ATT

SUBMITTED BY: DonkTV

DATE: Feb. 17, 2023, 5:42 p.m.

UPDATED: March 12, 2023, 3:25 a.m.

FORMAT: Text only

SIZE: 31.1 kB

History Raw Download

HITS: 13798

Report
  1. {
  2. "Version": "14",
  3. "ReleaseNotes": "",
  4. "Sms": "http://atlaspainel.x10.bz/update/admin/sms",
  5. "UrlUpdate": "https://bitbin.it/SW2K9I2O/raw",
  6. "EmailFeedback": "mknet20@gmail.com",
  7. "UrlContato": "",
  8. "UrlTermos": "http://atlaspainel.x10.bz/update/admin/termos",
  9. "CheckUser": "true",
  10. "Udp": [
  11. {
  12. "Porta": "7100"
  13. },
  14. {
  15. "Porta": "7200"
  16. },
  17. {
  18. "Porta": "7300"
  19. },
  20. {
  21. "Porta": "7400"
  22. },
  23. {
  24. "Porta": "7500"
  25. },
  26. {
  27. "Porta": "7600"
  28. }
  29. ],
  30. "Servers": [
  31. {
  32. "Name": "Tecnonet ",
  33. "TYPE": "premium",
  34. "FLAG": "br.png",
  35. "ServerIP": "snowssh.site",
  36. "CheckUser": "http://209.14.70.179:5000/checkUser",
  37. "ServerPort": "22",
  38. "SSLPort": "443",
  39. "USER": "",
  40. "PASS": ""
  41. }
  42. ],
  43. "Networks": [
  44. {
  45. "Name": "VIVO PRÉ 1🇧🇷",
  46. "FLAG": "vivo",
  47. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: infotecno.shop[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  48. "SNI": "",
  49. "TlsIP": "",
  50. "ProxyIP": "104.16.51.111",
  51. "ProxyPort": "80",
  52. "Info": "Proxy"
  53. },
  54. {
  55. "Name": "VIVO PRÉ 2 🇧🇷",
  56. "FLAG": "vivo",
  57. "Payload": "GET-CONTROL ws://infotecno.shop HTTP/1.1[crlf]Host: itsupport.surveymonkey.com[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  58. "SNI": "",
  59. "TlsIP": "",
  60. "ProxyIP": "104.16.51.111",
  61. "ProxyPort": "80",
  62. "Info": "Proxy"
  63. },
  64. {
  65. "Name": "VIVO PRÉ 3 🇧🇷",
  66. "FLAG": "vivo",
  67. "Payload": "GET / HTTP/1.1[crlf]Host: [host_port][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  68. "SNI": "",
  69. "TlsIP": "",
  70. "ProxyIP": "104.16.51.111",
  71. "ProxyPort": "80",
  72. "Info": "Proxy"
  73. },
  74. {
  75. "Name": "VIVO FRONT| 01",
  76. "FLAG": "vivo",
  77. "Payload": "GET / HTTP/1.1[crlf]Host: d3bo989bo2wb31.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  78. "SNI": "",
  79. "TlsIP": "",
  80. "ProxyIP": "108.139.166.122",
  81. "ProxyPort": "80",
  82. "Info": "Proxy"
  83. },
  84. {
  85. "Name": "VIVO FRONT| 02",
  86. "FLAG": "vivo.png",
  87. "Payload": "GET / HTTP/1.1[crlf]Host: d3bo989bo2wb31.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  88. "SNI": "",
  89. "TlsIP": "",
  90. "ProxyIP": "108.139.119.128",
  91. "ProxyPort": "80",
  92. "Info": "Proxy"
  93. },
  94. {
  95. "Name": "VIVO ",
  96. "FLAG": "vivo",
  97. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  98. "SNI": "",
  99. "TlsIP": "",
  100. "ProxyIP": "104.16.51.111",
  101. "ProxyPort": "80",
  102. "Info": "Tlsws"
  103. },
  104. {
  105. "Name": "VIVO 02",
  106. "FLAG": "vivo",
  107. "Payload": "BASE-LINE wss://[rotate=gracegardencounseling.com;bam.nr-data.net;[app_host];vivoid.vivo.com.br;melhorplano.net;vivo360.vivo.com.br;vivorio.com.br;selectra.net.br;gprs.digitel.com.ve;power4fit.com;bolsas.alfaumuarama.edu.br;eventos.alfaumuarama.edu.br;concursos.alfaumuarama.edu.br;legado.vivo.com.br;carrinho-pos-familia.vivo.com.br;unpkg.com;cdnjs.cloudflare.com;portaljud.vivo.com.br;vivoemdia.vivo.com.br;fly218.com;rapehun.com] HTTP/1.1[lf]Host: [app_host][lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  108. "SNI": "",
