Untitled

SUBMITTED BY: Chacal1107

DATE: Nov. 30, 2023, 2:35 p.m.

UPDATED: Dec. 2, 2023, 4:36 a.m.

FORMAT: Text only

SIZE: 76.1 kB

History Raw Download

HITS: 1273

Report
  1. {
  2. "Version": "102",
  3. "PainelConecta5G": false,
  4. "ReleaseNotes": "",
  5. "UrlUpdate": "https://painelconecta5g.com/update/pasta_SNCNETPRO5G/config",
  6. "Sms": "https://painelconecta5g.com/update/pasta_SNCNETPRO5G/sms",
  7. "logoonline": "",
  8. "fundoonline": "",
  9. "fundoDoLogOnline": "",
  10. "EmailFeedback": "",
  11. "UrlContato": "",
  12. "UrlTermos": "",
  13. "CheckUser": "true",
  14. "ModderLinkWhatsapp": "",
  15. "ModderLinkTelegram": "",
  16. "ModderCorCaixaServ": "",
  17. "ModderCorCaixaPay": "",
  18. "ModderCorCaixaCentral": "",
  19. "ModderCorCaixaConexao": "",
  20. "ModderCorCaixaUsuario": "",
  21. "ModderCorCaixaSenha": "",
  22. "ModderCorBotaoIniciar": "rgba(0,102,255,0.1)",
  23. "ModderCorBotaoLog": "",
  24. "ModderCorBotaoConfig": "",
  25. "Udp": [
  26. {
  27. "Porta": "7300"
  28. },
  29. {
  30. "Porta": "7100"
  31. },
  32. {
  33. "Porta": "7200"
  34. },
  35. {
  36. "Porta": "7400"
  37. },
  38. {
  39. "Porta": "7500"
  40. }
  41. ],
  42. "Servers": [
  43. {
  44. "Name": "SERVIDORES ALEATÓRIOS 🔁",
  45. "TYPE": "premium",
  46. "FLAG": "br.png",
  47. "ServerIP": "chacal.brtvp.online",
  48. "CheckUser": "http://chacal.brtvp.online/checkuser/conecta4g.php",
  49. "ServerPort": "22",
  50. "SSLPort": "443",
  51. "USER": "",
  52. "PASS": ""
  53. },
  54. ],
  55. "Networks": [
  56. {
  57. "Name": "VIVO - TIM 1 🟣🔵✅",
  58. "FLAG": "vivo",
  59. "Payload": "[delay_split]PROPPATCH /analytics.google.com HTTP/1.0[crlf]Host: [rotate=chacal.brtvp.online;global-4-lvs-colossus-10.opera-mini.net][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]@TSTOPSPEED[crlf][crlf]",
  60. "SNI": "",
  61. "TlsIP": "",
  62. "ProxyIP": "186.233.118.139#104.16.51.111#::ffff:186.233.118.139#::ffff:104.16.51.111",
  63. "ProxyPort": "80",
  64. "Info": "Proxy"
  65. },
  66. {
  67. "Name": "VIVO - TIM 2 🟣🔵",
  68. "FLAG": "vivo",
  69. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
  70. "SNI": "",
  71. "TlsIP": "",
  72. "ProxyIP": "186.233.118.139#177.67.82.201",
  73. "ProxyPort": "80",
  74. "Info": "Proxy"
  75. },
  76. {
  77. "Name": "VIVO - CLARO 🟣🔴",
  78. "FLAG": "vivo",
  79. "Payload": "GET ws://[rotate=d37lx9e954u3qw.cloudfront.net]/app28 HTTP/1.1[lf]Host:lio-multicanalidade-app.m4u.com.br[lf]Connection: Upgrade[lf]Upgrade: websocket[lf][lf]",
  80. "SNI": "lio-multicanalidade-app.m4u.com.br",
  81. "TlsIP": "lio-multicanalidade-app.m4u.com.br",
  82. "ProxyIP": "",
  83. "ProxyPort": "443",
  84. "Info": "Tlsws"
  85. },
  86. {
  87. "Name": "VIVO PRÉ - TIM - CLARO 🟣🔵🔴",
  88. "FLAG": "vivo",
  89. "Payload": "HEAD /app28 HTTP/1.1[lf]Host: [rotate=d37lx9e954u3qw.cloudfront.net][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]@@@PATCH /app28 HTTP/1.1[lf]Host: [app_host][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]@@@GET /app28 HTTP/1.1[lf]Host: [app_host][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  90. "SNI": "d37lx9e954u3qw.cloudfront.net",
  91. "TlsIP": "d37lx9e954u3qw.cloudfront.net",
  92. "ProxyIP": "",
  93. "ProxyPort": "443",
  94. "Info": "Tlsws"
  95. },
  96. {
  97. "Name": "VIVO FLARE 1 🟣",
  98. "FLAG": "vivo",
  99. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  100. "SNI": "",
  101. "TlsIP": "",
  102. "ProxyIP": "162.159.128.53#104.24.10.16#104.24.11.16#104.24.24.34#104.24.25.34#172.64.130.2#172.64.131.2#172.64.194.2#172.64.195.2#fr.poichongterbackrote.cf#pt.roagzipel.tk#104.18.22.26#support.deezer.com#104.16.51.111#104.16.53.111",
  103. "ProxyPort": "80",
  104. "Info": "Proxy"
  105. },
  106. {
  107. "Name": "VIVO FLARE 2 🟣",
  108. "FLAG": "vivo",
  109. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  110. "SNI": "",
  111. "TlsIP": "",
  112. "ProxyIP": "[app_host]",
  113. "ProxyPort": "80",
  114. "Info": "Proxy"
  115. },
  116. {
  117. "Name": "VIVO FLARE 3 🟣",
  118. "FLAG": "vivo",
  119. "Payload": "[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud][crlf][crlf][crlf]",
  120. "SNI": "",
  121. "TlsIP": "",
  122. "ProxyIP": "186.233.118.139#177.67.82.201",
  123. "ProxyPort": "80",
  124. "Info": "Proxy"
  125. },
  126. {
  127. "Name": "VIVO FLARE 4 🟣",
  128. "FLAG": "vivo",
  129. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim. com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify. com;pagamentoonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com; c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2. interflashplusvpnpro.cloud][crlf][crlf][crlf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: recarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: vigia.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: workplaceservices.surveymonkey.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]",
  130. "SNI": "",
  131. "TlsIP": "",
  132. "ProxyIP": "186.233.118.139#177.67.82.201",
  133. "ProxyPort": "80",
  134. "Info": "Proxy"
  135. },
  136. {
  137. "Name": "VIVO FLARE 5 🟣",
  138. "FLAG": "vivo",
