "Name": "TIM REGIÕES [03]",
  1702. "FLAG": "tim",
  1703. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: websocket[lf]User-Agent: yes[lf][lf]",
  1704. "SNI": "",
  1705. "TlsIP": "",
  1706. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1707. "ProxyPort": "80",
  1708. "Info": "Direct"
  1709. },
  1710. {
  1711. "Name": "TIM REGIÕES [04]",
  1712. "FLAG": "tim",
  1713. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1714. "SNI": "duvidas.ampli.com.br",
  1715. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  1716. "ProxyIP": "",
  1717. "ProxyPort": "443",
  1718. "Info": "Tlsws"
  1719. },
  1720. {
  1721. "Name": "TIM REGIÕES [05]",
  1722. "FLAG": "tim",
  1723. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  1724. "SNI": "duvidas.ampli.com.br",
  1725. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1726. "ProxyIP": "",
  1727. "ProxyPort": "443",
  1728. "Info": "Tlsws"
  1729. },
  1730. {
  1731. "Name": "TIM REGIÕES [06]",
  1732. "FLAG": "tim",
  1733. "Payload": "GET wss://support.deezer.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1734. "SNI": "support.deezer.com",
  1735. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1736. "ProxyIP": "",
  1737. "ProxyPort": "443",
  1738. "Info": "Tlsws"
  1739. },
  1740. {
  1741. "Name": "TIM REGIÕES [07]",
  1742. "FLAG": "tim",
  1743. "Payload": "GET wss://auth-uat-us.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1744. "SNI": "auth-uat-us.surveymonkey.com",
  1745. "TlsIP": "0000:0000:0000:0000:0000:ffff:6812:0716",
  1746. "ProxyIP": "",
  1747. "ProxyPort": "443",
  1748. "Info": "Tlsws"
  1749. },
  1750. {
  1751. "Name": "TIM REGIÕES [08]",
  1752. "FLAG": "tim",
  1753. "Payload": "GET wss://workplaceservices.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  1754. "SNI": "workplaceservices.surveymonkey.com",
  1755. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  1756. "ProxyIP": "",
  1757. "ProxyPort": "443",
  1758. "Info": "Tlsws"
  1759. },
  1760. {
  1761. "Name": "VIVO PRÉ IPV6 [01]",
  1762. "FLAG": "vivo",
  1763. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  1764. "SNI": "[app_host]",
  1765. "TlsIP": "",
  1766. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1767. "ProxyPort": "80",
  1768. "Info": "Proxy"
  1769. },
  1770. {
  1771. "Name": "VIVO PRÉ IPV6 [02]",
  1772. "FLAG": "vivo",
  1773. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: [app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1774. "SNI": "",
  1775. "TlsIP": "",
  1776. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1777. "ProxyPort": "80",
  1778. "Info": "Proxy"
  1779. },
  1780. {
  1781. "Name": "VIVO PRÉ IPV6 [03]",
  1782. "FLAG": "vivo",
  1783. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  1784. "SNI": "",
  1785. "TlsIP": "",
  1786. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1787. "ProxyPort": "80",
  1788. "Info": "Proxy"
  1789. },
  1790. {
  1791. "Name": "VIVO PRÉ IPV6 [04]",
  1792. "FLAG": "vivo",
  1793. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1794. "SNI": "",
  1795. "TlsIP": "",
  1796. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1797. "ProxyPort": "80",
  1798. "Info": "Proxy"
  1799. },
  1800. {
  1801. "Name": "VIVO PRÉ IPV6 [05]",
  1802. "FLAG": "vivo",
  1803. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  1804. "SNI": "",
  1805. "TlsIP": "",
  1806. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1807. "ProxyPort": "80",
  1808. "Info": "Proxy"
  1809. },
  1810. {
  1811. "Name": "VIVO PRÉ IPV6 [06]",
  1812. "FLAG": "vivo",
  1813. "Payload": "GET / HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  1814. "SNI": "[app_host]",
  1815. "TlsIP": "",
  1816. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:1db6",
  1817. "ProxyPort": "80",