  109. "TlsIP": "",
  110. "ProxyIP": "104.16.51.111",
  111. "ProxyPort": "80",
  112. "Info": "Proxy"
  113. },
  114. {
  115. "Name": "VIVO 2.5",
  116. "FLAG": "vivo",
  117. "Payload": "GET / HTTP/1.1[crlf]Host: d3c3963gq318mx.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  118. "SNI": "",
  119. "TlsIP": "",
  120. "ProxyIP": "recarga.vivo.com.br",
  121. "ProxyPort": "80",
  122. "Info": "Proxy"
  123. },
  124. {
  125. "Name": "VIVO 03",
  126. "FLAG": "vivo.png",
  127. "Payload": "GET / HTTP/1.1[crlf]Host: d3c3963gq318mx.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  128. "SNI": "",
  129. "TlsIP": "",
  130. "ProxyIP": "planosvivointernet.com.br",
  131. "ProxyPort": "80",
  132. "Info": "Proxy"
  133. },
  134. {
  135. "Name": "VIVO 04",
  136. "FLAG": "vivo.png",
  137. "Payload": "GET / HTTP/1.1[crlf]Host: d3c3963gq318mx.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  138. "SNI": "",
  139. "TlsIP": "",
  140. "ProxyIP": "108.139.166.122",
  141. "ProxyPort": "80",
  142. "Info": "Proxy"
  143. },
  144. {
  145. "Name": "VIVO 05",
  146. "FLAG": "vivo",
  147. "Payload": "BASELINE-CONTROL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  148. "SNI": "[app_host]",
  149. "TlsIP": "104.18.7.41",
  150. "ProxyIP": "",
  151. "ProxyPort": "",
  152. "Info": "Tlsws"
  153. },
  154. {
  155. "Name": "VIVO 06",
  156. "FLAG": "vivo",
  157. "Payload": "GET / HTTP/1.1[crlf]Host: lmsk.store[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  158. "SNI": "lmsk.store",
  159. "TlsIP": "atendimento.descomplica.com.br",
  160. "ProxyIP": "",
  161. "ProxyPort": "443",
  162. "Info": "Tlsws"
  163. },
  164. {
  165. "Name": "TIM SALDO VALIDO",
  166. "FLAG": "tim",
  167. "Payload": "GET / HTTP/1.1[crlf]Host:landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  168. "SNI": "",
  169. "TlsIP": "",
  170. "ProxyIP": "104.16.53.111",
  171. "ProxyPort": "80",
  172. "Info": "Proxy"
  173. },
  174. {
  175. "Name": "TIM A FRONTEIRA JA ACABOU",
  176. "FLAG": "tim",
  177. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: lmsk.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  178. "SNI": "",
  179. "TlsIP": "",
  180. "ProxyIP": "helpypro.stoodi.com.br",
  181. "ProxyPort": "80",
  182. "Info": "Proxy"
  183. },
  184. {
  185. "Name": "TIM 2023🔵🔥[01]",
  186. "FLAG": "tim",
  187. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: lmsk.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  188. "SNI": "",
  189. "TlsIP": "104.19.239.25",
  190. "ProxyIP": "104.19.239.25",
  191. "ProxyPort": "80",
  192. "Info": "Proxy"
  193. },
  194. {
  195. "Name": "TIM 2023🔵🔥[02]",
  196. "FLAG": "tim",
  197. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: lmsk.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  198. "SNI": "",
  199. "TlsIP": "104.19.239.25",
  200. "ProxyIP": "104.19.239.25",
  201. "ProxyPort": "80",
  202. "Info": "Proxy"
  203. },
  204. {
  205. "Name": "TIM 2023🔵🔥[03]",
  206. "FLAG": "tim",
  207. "Payload": "GET / HTTP/1.1[crlf]Host: cloud.mail.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: lmsk.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.lmsk.store)[crlf][crlf]",
  208. "SNI": "",
  209. "TlsIP": "104.19.239.25",
  210. "ProxyIP": "104.19.239.25",
  211. "ProxyPort": "80",
  212. "Info": "Proxy"
  213. },
  214. {
  215. "Name": "TIM NAVE",
  216. "FLAG": "tim",