  139. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: meuplano.tim.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[split][delay_split]ACL / /n@@@[split][delay_split]ACL / /\n@@@[split]GET HTTP/1.1[crlf][crlf]HTTP/2: Ua[crlf]@@@[split]GET HTTP/1.1[crlf][crlf]HTTP/2: [crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUICK/11: Ua[crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUIC/11: Ua[crlf@@@[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf@@@[split] [crlf]GET ua.com@chacal.brtvp.online[protocol][crlf]CONNECT chacal.brtvp.online[protocol][crlf][crlf]@@@[delay_split]ACL / /\n[delay]",
  140. "SNI": "",
  141. "TlsIP": "",
  142. "ProxyIP": "186.233.118.139#177.67.82.201",
  143. "ProxyPort": "80",
  144. "Info": "Proxy"
  145. },
  146. {
  147. "Name": "VIVO FLARE 6 🟣",
  148. "FLAG": "vivo",
  149. "Payload": "[delay_split]CONNECT chacal.brtvp.online:22 HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]X-Online-Host: chacal.brtvp.online[crlf]X-Forward-Host: chacal.brtvp.online[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[delay_split]ACL chacal.brtvp.online:22 HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]X-Online-Host: chacal.brtvp.online[crlf]X-Forward-Host: chacal.brtvp.online[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]@@@[split][lf]ACL / [lf][auth]:80[lf]@@@[split]ACL / \n@@@[split][lf]ACL / [auth][lf]@@@[split][delay_split]ACL / /\n",
  150. "SNI": "",
  151. "TlsIP": "",
  152. "ProxyIP": "chacal.brtvp.online",
  153. "ProxyPort": "80",
  154. "Info": "Proxy"
  155. },
  156. {
  157. "Name": "VIVO FLARE 7 🟣",
  158. "FLAG": "vivo",
  159. "Payload": "[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]@@@[delay_split]GET /HTTP 1.2@@@[delay_split]GET http://[rotate=google.com.br;vivo.com.br;deezer.com]/ HTTP/1.1[crlf]Host: [rotate=google.com.br;vivo.com.br;deezer.com][crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split]GET http://vivo.com.br/ HTTP/1.1[crlf]Host: vivo.com.br[crlf][crlf]@@@[delay_split]GET http://google.com/ HTTP/1.1[crlf]Host: google.com[crlf][crlf]",
  160. "SNI": "",
  161. "TlsIP": "",
  162. "ProxyIP": "177.67.82.201#186.233.118.139",
  163. "ProxyPort": "80",
  164. "Info": "Proxy"
  165. },
  166. {
  167. "Name": "VIVO FLARE 8 🟣",
  168. "FLAG": "vivo",
  169. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  170. "SNI": "",
  171. "TlsIP": "",
  172. "ProxyIP": "[app_host]",
  173. "ProxyPort": "80",
  174. "Info": "Proxy"
  175. },
  176. {
  177. "Name": "VIVO SECURITY 1 💜✅",
  178. "FLAG": "vivo",
  179. "Payload": "[split] ACL http:// stats.g.doubleclick.net HTTP/1.3[crlf] http:// www.comarkinstruments.net[split][crlf][lf]@@@[split] ACL http://interatividade.vivo.ddivulga.com/produto/ HTTP/1.3[crlf] http:// www.comarkinstruments.net[split][crlf][lf]@@@CONNECT 127.0.0.1:80[crlf][instant_split]ACL HTTP/1.1[auth][ssh][crlf]Upgrade: Websocket[crlf]@@@[delay_split][lf]ACL / HTTP/1.9[lf]Host: tim.curcumy-saude.site; vivo-pr.curcumy-saude.site;google.com;ec2-100-20-0-0.us-west-2.compute.amazonaws.com\\\\n\\\\n\\\\n\\\\@@@[split][delay_split] ACL / STATUS200@@@[split]ACL HTTP/1.9[crlf][crlf]QUIC/11:80 Ua[crlf]@@@ACL / HTTP/1.1[crlf]Host: [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: [random=www.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]X-Forwarded-For: [rotate=www.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit]@openkf3[crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: microsoft.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: amazonaws.com[crlf]Upgrade: Keep-Alive[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n@@@[delay_split]PUT / Cache-Control: private: 13.33.131.6[crlf]@@@[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]",
  180. "SNI": "",
  181. "TlsIP": "",
  182. "ProxyIP": "177.67.82.201#186.233.118.58",
  183. "ProxyPort": "8080",
  184. "Info": "Proxy"
  185. },
  186. {
  187. "Name": "VIVO SECURITY 2 💜",
  188. "FLAG": "vivo",
  189. "Payload": "GET / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate=portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim. com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify. com;pagamentoonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com; c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2. interflashplusvpnpro.cloud][crlf][crlf][crlf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]@@@[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split]ACL AtlasN42/ HTTP/1.1[crlf]Host: 204.216.165.239[crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br[lf]@@@ACL / HTTP/1.1[crlf]Host: [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]X-Forwarded-For: [rotate=portalrecarga.vivo.com.br/recarga/home/;recarga.claro.com.br/no-credit][crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net [crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]",
  190. "SNI": "",
  191. "TlsIP": "",
  192. "ProxyIP": "177.67.82.201#186.233.118.58",
  193. "ProxyPort": "8080",
  194. "Info": "Proxy"
  195. },
  196. {
  197. "Name": "VIVO SECURITY 3 💜",
  198. "FLAG": "vivo",