  1818. "Info": "Direct"
  1819. },
  1820. {
  1821. "Name": "VIVO PRÉ IPV6 [07]",
  1822. "FLAG": "vivo.png",
  1823. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  1824. "SNI": "[app_host]",
  1825. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1826. "ProxyIP": "",
  1827. "ProxyPort": "",
  1828. "Info": "Tlsws"
  1829. },
  1830. {
  1831. "Name": "VIVO PRÉ IPV6 [08]",
  1832. "FLAG": "vivo.png",
  1833. "Payload": "GET / HTTP/1.1
  1834. Host: infoprodutos.stoodi.com.br
  1835. Connection: Upgrade
  1837. [instant_split]
  1839. GET- / HTTP/1.1
  1840. Host:[app_host]
  1841. Expect: 100-continue
  1842. Upgrade: WebSocket
  1843. Connection: keep-alive\r\n\r\n",
  1844. "SNI": "",
  1845. "TlsIP": "",
  1846. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:66c2",
  1847. "ProxyPort": "80",
  1848. "Info": "Proxy"
  1849. },
  1850. {
  1851. "Name": "VIVO PRÉ IPV6 [09]",
  1852. "FLAG": "vivo",
  1853. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf][lf]",
  1854. "SNI": "",
  1855. "TlsIP": "",
  1856. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1857. "ProxyPort": "80",
  1858. "Info": "Direct"
  1859. },
  1860. {
  1861. "Name": "VIVO PRÉ IPV6 [10]",
  1862. "FLAG": "vivo",
  1863. "Payload": "GET / HTTP/1.1[lf]Host: support.deezer.com[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host:[app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  1864. "SNI": "",
  1865. "TlsIP": "",
  1866. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:161a",
  1867. "ProxyPort": "80",
  1868. "Info": "Proxy"
  1869. },
  1870. {
  1871. "Name": "VIVO PRÉ IPV6 [11]",
  1872. "FLAG": "vivo",
  1873. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1874. "SNI": "",
  1875. "TlsIP": "",
  1876. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1877. "ProxyPort": "80",
  1878. "Info": "Proxy"
  1879. },
  1880. {
  1881. "Name": "VIVO PRÉ IPV6 [12]",
  1882. "FLAG": "vivo",
  1883. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1884. "SNI": "",
  1885. "TlsIP": "",
  1886. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:7daf",
  1887. "ProxyPort": "80",
  1888. "Info": "Direct"
  1889. },
  1890. {
  1891. "Name": "VIVO PRÉ IPV6 [13]",
  1892. "FLAG": "vivo",
  1893. "Payload": "BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]SAMU[crlf][crlf]",
  1894. "SNI": "[app_host]",
  1895. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1896. "ProxyIP": "",
  1897. "ProxyPort": "443",
  1898. "Info": "Tlsws"
  1899. },
  1900. {
  1901. "Name": "VIVO PRÉ IPV6 [14]",
  1902. "FLAG": "vivo",
  1903. "Payload": "BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]SAMU[crlf][crlf]",
  1904. "SNI": "[app_host]",
  1905. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  1906. "ProxyIP": "",
  1907. "ProxyPort": "443",
  1908. "Info": "Tlsws"
  1909. },
  1910. {
  1911. "Name": "VIVO PRÉ IPV6 [15]",
  1912. "FLAG": "vivo",
  1913. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1914. "SNI": "[app_host]",
  1915. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  1916. "ProxyIP": "",
  1917. "ProxyPort": "443",
  1918. "Info": "Tlsws"
  1919. },
  1920. {
  1921. "Name": "VIVO PRÉ IPV6 [16]",
  1922. "FLAG": "vivo",
  1923. "Payload": "GET HTTP://[random=[app_host]] HTTP/1.1[crlf]Host: [rotate=atendimento.lojadointer.com.br;atendimento.magazineluiza.com.br;mycannabisconversation.com.br;compre.vivo.com.br;snow.vivo.com.br;backoffice-equipamentos01.vivo.com.br][crlf]Upgrade: Websocket[crlf][crlf]",
  1924. "SNI": "[app_host]",
  1925. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1926. "ProxyIP": "",
  1927. "ProxyPort": "",
  1928. "Info": "Tlsws"
  1929. },
  1930. {
  1931. "Name": "VIVO PRÉ IPV6 [17]",
  1932. "FLAG": "vivo",
  1933. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf][lf]",