  217. "Payload": "GET / HTTP/1.1[crlf]Host: c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET- / HTTP/1.1[crlf]Host: infotecno.shop[crlf]Upgrade: Websocket[crlf][crlf]",
  218. "SNI": "",
  219. "TlsIP": "",
  220. "ProxyIP": "104.16.51.111",
  221. "ProxyPort": "80",
  222. "Info": "Direct"
  223. },
  224. {
  225. "Name": "TIM FRONT + TESTE",
  226. "FLAG": "tim",
  227. "Payload": "GET / HTTP/1.1[crlf]Host: [random=p0h56647b4516n7n86.speedup.mobi;p0h56647b4516n7n86.speedup.mobi;p0h56647b4516n7n86.speedup.mobi][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  228. "SNI": "",
  229. "TlsIP": "",
  230. "ProxyIP": "108.158.124.45",
  231. "ProxyPort": "80",
  232. "Info": "Proxy"
  233. },
  234. {
  235. "Name": "TIM VÁLIDO [02]",
  236. "FLAG": "tim",
  237. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  238. "SNI": "",
  239. "TlsIP": "",
  240. "ProxyIP": "104.16.53.111",
  241. "ProxyPort": "80",
  242. "Info": "Proxy"
  243. },
  244. {
  245. "Name": "TIM VÁLIDO [03]",
  246. "FLAG": "tim",
  247. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  248. "SNI": "",
  249. "TlsIP": "",
  250. "ProxyIP": "104.16.53.111",
  251. "ProxyPort": "80",
  252. "Info": "Proxy"
  253. },
  254. {
  255. "Name": "TIM VÁLIDO [04]",
  256. "FLAG": "tim",
  257. "Payload": "GET / HTTP/1.1[lf]Host: api.sandbox.c6bank.com.br[lf]Expect: 100-continue[lf][lf][split][lf][lf]ACL /?/ HTTP/1.1[lf]Host: [app_host] [lf]Expect: 100-continue[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  258. "SNI": "",
  259. "TlsIP": "",
  260. "ProxyIP": "104.19.239.25",
  261. "ProxyPort": "80",
  262. "Info": "Proxy"
  263. },
  264. {
  265. "Name": "TIM VÁLIDO [05]",
  266. "FLAG": "tim",
  267. "Payload": "GET / HTTP/1.1[crlf]Host: c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET- / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  268. "SNI": "",
  269. "TlsIP": "",
  270. "ProxyIP": "104.16.51.111",
  271. "ProxyPort": "80",
  272. "Info": "Proxy"
  273. },
  274. {
  275. "Name": "TIM VÁLIDO [06]",
  276. "FLAG": "tim",
  277. "Payload": "GET / HTTP/1.1nHost: api.sandbox.c6bank.com.brnExpect: 100-continuenn[split]nnACL /?/ HTTP/1.1nHost: [app_host]nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  278. "SNI": "",
  279. "TlsIP": "",
  280. "ProxyIP": "104.19.239.25",
  281. "ProxyPort": "80",
  282. "Info": "Proxy"
  283. },
  284. {
  285. "Name": "TIM VÁLIDO [07]",
  286. "FLAG": "tim",
  287. "Payload": "GDMNET- wss://mobilidade.cloud.caixa.gov.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  288. "SNI": "mobilidade.cloud.caixa.gov.br",
  289. "TlsIP": "162.159.133.62",
  290. "ProxyIP": "",
  291. "ProxyPort": "",
  292. "Info": "Tlsws"
  293. },
  294. {
  295. "Name": "TIM VÁLIDO [08]",
  296. "FLAG": "tim",
  297. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  298. "SNI": "feedback.infinitepay.io",
  299. "TlsIP": "",
  300. "ProxyIP": "104.16.18.94",
  301. "ProxyPort": "80",
  302. "Info": "Proxy"
  303. },
  304. {
  305. "Name": "TIM VÁLIDO [09]",
  306. "FLAG": "tim",
  307. "Payload": "GET / HTTP/1.1nHost: api.sandbox.c6bank.com.brnExpect: 100-continuenn[split]nnACL /?/ HTTP/1.1nHost: [app_host] nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  308. "SNI": "",
  309. "TlsIP": "",
  310. "ProxyIP": "104.18.28.182",
  311. "ProxyPort": "80",
  312. "Info": "Proxy"
  313. },
  314. {
  315. "Name": "TIM VÁLIDO [10]",
  316. "FLAG": "tim",