  199. "Payload": "ACL HTTP/1.1 Host: plus.google.com \r\n \r\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\n\\n\\n \\n@@@CONNECT 127.0.0.1:8080[instant_split]GET www.veek.com.br HTTP/1.1[crlf][crlf]@@@CONNECT [host_port] [protocol][crlf][crlf]@@@CONNECT [host_port] [protocol][crlf][crlf]@@@CONNECT [host_port] HTTP/1.1[crlf][crlf]HEAD http:/// [protocol][crlf][crlf]@@@CONNECT 186.233.118.58:8080HTTP/1.1[crlf][crlf]@@@[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: www.vivo.com.br\\\\n\\\\n\\\\n \\\\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: chat.whatsapp.com/EOb866Y9YUE4yZ3JDTPW1m[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split]GET SASK / HTTP/1.1[crlf]Host: gedoc.vivo.com.br[crlf]Connection: Upgrade[crlf]@@@[delay_split][lf]GET / 55@@@GET-CONTROL ws://[app_host] HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]@@@[delay_split]ACL AtlasN42/ HTTP/1.1[crlf]Host: 186.233.118.163[crlf]Upgrade: websocket[crlf][crlf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: 186.233.118.58[crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]",
  200. "SNI": "",
  201. "TlsIP": "",
  202. "ProxyIP": "177.67.82.201#186.233.118.58",
  203. "ProxyPort": "8080",
  204. "Info": "Proxy"
  205. },
  206. {
  207. "Name": "VIVO SECURITY 4 💜",
  208. "FLAG": "vivo",
  209. "Payload": "[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote HTTP/1.1[lf][lf]@@@[split][method][host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]@@@[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote HTTP/1.1[lf][lf]@@@[delay_split]GET http://d1n212ccp6ldpw.cloudfront.net HTTP/1.1\n\r\n\r\nCONNECT 127.0.0.1:443HTTP/1.0X-Online-Host: http://download-this-pl.info/124BR/MP.html \r\n\r\n@@@[delay_split]CONNECT http://i.vivo.ddivulga.com/i/gp/ HTTP/1.1[crlf][split]@@@[delay_split]CONNECT http://interatividade.vivo.ddivulga.com/produto/ HTTP/1.0[crlf][split]@@@[delay_split]CONNECT http://navegue.vivo.ddivulga.com/pacote/ HTTP/1.1[crlf][split]@@@[delay_split]CONNECT http://portalrecarga.vivo.com.br/recarga/home/ HTTP/1.1[lf]@@@[split]\nCONNECT [host_port]@portalrecarga.vivo.com.br/recarga/home/[protocol]\nGETÂ http://sdp.vivo.com.br/ HTTP/1.1\nHost: portalrecarga.vivo.com.br/recarga/home/produto[crlf]X-Forwarded-For: portalrecarga.vivo.com.br/recarga/home/\n\n\n@@@[delay_split]CONNECT [host_port] GET http://portalrecarga.vivo.com.br/recarga/home/187.8.166.33 [protocol][lf][split]CONNECT 187.8.166.33 CONNECT [host_port]149.56.42.236 HTTP/1.1[crlf][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: tiktok.com[lf]@@@GET / HTTP/1.4[crlf]Host: 2804:5364:7000:1:1:1:64ad:7ebe[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]@@@[delay_split][lf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]@@@[split][rotate=GET;ACL;CONNECT;HEAD;PROPATCH;DEBELETE] / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]@@@[delay_split]ACL /Set-Cookie: sessionID=fbafa6258966f49f252b404ab9e5c219; path=/admin; domain=revive.vivointernetgratis.com.br; secure; HttpOnly; SameSite=strict HTTP/1.1][lf]@@@[delay_split]ACL /revive.vivointernetgratis.com.br HTTP/1.1][lf]@@@ACL http://1.1.1.1rotate= buzzfeed.com ; mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com ; myspace .com ; mobile.google.com ;1.0.0.5[crlf]@@@[delay_split]ACL / HTTP/1.1[lf]Host: gedoc.vivo.com.br[crlf][crlf]Pz4 / HTTP/1.1[lf]Host:gauchossh.xyz[crlf]Connection: Upgrade[lf]Upgrade: Websocket[crlf][crlf]@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  210. "SNI": "",
  211. "TlsIP": "",
  212. "ProxyIP": "177.67.82.201#186.233.118.58",
  213. "ProxyPort": "8080",
  214. "Info": "Proxy"
  215. },
  216. {
  217. "Name": "VIVO SECURITY 5 💜",
  218. "FLAG": "vivo",
  219. "Payload": "[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[delay_split]ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]@@@[delay_split]ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: hmg-embed.claromusica.com\n\n\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: premium.sshtunnelcloud.store[lf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portalrecarga.vivo.com.br/recarga/[lf]@@@[delay_split][lf]GET / HTTP/1.1][lf]Host: reinaldo2.allproxy.cloud[lf]@@@[delay_split][lf]GET / HTTP/1.1][lf]Host: reinaldo2.allproxy.cloud][lf]@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[delay_split]ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]@@@[delay_split]ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: hmg-embed.claromusica.com\n\n\n@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: premium.sshtunnelcloud.store[lf]@@@[delay_split][lf]GET / HTTP/1.1[lf]Host: portalrecarga.vivo.com.br/recarga/[lf]@@@[delay_split][lf]GET / HTTP/1.1][lf]Host: reinaldo2.allproxy.cloud[lf]@@@[delay_split][lf]GET / HTTP/1.1][lf]Host: reinaldo2.allproxy.cloud][lf]",
  220. "SNI": "",
  221. "TlsIP": "",
  222. "ProxyIP": "177.67.82.201#186.233.118.58",
  223. "ProxyPort": "8080",
  224. "Info": "Proxy"
  225. },
  226. {
  227. "Name": "VIVO EASY 1 💚",
  228. "FLAG": "vivo",
  229. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  230. "SNI": "",
  231. "TlsIP": "",
  232. "ProxyIP": "172.64.144.109#104.18.43.147#172.64.195.2#172.64.194.2#172.64.131.2#172.64.130.2#104.24.10.16#104.24.11.16#104.24.25.34#104.24.24.34#172.64.144.109#vigia.vivo.com.br#104.18.7.80#legado.vivo.com.br#104.18.6.41#104.18.6.80#104.17.70.206#104.17.71.206#104.17.72.206#104.17.73.206#104.17.74.206#104.17.75.206#104.18.6.80#104.18.7.80#104.18.7.41#104.18.6.41#162.159.128.7#162.159.138.6#sso.hotjar.com#learning.hotjar.com#js.partnerstack.com#insights.hotjar.com#images.ctfassets.net#hotjar.wistia.com#www.hotjar.com#cloud.vivo.com.br",
  233. "ProxyPort": "80",
  234. "Info": "Proxy"
  235. },
  236. {
  237. "Name": "VIVO EASY 2 💚",