  1934. "SNI": "",
  1935. "TlsIP": "",
  1936. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6811:4ace",
  1937. "ProxyPort": "80",
  1938. "Info": "Direct"
  1939. },
  1940. {
  1941. "Name": "VIVO PRÉ IPV6 [18]",
  1942. "FLAG": "vivo",
  1943. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf][lf]",
  1944. "SNI": "",
  1945. "TlsIP": "",
  1946. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:6f85",
  1947. "ProxyPort": "80",
  1948. "Info": "Direct"
  1949. },
  1950. {
  1951. "Name": "VIVO PRÉ IPV6 [19]",
  1952. "FLAG": "vivo",
  1953. "Payload": "GET / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  1954. "SNI": "",
  1955. "TlsIP": "",
  1956. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  1957. "ProxyPort": "80",
  1958. "Info": "Proxy"
  1959. },
  1960. {
  1961. "Name": "VIVO PRÉ IPV6 [20]",
  1962. "FLAG": "vivo",
  1963. "Payload": "GET / Index.html HTTP/1.9[crlf]Host: [app_host] [crlf]Upgrade: Streamwebsocket[crlf]Connection: Upgrade
  1964. Sec-WebSocket-Key: x3JJHMbDL1EzLkh9GBhXDw==[crlf]Sec-WebSocket-Protocol: chat[crlf]Sec-WebSocket-Version: 13[crlf]Set-Cookie: Key=value; SameSite=Strict[crlf]Origin: https://portalrecarga.vivo.com.br/recarga/home/[crlf][crlf]",
  1965. "SNI": "",
  1966. "TlsIP": "",
  1967. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1968. "ProxyPort": "80",
  1969. "Info": "Proxy"
  1970. },
  1971. {
  1972. "Name": "VIVO PRÉ IPV6 [21]",
  1973. "FLAG": "vivo",
  1974. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1975. "SNI": "[app_host]",
  1976. "TlsIP": "",
  1977. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1978. "ProxyPort": "80",
  1979. "Info": "Proxy"
  1980. },
  1981. {
  1982. "Name": "VIVO PRÉ IPV6 [22]",
  1983. "FLAG": "vivo",
  1984. "Payload": "GET http://www.claro.com.br HTTP/1.0[crlf]Host: http://www.claro.com.br[crlf]Conexão: keep-alive[crlf]User-Agent: Update [crlf][crlf]",
  1985. "SNI": "",
  1986. "TlsIP": "",
  1987. "ProxyIP": "[app_host]",
  1988. "ProxyPort": "80",
  1989. "Info": "Direct"
  1990. },
  1991. {
  1992. "Name": "VIVO PRE IPV6 [23]",
  1993. "FLAG": "ic_vivo",
  1994. "Payload": "FORCE /? FULL / HTTP/1.0[crlf]HOST: [app_host][crlf]UPGRADE: LaranjoPika[crlf][crlf]",
  1995. "SNI": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1996. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1997. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  1998. "ProxyPort": "80",
  1999. "Info": "proxy"
  2000. },
  2001. {
  2002. "Name": "VIVO PRE IPV6 [24]",
  2003. "FLAG": "ic_vivo",
  2004. "Payload": "FORCE /? FULL / HTTP/1.0[crlf]HOST: [app_host][crlf]UPGRADE: LaranjoPika[crlf][crlf]",
  2005. "SNI": "0000:0000:0000:0000:0000:ffff:a29f:853e",
  2006. "TlsIP": "0000:0000:0000:0000:0000:ffff:a29f:853e",
  2007. "ProxyIP": "0000:0000:0000:0000:0000:ffff:a29f:853e",
  2008. "ProxyPort": "80",
  2009. "Info": "proxy"
  2010. },
  2011. {
  2012. "Name": "VIVO PRE IPV6 [25]",
  2013. "FLAG": "ic_vivo",
  2014. "Payload": "FORCE /? FULL / HTTP/1.0[crlf]HOST: [app_host][crlf]UPGRADE: LaranjoPika[crlf][crlf]",
  2015. "SNI": "0000:0000:0000:0000:0000:ffff:6810:356f",
  2016. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  2017. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  2018. "ProxyPort": "80",
  2019. "Info": "proxy"
  2020. },
  2021. {
  2022. "Name": "VIVO PRE IPV6 [26]",
  2023. "FLAG": "ic_vivo",
  2024. "Payload": "LaranjoPika- wss://support.deezer.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  2025. "SNI": "support.deezer.com",
  2026. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  2027. "ProxyIP": "",
  2028. "ProxyPort": "80",
  2029. "Info": "Tlsws"
  2030. },
  2031. {
  2032. "Name": "VIVO PRE IPV6 [27]",
  2033. "FLAG": "ic_vivo",
  2034. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  2035. "SNI": "0000:0000:0000:0000:0000:ffff:6812:171a",