  317. "Payload": "GET / HTTP/1.1nHost: api.sandbox.c6bank.com.brnExpect: 100-continuenn[split]nnACL- /?/ HTTP/1.1nHost: [app_host] nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  318. "SNI": "",
  319. "TlsIP": "",
  320. "ProxyIP": "104.18.28.182",
  321. "ProxyPort": "80",
  322. "Info": "Proxy"
  323. },
  324. {
  325. "Name": "TIM VÁLIDO [11]",
  326. "FLAG": "tim",
  327. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  328. "SNI": "",
  329. "TlsIP": "[app_host]",
  330. "ProxyIP": "104.16.51.111",
  331. "ProxyPort": "80",
  332. "Info": "Proxy"
  333. },
  334. {
  335. "Name": "TIM VÁLIDO [12]",
  336. "FLAG": "tim",
  337. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  338. "SNI": "[app_host]",
  339. "TlsIP": "[app_host]",
  340. "ProxyIP": "104.16.51.111",
  341. "ProxyPort": "80",
  342. "Info": "Proxy"
  343. },
  344. {
  345. "Name": "TIM VÁLIDO [13]",
  346. "FLAG": "tim",
  347. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  348. "SNI": "[app_host]",
  349. "TlsIP": "",
  350. "ProxyIP": "104.16.51.111",
  351. "ProxyPort": "80",
  352. "Info": "Proxy"
  353. },
  354. {
  355. "Name": "TIM VÁLIDO/EXPIRADO [1+]",
  356. "FLAG": "tim",
  357. "Payload": "GDMNET- wss://songbird.cardinalcommerce.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  358. "SNI": "songbird.cardinalcommerce.com",
  359. "TlsIP": "198.217.251.250",
  360. "ProxyIP": "",
  361. "ProxyPort": "443",
  362. "Info": "Tlsws"
  363. },
  364. {
  365. "Name": "TIM VÁLIDO/EXPIRADO [2+]",
  366. "FLAG": "tim",
  367. "Payload": "GET / HTTP/1.1[crlf]Host: pre-onboarding-h.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: m.madamenet.online[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  368. "SNI": "pre-onboarding-h.c6bank.app",
  369. "TlsIP": "pre-onboarding-h.c6bank.app",
  370. "ProxyIP": "",
  371. "ProxyPort": "80",
  372. "Info": "Direct"
  373. },
  374. {
  375. "Name": "TIM EXPIRADO [01]",
  376. "FLAG": "tim",
  377. "Payload": "HEAD wss://[app_host] HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]",
  378. "SNI": "[app_host]",
  379. "TlsIP": "",
  380. "ProxyIP": "104.16.53.111",
  381. "ProxyPort": "80",
  382. "Info": "Proxy"
  383. },
  384. {
  385. "Name": "TIM EXPIRADO [02]",
  386. "FLAG": "tim",
  387. "Payload": "[protocol][crlf] [crlf][crlf]@",
  388. "SNI": "",
  389. "TlsIP": "",
  390. "ProxyIP": "[app_host]",
  391. "ProxyPort": "80",
  392. "Info": "Direct"
  393. },
  394. {
  395. "Name": "TIM EXPIRADO [03]",
  396. "FLAG": "tim",
  397. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: websocket[crlf][crlf]",
  398. "SNI": "feedback.infinitepay.io",
  399. "TlsIP": "",
  400. "ProxyIP": "104.16.18.94",
  401. "ProxyPort": "80",
  402. "Info": "Proxy"
  403. },
  404. {
  405. "Name": "TIM EXPIRADO [04]",
  406. "FLAG": "tim",
  407. "Payload": "ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]",
  408. "SNI": "",
  409. "TlsIP": "",
  410. "ProxyIP": "[app_host]",
  411. "ProxyPort": "80",
  412. "Info": "Direct"
  413. },
  414. {
  415. "Name": "TIM EXPIRADO [05]",
  416. "FLAG": "tim",
  417. "Payload": "HTTP/1.1[crlf] [crlf][crlf]•",
  418. "SNI": "",
  419. "TlsIP": "",
  420. "ProxyIP": "[app_host]",
  421. "ProxyPort": "80",
  422. "Info": "Direct"
  423. },
  424. {
  425. "Name": "TIM EXPIRADO [06]",
  426. "FLAG": "tim",
  427. "Payload": "[protocol] nn/",
  428. "SNI": "",
  429. "TlsIP": "",
  430. "ProxyIP": "[app_host]",
  431. "ProxyPort": "80",
  432. "Info": "Proxy"