  238. "FLAG": "vivo",
  239. "Payload": "GET /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  240. "SNI": "",
  241. "TlsIP": "",
  242. "ProxyIP": "store-front.ampli.com.br#paypal-logos.babbel.com#108.139.182.14#108.139.182.31#99.84.31.35#99.84.31.66#99.84.31.129#18.161.200.107#18.161.200.104#18.161.200.59#18.161.200.55#18.161.200.16#18.67.129.23#18.67.129.74#18.67.129.99#18.67.129.104#99.84.31.7#99.84.31.66#99.84.31.129#65.8.214.18#65.8.214.30#65.8.214.65#65.8.214.76#65.8.214.80#65.8.214.104#108.158.172.101#108.158.172.59#108.158.172.82#108.158.172.10#99.84.37.44#13.226.22.87#108.138.64.15#18.67.76.54#63.34.109.75#18.67.76.95#108.158.161.49#13.227.126.39#99.84.37.44#13.226.22.87#108.138.64.15#18.67.76.54#63.34.109.75#18.67.76.95",
  243. "ProxyPort": "80",
  244. "Info": "Proxy"
  245. },
  246. {
  247. "Name": "VIVO FRONT 1 💟",
  248. "FLAG": "vivo",
  249. "Payload": "GET /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  250. "SNI": "",
  251. "TlsIP": "",
  252. "ProxyIP": "lio-multicanalidade-app.m4u.com.br#cdnssl.clicktale.net#web.vivorecarga.m4u.com.br#108.139.95.90#108.158.122.125",
  253. "ProxyPort": "80",
  254. "Info": "Proxy"
  255. },
  256. {
  257. "Name": "VIVO FRONT 2 💟",
  258. "FLAG": "vivo",
  259. "Payload": "GET /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  260. "SNI": "",
  261. "TlsIP": "",
  262. "ProxyIP": "13.227.97.86#13.227.97.87#13.227.97.89#13.227.97.100#13.227.97.103#13.227.97.110#13.227.97.116#13.227.126.3#13.227.126.11#13.227.126.23#13.227.126.31#13.227.126.34#13.227.126.35#13.227.126.36#13.227.126.39#13.227.126.42#13.227.126.57#13.227.126.58#13.227.126.60#13.227.126.65#13.227.126.68#13.227.126.74#13.227.126.79#13.227.126.81#13.227.126.86#13.227.126.87#13.227.126.90#13.227.126.94#13.227.126.95#13.227.126.96#13.227.126.99#13.227.126.100#13.227.126.107#13.227.126.109#13.227.126.117#13.227.126.123#18.64.174.26#18.64.174.31#18.64.174.118#18.64.174.128#18.67.0.28#18.67.0.114#18.161.200.8#18.161.200.32#18.161.200.54#18.161.200.81#18.161.200.84#18.161.200.85#18.161.200.86#18.161.200.90#18.161.200.92#18.161.200.94#18.161.200.95#18.161.200.98#18.161.200.110#18.161.200.124#18.161.200.126#52.84.83.4#52.84.83.5#52.84.83.6#52.84.83.11#52.84.83.17#52.84.83.20#52.84.83.22#52.84.83.24#52.84.83.27#52.84.83.29#52.84.83.31#52.84.83.34#52.84.83.35#52.84.83.40#52.84.83.41#52.84.83.42#52.84.83.43#52.84.83.44#52.84.83.45#52.84.83.48#52.84.83.50#52.84.83.51#52.84.83.54#52.84.83.57#52.84.83.60#52.84.83.63#52.84.83.64#52.84.83.66#52.84.83.69#52.84.83.71#52.84.83.72#52.84.83.76#52.84.83.78#52.84.83.82#52.84.83.90#52.84.83.91#52.84.83.92#52.84.83.93#52.84.83.94#52.84.83.96",
  263. "ProxyPort": "80",
  264. "Info": "Proxy"
  265. },
  266. {
  267. "Name": "VIVO FRONT 3 💟",
  268. "FLAG": "vivo",
  269. "Payload": "HEAD /app28 HTTP/1.1[lf]Host: [rotate=d37lx9e954u3qw.cloudfront.net][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  270. "SNI": "d37lx9e954u3qw.cloudfront.net",
  271. "TlsIP": "13.33.108.148#13.33.108.108#13.33.108.204#13.33.108.143",
  272. "ProxyIP": "",
  273. "ProxyPort": "443",
  274. "Info": "Tlsws"
  275. },
  276. {
  277. "Name": "VIVO FRONT 4 💟✅",
  278. "FLAG": "vivo",
  279. "Payload": "GET /app28 HTTP/1.1[lf]Host: [rotate=d37lx9e954u3qw.cloudfront.net][lf]Connection: Upgrade[lf]Upgrade: Websocket[lf][split][lf]",
  280. "SNI": "",
  281. "TlsIP": "",
  282. "ProxyIP": "108.158.122.48#108.158.161.49#108.139.182.100#108.139.182.23#108.139.182.102#18.64.174.70#108.139.119.122#108.139.95.111#108.139.119.29#108.139.182.100#108.139.119.50#108.139.119.41#108.139.119.4#108.139.119.33#108.139.119.85#108.139.95.32#99.84.31.92",
  283. "ProxyPort": "80",
  284. "Info": "Proxy"
  285. },
  286. {
  287. "Name": "TIM SALDO VÁLIDO 1 💙",
  288. "FLAG": "tim",
  289. "Payload": "ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@masterpayssh[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: api.digicert.com[crlf][split][crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]",
  290. "SNI": "",
  291. "TlsIP": "",
  292. "ProxyIP": "104.19.241.93#172.64.154.143#104.17.64.225#104.19.239.25#172.64.154.143#104.16.239.166",
  293. "ProxyPort": "80",
  294. "Info": "Proxy"
  295. },
  296. {
  297. "Name": "TIM SALDO VÁLIDO 2 💙",
  298. "FLAG": "tim",
  299. "Payload": "ACL / HTTP/1.9[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.9[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade:Dalvik/2.1.0 (Linux; U; Android 10; moto g(7) play Build/QPYS30.52-22-14)[crlf]Referer: adnqueimaroscadogrupo.xyz[crlf]X-Online-Host: adnqueimaroscadogrupo.xyz[crlf]X-Forward-Host: adnqueimaroscadogrupo.xyz[crlf]X-Forwarded-For: adnqueimaroscadogrupo.xyz[crlf][crlf]#ACL / HTTP/1.3[crlf]Host: [rotate=mtls.sandbox.c6bank.com.br;app.sandbox.c6bank.com.br;api.sandbox.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: chacal.brtvp.online[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.9[crlf]host: teste.sandbox.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  300. "SNI": "",
  301. "TlsIP": "",
  302. "ProxyIP": "104.18.28.182#104.19.239.25#104.18.33.113#172.64.154.143#104.18.99.70#104.16.53.111#172.67.188.168#104.17.64.225#172.64.154.143#104.16.53.111#152.67.41.238#146.235.28.41#104.26.8.84",
  303. "ProxyPort": "80",
  304. "Info": "Proxy"
  305. },
  306. {