  2036. "TlsIP": "0000:0000:0000:0000:0000:ffff:6812:171a",
  2037. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:171a",
  2038. "ProxyPort": "80",
  2039. "Info": "proxy"
  2040. },
  2041. {
  2042. "Name": "VIVO PRÉ IPV6 [28]",
  2043. "FLAG": "ic_vivo",
  2044. "Payload": "LaranjoPika- wss://auth.of.c6bank.com.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  2045. "SNI": "auth.of.c6bank.com.br",
  2046. "TlsIP": "0000:0000:0000:0000:0000:ffff:6810:356f",
  2047. "ProxyIP": "",
  2048. "ProxyPort": "80",
  2049. "Info": "Tlsws"
  2050. },
  2051. {
  2052. "Name": "VIVO PRÉ IPV6 [29]",
  2053. "FLAG": "vivo",
  2054. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  2055. "SNI": "[app_host]",
  2056. "TlsIP": "",
  2057. "ProxyIP": "::ffff:6810:336f",
  2058. "ProxyPort": "80",
  2059. "Info": "Proxy"
  2060. },
  2061. {
  2062. "Name": "VIVO FRONT IPV6 [01]",
  2063. "FLAG": "vivo",
  2064. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  2065. "SNI": "",
  2066. "TlsIP": "",
  2067. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6c8b:7781",
  2068. "ProxyPort": "80",
  2069. "Info": "Proxy"
  2070. },
  2071. {
  2072. "Name": "VIVO FRONT IPV6 [02]",
  2073. "FLAG": "vivo",
  2074. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  2075. "SNI": "",
  2076. "TlsIP": "",
  2077. "ProxyIP": "0000:0000:0000:0000:0000:ffff:3455:d517",
  2078. "ProxyPort": "80",
  2079. "Info": "Proxy"
  2080. },
  2081. {
  2082. "Name": "VIVO FRONT IPV6 [03]",
  2083. "FLAG": "vivo",
  2084. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  2085. "SNI": "",
  2086. "TlsIP": "",
  2087. "ProxyIP": "0000:0000:0000:0000:0000:ffff:3455:d53b",
  2088. "ProxyPort": "80",
  2089. "Info": "Proxy"
  2090. },
  2091. {
  2092. "Name": "VIVO FRONT IPV6 [04]",
  2093. "FLAG": "vivo",
  2094. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  2095. "SNI": "",
  2096. "TlsIP": "",
  2097. "ProxyIP": "0000:0000:0000:0000:0000:ffff:1240:ae46",
  2098. "ProxyPort": "80",
  2099. "Info": "Proxy"
  2100. },
  2101. {
  2102. "Name": "VIVO FRONT IPV6 [05]",
  2103. "FLAG": "vivo",
  2104. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  2105. "SNI": "",
  2106. "TlsIP": "",
  2107. "ProxyIP": "0000:0000:0000:0000:0000:ffff:1243:8826",
  2108. "ProxyPort": "80",
  2109. "Info": "Proxy"
  2110. },
  2111. {
  2112. "Name": "VIVO FRONT IPV6 [06]",
  2113. "FLAG": "vivo",
  2114. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  2115. "SNI": "",
  2116. "TlsIP": "",
  2117. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6c9e:a175",
  2118. "ProxyPort": "80",
  2119. "Info": "Proxy"
  2120. },
  2121. {
  2122. "Name": "VIVO FRONT IPV6 [07]",
  2123. "FLAG": "vivo",
  2124. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  2125. "SNI": "",
  2126. "TlsIP": "",
  2127. "ProxyIP": "0000:0000:0000:0000:0000:ffff:4108:d648",
  2128. "ProxyPort": "80",
  2129. "Info": "Proxy"
  2130. },
  2131. {
  2132. "Name": "VIVO FRONT IPV6 [08]",
  2133. "FLAG": "vivo",
  2134. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: WebSocket[crlf][crlf]",
  2135. "SNI": "",
  2136. "TlsIP": "",
  2137. "ProxyIP": "0000:0000:0000:0000:0000:ffff:0de3:7e4f",
  2138. "ProxyPort": "80",
  2139. "Info": "Proxy"
  2140. },
  2141. {
  2142. "Name": "VIVO FRONT IPV6 [09]",
  2143. "FLAG": "vivo",
  2144. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: WebSocket[crlf][crlf]",
  2145. "SNI": "",
  2146. "TlsIP": "",
  2147. "ProxyIP": "0000:0000:0000:0000:0000:ffff:4108:d638",
  2148. "ProxyPort": "80",
  2149. "Info": "Proxy"
  2150. },
  2151. {
  2152. "Name": "VIVO EASY IPV6 [01]",
  2153. "FLAG": "vivo",
  2154. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2155. "SNI": "",
  2156. "TlsIP": "",