  307. "Name": "TIM SALDO VÁLIDO 3 💙✅",
  308. "FLAG": "tim",
  309. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: www.vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: www.vivo.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@ACL wss://chacal.brtvp.online HTTP/1.1[lf]Host: [rotate=google.es;www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net][lf]Upgrade: Websocket[lf][split][lf]@@@ACL /index.html HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.9[crlf]host:accounts.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL /cdn-cgi/trace HTTP/1.9[crlf]host:accounts.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  310. "SNI": "",
  311. "TlsIP": "",
  312. "ProxyIP": "pre-onboarding-p.c6bank.app#3.126.202.50#108.138.17.1918.66.122.124#52.30.35.186#10.101.50.118#108.138.17.113#www.pomonaelectronics.com#www.beha-amprobe.com#www.pomonaelectronics.com#www.oiplace.com.br#www.usclaro.com#www.pruftechnik.com#104.17.64.225#104.16.239.166#104.16.51.111#104.18.33.113#104.18.99.70#104.19.241.93",
  313. "ProxyPort": "80",
  314. "Info": "Proxy"
  315. },
  316. {
  317. "Name": "TIM SALDO VÁLIDO 4 💙✅",
  318. "FLAG": "tim",
  319. "Payload": "ACL / HTTP/1.9[crlf]host: [rotate=support.snapfish.com;support.mapmyfitness.com;chacal.brtvp.online;support.kontakt.io;uarecord.zendesk.com;sweetroad.zendesk.com;vsco.zendesk.com;support.onetwotrip.com;support.viki.com;support.holmsecurity.com;support.mobileroadie.com;support.neuronmocap.com;support.dxo.com;help.clickfunnels.com;screencastsonline.zendesk.com;support.celtx.com;support.muslimpro.com;support.discogs.com;sginteractive.zendesk.com;support.credly.com;support.sugarsync.com;help.rushlimbaugh.com;support.kidizen.com;support.twilio.com;support.mumbojumbo.com;tpbgame.zendesk.com;ingresshelp.zendesk.com;help.ableton.com;help.spreadshirt.com;wetransfer.zendesk.com;help.issuu.com;meetv.zendesk.com;eight.zendesk.com;help.iheart.com;help.standingstonegames.com;help.trainerize.com;help.coasttocoastam.com;support.securly.com;workflowy.zendesk.com;support.renvu.com;g5entertainment.zendesk.com;support.zipcar.com;gemsofwar.zendesk.com;support.watch.nba.com;faq.hellosign.com;screenad.eu;support.riotgames.com;support.paradoxplaza.com;layananku.airavpn.site;drpanda.zendesk.com;support.fiplab.com;help.behance.net;slack.zendesk.com;aide.e-monsite.com;support.cwtv.com;support.strikingly.com;prodigygame.zendesk.com;support.nixplay.com;flaregames.zendesk.com:support.cmon.com;faq.mightynetworks.com;support.wealthnavi.com;help.musicnotes.com;help.makemeslick.com;help.getmevo.com;support.abra.com;help.tcgplayer.com;mykronoz.zendesk.com;support.ankama.com;help.grindr.com;support.gordonedwards.net;support.mobi2go.com;support.ipvanish.com;support.withings.com;lykkex.zendesk.com;pggmencoleden.zendesk.com;help.positivegrid.com;helpdesk.flexradio.com;help.dreamhost.com;support.cambr;dgeenglish.org;support.ask.fm;care.pressreader.com;help.olx.in;moonactive.zendesk.com;support.getbase.com;history.zendesk.com;produttivo.zendesk.com;support.orcid.org;support.golocalapps.com;support.moneytap.jp;help.acuityscheduling.com;support-pocket.sumally.com;help.remind.com;support.awesome-table.com;support.ampleair.com.au;cs.vtcmobile.vn;support.oneup.com;sup;ort.scribd.com;ecosia.zendesk.com;support.dbconvert.com;cbchelp.cbc.ca;get.cloudapp.help;support.thetileapp.com;support.taskrabbit.com;support.clickcease.com;support.bestwebsoft.com;support.waveapps.com;support.oceanex.pro;autovit.zendesk.com][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: [crlf]Referer:@TMYCOMNECTVPN [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@TMYCOMNECTVPN[crlf]",
  320. "SNI": "",
  321. "TlsIP": "",
  322. "ProxyIP": "ffsupportbd.garena.com#172.64.146.157#104.18.41.99#141.193.213.20#141.193.213.21#104.18.99.70",
  323. "ProxyPort": "80",
  324. "Info": "Proxy"
  325. },
  326. {
  327. "Name": "TIM DIRECT 💙✅",
  328. "FLAG": "tim",
  329. "Payload": "ACL HTTP/ \r\nhost: www.google.com[lf]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\n\\\\n\\\\n \\\\n",
  330. "SNI": "",
  331. "TlsIP": "",
  332. "ProxyIP": "177.67.82.201#186.233.118.58",
  333. "ProxyPort": "80",
  334. "Info": "Proxy"
  335. },
  336. {
  337. "Name": "TIM FRONT 1 💙",
  338. "FLAG": "tim",
  339. "Payload": "GET ws://[rotate=d37lx9e954u3qw.cloudfront.net]/app28 HTTP/1.1[lf]Host: tim-controle-captive-portal.stg.m4u.com.br[lf]Connection: Upgrade[lf]Upgrade: websocket[lf][lf]",
  340. "SNI": "tim-controle-captive-portal.stg.m4u.com.br",
  341. "TlsIP": "13.227.126.58#13.227.126.58#18.67.129.17#c6bank.onelink.me#99.84.31.110#99.84.31.38#99.84.31.63#99.8",
  342. "ProxyIP": "",
  343. "ProxyPort": "443",
  344. "Info": "Tlsws"
  345. },
  346. {
  347. "Name": "TIM FRONT 2 💙✅",
  348. "FLAG": "tim",
  349. "Payload": "PATCH /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]@@@HEAD /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]",
  350. "SNI": "",
  351. "TlsIP": "",
  352. "ProxyIP": "13.227.97.49#13.227.97.116#13.227.97.28#13.227.97.69#3.163.10.121#3.163.10.54#3.163.10.104#conversions.appsflyer.com#3.163.10.112#13.248.245.213#54.231.225.121#65.9.95.105#18.66.147.27#Atendimento.descomplica.com.br#launches.appsflyer.com#13.33.131.9#13.33.131.6#13.33.131.90#13.33.131.92#13.33.131.123#13.227.126.39#13.227.126.95#99.84.31.10#99.84.31.24#99.84.31.39#99.84.31.54#99.84.31.55#99.84.31.72#99.84.31.92#108.139.113.89#108.139.113.53#108.139.113.49#108.139.113.4#108.139.95.19#108.139.95.5#108.139.95.50#108.139.95.87#3.163.10.104#3.163.10.121#3.163.10.112#3.163.10.54",