  2157. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6811:48ce",
  2158. "ProxyPort": "80",
  2159. "Info": "Proxy"
  2160. },
  2161. {
  2162. "Name": "VIVO EASY IPV6 [02]",
  2163. "FLAG": "vivo",
  2164. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2165. "SNI": "",
  2166. "TlsIP": "",
  2167. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6811:46ce",
  2168. "ProxyPort": "80",
  2169. "Info": "Proxy"
  2170. },
  2171. {
  2172. "Name": "VIVO EASY IPV6 [03]",
  2173. "FLAG": "vivo",
  2174. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  2175. "SNI": "[app_host]",
  2176. "TlsIP": "",
  2177. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:0750",
  2178. "ProxyPort": "80",
  2179. "Info": "Proxy"
  2180. },
  2181. {
  2182. "Name": "VIVO EASY IPV6 [04]",
  2183. "FLAG": "vivo",
  2184. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  2185. "SNI": "",
  2186. "TlsIP": "",
  2187. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6811:47ce",
  2188. "ProxyPort": "80",
  2189. "Info": "Proxy"
  2190. },
  2191. {
  2192. "Name": "VIVO EASY IPV6 [05]",
  2193. "FLAG": "vivo",
  2194. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  2195. "SNI": "",
  2196. "TlsIP": "",
  2197. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:0650",
  2198. "ProxyPort": "80",
  2199. "Info": "Proxy"
  2200. },
  2201. {
  2202. "Name": "VIVO EASY IPV6 [06]",
  2203. "FLAG": "vivo.png",
  2204. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  2205. "SNI": "",
  2206. "TlsIP": "",
  2207. "ProxyIP": "0000:0000:0000:0000:0000:ffff:a29f:8007 ",
  2208. "ProxyPort": "80",
  2209. "Info": "Direct"
  2210. },
  2211. {
  2212. "Name": "VIVO EASY IPV6 [07]",
  2213. "FLAG": "vivo",
  2214. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2215. "SNI": "",
  2216. "TlsIP": "",
  2217. "ProxyIP": "0000:0000:0000:0000:0000:ffff:a29f:8a06",
  2218. "ProxyPort": "80",
  2219. "Info": "Proxy"
  2220. },
  2221. {
  2222. "Name": "VIVO EASY IPV6 [08]",
  2223. "FLAG": "vivo",
  2224. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2225. "SNI": "",
  2226. "TlsIP": "",
  2227. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:0629",
  2228. "ProxyPort": "80",
  2229. "Info": "Proxy"
  2230. },
  2231. {
  2232. "Name": "VIVO EASY IPV6 [09]",
  2233. "FLAG": "vivo",
  2234. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2235. "SNI": "",
  2236. "TlsIP": "",
  2237. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:0729",
  2238. "ProxyPort": "80",
  2239. "Info": "Proxy"
  2240. },
  2241. {
  2242. "Name": "VIVO EASY IPV6 [10]",
  2243. "FLAG": "vivo",
  2244. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2245. "SNI": "",
  2246. "TlsIP": "",
  2247. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6812:0750",
  2248. "ProxyPort": "80",
  2249. "Info": "Proxy"
  2250. },
  2251. {
  2252. "Name": "VIVO EASY IPV6 [11]",
  2253. "FLAG": "vivo",
  2254. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2255. "SNI": "",
  2256. "TlsIP": "",
  2257. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6811:4bce",
  2258. "ProxyPort": "80",
  2259. "Info": "Proxy"
  2260. },
  2261. {
  2262. "Name": "VIVO EASY IPV6 [12]",
  2263. "FLAG": "vivo",
  2264. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2265. "SNI": "",
  2266. "TlsIP": "",
  2267. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6811:49ce",
  2268. "ProxyPort": "80",
  2269. "Info": "Proxy"
  2270. },
  2271. {
  2272. "Name": "VIVO EASY IPV6 [13]",
  2273. "FLAG": "vivo",
  2274. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  2275. "SNI": "",
  2276. "TlsIP": "",
  2277. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6811:4ace",
  2278. "ProxyPort": "80",
  2279. "Info": "Proxy"
  2280. }
  2281. ]
  2282. }
comments powered by Disqus