  353. "ProxyPort": "80",
  354. "Info": "Proxy"
  355. },
  356. {
  357. "Name": "TIM VÁLIDO E EXPIRADO 1 🔵",
  358. "FLAG": "tim",
  359. "Payload": "ACL / HTTP/1.1[crlf]Host: [app_host][split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]@@@[rotate=OPTIONS;GET;HEAD;POST;PUT;DELETE;TRACE;CONNECT;PROPFIND;PROPPATCH;MKCOL;COPY;MOVE;LOCK;UNLOCK;VERSION-CONTROL;REPORT;CHECKOUT;CHECKIN;UNCHECKOUT;MKWORKSPACE;UPDATE;LABEL;MERGE;BASELINE-CONTROL;MKACTIVITY;RFC;ORDERPATCH;PATCH;SEARCH] /cdn-cgi/trace/ HTTP/1.1[crlf]Host: www.c6bank.app[crlf][crlf][split][crlf][crlf]MOVE / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Pragma: no-cache[crlf]Cache-Control: no-cache[crlf]@TSTOPSPEED[crlf][crlf]@@@NOTIFY / HTTP/1.9[crlf]host: cdn.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  360. "SNI": "",
  361. "TlsIP": "",
  362. "ProxyIP": "172.64.154.143#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  363. "ProxyPort": "80",
  364. "Info": "Proxy"
  365. },
  366. {
  367. "Name": "TIM VÁLIDO E EXPIRADO 2 🔵",
  368. "FLAG": "tim",
  369. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@canaldotl[crlf][crlf]@@@CHECKOUT / HTTP/1.1[crlf]Host: apptest2.c6bank.app [crlf]Upgrade: HTTP/2.0, SHTTP/1.3, IRC/6.9, RTA/x11[crlf]@TSTOPSPEED[crlf][crlf]@@@UNCHECKOUT / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@canaldotl[crlf][crlf]",
  370. "SNI": "",
  371. "TlsIP": "",
  372. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  373. "ProxyPort": "80",
  374. "Info": "Proxy"
  375. },
  376. {
  377. "Name": "TIM VÁLIDO E EXPIRADO 3 🔵",
  378. "FLAG": "tim",
  379. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: mobile-privacy-techie-web.autos[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@GurusSSH[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@GurusSSH[crlf][crlf]@@@GET / HTTP/1.3[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]MASTERPAYSSH- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@masterpayssh[crlf][crlf]",
  380. "SNI": "",
  381. "TlsIP": "",
  382. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4",
  383. "ProxyPort": "80",
  384. "Info": "Proxy"
  385. },
  386. {
  387. "Name": "TIM VÁLIDO E EXPIRADO 4 🔵",
  388. "FLAG": "tim",
  389. "Payload": "ACL / HTTP/1.1[crlf]Host:landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]@@@ACL / HTTP/1.3[crlf]host: urlbuildertim.descomplica.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://connect4g.geralnet.com.br[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]host: [random=app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest2.c6bank.app;mobile.c6bank.app;mobile.c6bank.tech;pre-onboarding-h.c6bank.app;pre-onboarding-p.c6bank.app;saas-h.c6bank.app;saas-h.c6bank.app;saas.c6bank.app;tim.adfast.com.br;www.c6bank.tech][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: tim.adfast.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  390. "SNI": "",
  391. "TlsIP": "",
  392. "ProxyIP": "104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25",
  393. "ProxyPort": "80",
  394. "Info": "Proxy"
  395. },
  396. {
  397. "Name": "TIM VÁLIDO E EXPIRADO 5 🔵",
  398. "FLAG": "tim",
  399. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: mobile.hom.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://wa.me/84996862124 [crlf]Referer: https://t.me/starlinkoficial [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: appdev.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  400. "SNI": "",
  401. "TlsIP": "",
  402. "ProxyIP": "104.18.33.113#help.artifactuprising.com#104.19.240.25#104.18.27.160",
  403. "ProxyPort": "80",
  404. "Info": "Proxy"
  405. },
  406. {
  407. "Name": "TIM VÁLIDO E EXPIRADO 6 🔵",
  408. "FLAG": "tim",
  409. "Payload": "[split]ACL / HTTP/1.9[crlf]host:[random=1pass-poc.hom.c6bank.com.br;cms-assets-p.c6bank.com.br;cdn.c6bank.com.br; blog.c6bank.com.br;www.c6bank.com.br;ajuda.c6bank.com.br;cloud.mail.c6bank.com.br;image.mail.c6bank.com.br;ajuda.c6bank.com.br;auth.of.c6bank.com.br;click.mail.c6bank.com.br;cloud;mail.c6bank.com.br;image.mail.c6bank.com.br;mail.c6bank.com.br;view.mail.c6bank.com.br;web.of.c6bank.com.br;www.c6bank.com.br;app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest2.c6bank.app;mobile.c6bank.app;mobile.hom.c6bank.app;saas.c6bank.app;saas-d.c6bank.app;saas-h.c6bank.app;apptest.c6bank.app;app.c6bank.app;apphom.c6bank.app;app1.c6bank.app;saas-h.c6bank.app;app2.c6bank.app;saas.c6bank.app;mobile.c6bank.app;saas-d.c6bank.app;apptest2.c6bank.app;apptest1.c6bank.app][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  410. "SNI": "",
  411. "TlsIP": "",
  412. "ProxyIP": "104.19.241.93#104.19.241.25#104.16.239.166#104.18.28.182",
  413. "ProxyPort": "80",
  414. "Info": "Proxy"
  415. },
  416. {
  417. "Name": "TIM VÁLIDO E EXPIRADO 7 🔵",
  418. "FLAG": "tim",
  419. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: [random=mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  420. "SNI": "",
  421. "TlsIP": "",
  422. "ProxyIP": "162.159.152.26#162.159.153.238#104.18.99.70#atendimento.lojadointer.com.br#104.19.239.25#162.159.152.26#104.18.33.113#172.64.154.143",
  423. "ProxyPort": "80",
  424. "Info": "Proxy"
  425. },
  426. {
  427. "Name": "TIM VÁLIDO E EXPIRADO 8 🔵",
  428. "FLAG": "tim",
  429. "Payload": "[split]ACL / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]TSTOPSPEED[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  430. "SNI": "",
  431. "TlsIP": "",
  432. "ProxyIP": "104.18.27.160#104.16.53.111#mobile.c6bank.app#104.19.239.25#172.67.162.233#104.19.239.25#104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.2510#4.18.27.160#104.19.239.25#104.16.19.94#104.16.18.94#atendimento.lojadointer.com.br#mobile.c6bank.app#104.18.98.70",
  433. "ProxyPort": "80",
  434. "Info": "Proxy"
  435. },
  436. {
  437. "Name": "TIM VÁLIDO E EXPIRADO 9 🔵",
  438. "FLAG": "tim",
  439. "Payload": "[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: mobile.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: cdn.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  440. "SNI": "",
  441. "TlsIP": "",
  442. "ProxyIP": "104.18.98.70#104.18.99.70",
  443. "ProxyPort": "80",
  444. "Info": "Proxy"
  445. },
  446. {
  447. "Name": "TIM VÁLIDO E EXPIRADO 10 🔵",
  448. "FLAG": "tim",
  449. "Payload": "[split]ACL / HTTP/1.1[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: ubisoft.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  450. "SNI": "",
  451. "TlsIP": "",
  452. "ProxyIP": "atendimento.lojadointer.com.br",
  453. "ProxyPort": "80",
  454. "Info": "Proxy"
  455. },
  456. {
  457. "Name": "TIM VÁLIDO E EXPIRADO 11 🔵",
  458. "FLAG": "tim",
  459. "Payload": "[split]ACL / HTTP/1.3[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://t.me/masterpayssh[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: melhorplano.net[crlf]Expect: 100-continue[lf][lf][split][lf][lf]ACL / DarkMaster / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-continue[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]@@@[split]ACL / HTTP/1.1[crlf]host: assets.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[lf]Host: dataacademy.descomplica.com.br[lf][lf][lf][lf]PUT- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: websocket[lf]User-Agent: Mobile Safari/9 OPR/9[lf][lf]@@@[split]ACL / HTTP/1.3[crlf]host: urlbuildertim.descomplica.com.br[crlf][crlf][split][crlf]DELETE- // HTTP/1.3[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://t.me/masterpayssh [crlf]Referer: https://connect4g.geralnet.com.br[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.9[crlf]host: upages.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.1[crlf]Host: descomplica.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]@@@[split]ACL /cdn-cgi/trace HTTP/1.1[crlf]Host: wtaphf.descomplica.com.br[crlf][crlf][crlf][crlf]PUT- / HTTP/1.1[crlf]Host: [app_host][crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]",
  460. "SNI": "",
  461. "TlsIP": "",
  462. "ProxyIP": "104.19.239.25#104.26.13.249#104.16.53.111#dataacademy.descomplica.com.br#104.19.241.93",
  463. "ProxyPort": "80",
  464. "Info": "Proxy"
  465. },
  466. {
  467. "Name": "TIM VÁLIDO E EXPIRADO 12 🔵",
  468. "FLAG": "tim",
  469. "Payload": "[split]ACL / HTTP/1.9[crlf]host: [random=cms-assets-p.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Loncation: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: [random=image.mail.c6bank.com.br;c6bank.com.br;cloud.mail.c6bank.com.br;apptest.c6bank.app;jobs.deezer.com;cms-assets-p.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: [random=cdn.c6bank.com.br;support.deezer.com;mobile.c6bank.app;appdev.c6bank.app][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1\\nHost: c6bank.com.br\\n\\nOPTIONS- // HTTP/1.1\\nHost: [app_host]\\nConnection: Upgrade\\nUpgrade: ws\\n\\n@@@[split]ACL / HTTP/1.9[crlf]host: [random=checkv.c6bank.com.br;api.sandbox.c6bank.com.br;c6bank.app;c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  470. "SNI": "",
  471. "TlsIP": "",
  472. "ProxyIP": "104.18.211.56#apptest2.c6bank.app#104.18.211.56#104.16.53.111#104.18.27.160#104.19.239.25#104.19.240.25#104.19.242.25#app.c6bank.tech#alointernet.duckdns.org#crm-leads-p.c6bank.info#cerc-p.c6bank.tech",
  473. "ProxyPort": "80",
  474. "Info": "Proxy"
  475. },
  476. {
  477. "Name": "TIM VÁLIDO E EXPIRADO 13 🔵",
  478. "FLAG": "tim",
  479. "Payload": "[split]ACL / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]host: mobile.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@[split]ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  480. "SNI": "",
  481. "TlsIP": "",
  482. "ProxyIP": "104.19.240.25#104.16.51.111#mobile.c6bank.app",
  483. "ProxyPort": "80",
  484. "Info": "Proxy"
  485. },
  486. {
  487. "Name": "TIM EXPIRADO 1 🔵",
  488. "FLAG": "tim",
  489. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]@@@ACL HTTP/2[crlf]Host: plus.google.com[crlf]@@@PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]@@@PROPPATCH http://mercadolivre.com.br HTTP/2[crlf]Host: http://mercadolivre.com.br[crlf]",
  490. "SNI": "",
  491. "TlsIP": "",
  492. "ProxyIP": "177.67.82.201#186.233.118.139",
  493. "ProxyPort": "80",
  494. "Info": "Proxy"
  495. },
  496. {
  497. "Name": "TIM EXPIRADO 2 🔵",
  498. "FLAG": "tim",
  499. "Payload": "HEAD wss://[host] HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]@@@[protocol][crlf] [crlf][crlf]@@@@GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [host] [crlf]Upgrade: websocket[crlf][crlf]@@@PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]@@@HTTP/1.1[crlf] [crlf][crlf]•@@@[protocol] \n\n/@@@HTTP/ [crlf][crlf]|[crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@ACL [host] HTTP/2[crlf]Host: google.es[crlf]Referer: @Laranjo01[crlf]@@@HTTP//@@@ACL HTTP/2[crlf]Host: plus.google.com[crlf]@@@MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]@@@HTTP/ 2\nHOST : m.opera.com\n\n@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]@@@HTTP/ [crlf][crlf]|[crlf]]]@@@MERGE mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]@@@ACL http://1.1.1.1rotate=www.waze.com;buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;www.myspace.com.br;www.waze.com;1.0.0.5[crlf]@@@PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]@@@HTTP/ [crlf][crlf]|[crlf@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]@@@http/ \n\n/@@@PATCH HTTP/1.0 [crlf]Host: map.qq.com[crlf]@@@PROPFIND http://www.microsoft.com HTTP/1.0 Host: www.microsoft.com HTTP/1.0\n \n@@@UNLOCK www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0 Host: www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP/1.0\n \n@@@ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]@@@GET http://chat.mundiale.claro.com.br HTTP/1.0[crlf]Host: [app_host]http://chat.mundiale.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@GET wss://api.onesignal.com/ HTTP/1.1[crlf]Host: [host][rlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Referer: google.com[crlf][crlf]@@@ACL /index.html HTTP/1.1[crlf]Host: [host][crlf]Upgrade: websocket[crlf][crlf]",
  500. "SNI": "",
  501. "TlsIP": "",
  502. "ProxyIP": "177.67.82.201#186.233.118.139",
  503. "ProxyPort": "80",
  504. "Info": "Proxy"
  505. },
  506. {
  507. "Name": "TIM EXPIRADO 3 🔵",
  508. "FLAG": "tim",
  509. "Payload": "ACL / HTTP/1.1[crlf]Host: chacal.brtvp.online[split][crlf][crlf]POLL / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf]User-Agent: [crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@RevTunnel[crlf][crlf]@@@[delay_split]ACL / HTTP/1.1[crlf]Host: chacal.brtvp.online[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@RevTunnel[crlf][crlf]",
  510. "SNI": "",
  511. "TlsIP": "",
  512. "ProxyIP": "172.64.154.143#tinyurl.com#104.26.10.41#172.67.69.69#104.26.11.41",
  513. "ProxyPort": "80",
  514. "Info": "Proxy"
  515. },
  516. {
  517. "Name": "TIM SECURITY 🔵",
  518. "FLAG": "tim",
  519. "Payload": "ACL /index.html HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]]",
  520. "SNI": "",
  521. "TlsIP": "",
  522. "ProxyIP": "177.67.82.201#186.233.118.139",
  523. "ProxyPort": "80",
  524. "Info": "Proxy"
  525. },
  526. {
  527. "Name": "CLARO FRONT 1 🔴✅",
  528. "FLAG": "claro",
  529. "Payload": "GET /app28 HTTP/1.1[crlf]Host: [random=d37lx9e954u3qw.cloudfront.net][crlf]Upgrade: websocket[crlf]Connection: Upgrade[crlf]Accept-Encoding: backendTL[crlf][crlf]@@@GET / HTTP/1.5[crlf]Host: [rotate=d37lx9e954u3qw.cloudfront.net][crlf]backend: app28[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  530. "SNI": "",
  531. "TlsIP": "",
  532. "ProxyIP": "ni.portal-universal.com#mobile2.twimg.com",
  533. "ProxyPort": "80",
  534. "Info": "Proxy"
  535. },
  536. {
  537. "Name": "CLARO FRONT 2 🔴",
  538. "FLAG": "claro",
  539. "Payload": "GET ws://[rotate=d37lx9e954u3qw.cloudfront.net]/app28 HTTP/1.1[lf]Host: lio-x-onboarding-app.m4u.com.br[lf]Connection: Upgrade[lf]Upgrade: websocket[lf][lf]",
  540. "SNI": "",
  541. "TlsIP": "",
  542. "ProxyIP": "lio-x-onboarding-app.m4u.com.br#tim-controle-captive-portal.stg.m4u.com.br",
  543. "ProxyPort": "80",
  544. "Info": "Proxy"
  545. },
  546. {
  547. "Name": "CLARO SECURITY 🔴",
  548. "FLAG": "claro",
  549. "Payload": "[delay_split][lf]HTTP/ \nHost: www.claro.com.br\n\n\n \n@@@GET / HTTP/1.1[crlf]@@@HTTP/ \nHost: www.claro.com.br\n\n\n \n@@@HTTP/ \nHost: Romz.ipcdn.shop \n\n\n \n@@@ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;v;mobile.google.com;1.0.0.5[crlf]@@@[delay_split][crlf]GET / HTTP/1.1[lf]Host: 186.233.118.139[lf]Upgrade: websocket[lf]",
  550. "SNI": "",
  551. "TlsIP": "",
  552. "ProxyIP": "177.67.82.201#186.233.118.139",
  553. "ProxyPort": "80",
  554. "Info": "Proxy"
  555. },
  556. {
  557. "Name": "CLARO DIRECT 🔴",
  558. "FLAG": "claro",
  559. "Payload": "BASELINE-CONTROL http://faq.claro.com.br HTTP/1.0[crlf]Host: http://faq.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@BASELINE-CONTROL http://bonuz.claro.com.br HTTP/1.0[crlf]Host: http://contaonline2.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@BASELINE-CONTROL http://www.claro.com.br HTTP/1.0[crlf]Host: http://www.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]@@@BASELINE-CONTROL http://api.commandcenter.claro.com.br HTTP/1.0[crlf]Host: http://api.commandcenter.claro.com.br [crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf] ][crlf]",
  560. "SNI": "",
  561. "TlsIP": "",
  562. "ProxyIP": "177.67.82.201#186.233.118.139",
  563. "ProxyPort": "80",
  564. "Info": "Proxy"
  565. },
  566. {
  567. "Name": "OI 🟡",
  568. "FLAG": "claro",
  569. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  570. "SNI": "",
  571. "TlsIP": "",
  572. "ProxyIP": "104.16.53.111",
  573. "ProxyPort": "80",
  574. "Info": "Proxy"
  575. }
  576. ]
  577. }
comments powered by Disqus