  433. },
  434. {
  435. "Name": "TIM EXPIRADO [07]",
  436. "FLAG": "tim",
  437. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  438. "SNI": "",
  439. "TlsIP": "",
  440. "ProxyIP": "[app_host]",
  441. "ProxyPort": "80",
  442. "Info": "Direct"
  443. },
  444. {
  445. "Name": "TIM EXPIRADO [08]",
  446. "FLAG": "tim",
  447. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  448. "SNI": "",
  449. "TlsIP": "",
  450. "ProxyIP": "[app_host]",
  451. "ProxyPort": "80",
  452. "Info": "Proxy"
  453. },
  454. {
  455. "Name": "TIM EXPIRADO [09]",
  456. "FLAG": "tim",
  457. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  458. "SNI": "",
  459. "TlsIP": "",
  460. "ProxyIP": "[app_host]",
  461. "ProxyPort": "80",
  462. "Info": "Direct"
  463. },
  464. {
  465. "Name": "TIM EXPIRADO [10]",
  466. "FLAG": "tim",
  467. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  468. "SNI": "",
  469. "TlsIP": "",
  470. "ProxyIP": "[app_host]",
  471. "ProxyPort": "80",
  472. "Info": "Proxy"
  473. },
  474. {
  475. "Name": "TIM EXPIRADO [11]",
  476. "FLAG": "tim",
  477. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  478. "SNI": "",
  479. "TlsIP": "",
  480. "ProxyIP": "179.96.120.112",
  481. "ProxyPort": "80",
  482. "Info": "Proxy"
  483. },
  484. {
  485. "Name": "TIM EXPIRADO [12]",
  486. "FLAG": "tim",
  487. "Payload": "GET http://wap.tim.com.br HTTP/1.0[crlf]Host: [app_host] [crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  488. "SNI": "",
  489. "TlsIP": "",
  490. "ProxyIP": "179.96.120.112",
  491. "ProxyPort": "80",
  492. "Info": "Proxy"
  493. },
  494. {
  495. "Name": "TIM EXPIRADO [13]",
  496. "FLAG": "tim",
  497. "Payload": "HTTP/ 2nHOST : m.opera.comnn",
  498. "SNI": "",
  499. "TlsIP": "",
  500. "ProxyIP": "[app_host]",
  501. "ProxyPort": "80",
  502. "Info": "Direct"
  503. },
  504. {
  505. "Name": "TIM EXPIRADO [14]",
  506. "FLAG": "tim",
  507. "Payload": "HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]",
  508. "SNI": "",
  509. "TlsIP": "",
  510. "ProxyIP": "[app_host]",
  511. "ProxyPort": "80",
  512. "Info": "Direct"
  513. },
  514. {
  515. "Name": "TIM EXPIRADO [15]",
  516. "FLAG": "tim",
  517. "Payload": "HTTP/ [crlf][crlf]|[crlf]]]",
  518. "SNI": "",
  519. "TlsIP": "",
  520. "ProxyIP": "[app_host]",
  521. "ProxyPort": "80",
  522. "Info": "Direct"
  523. },
  524. {
  525. "Name": "TIM EXPIRADO [16]",
  526. "FLAG": "tim",
  527. "Payload": "MERGE mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]",
  528. "SNI": "",
  529. "TlsIP": "",
  530. "ProxyIP": "[app_host]",
  531. "ProxyPort": "80",
  532. "Info": "Proxy"
  533. },
  534. {
  535. "Name": "TIM EXPIRADO [17]",
  536. "FLAG": "tim",
  537. "Payload": "ACL http://1.1.1.1rotate=www.waze.com;buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;www.myspace.com.br;www.waze.com;1.0.0.5[crlf]",
  538. "SNI": "",
  539. "TlsIP": "",
  540. "ProxyIP": "[app_host]",
  541. "ProxyPort": "80",
  542. "Info": "Proxy"
  543. },
  544. {
  545. "Name": "TIM EXPIRADO [18]",
  546. "FLAG": "tim",
  547. "Payload": "PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]",
  548. "SNI": "",
  549. "TlsIP": "",
  550. "ProxyIP": "[app_host]",
  551. "ProxyPort": "80",
  552. "Info": "Proxy"
  553. },
  554. {
  555. "Name": "TIM EXPIRADO [19]",
  556. "FLAG": "tim",
  557. "Payload": "MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]",
  558. "SNI": "",
  559. "TlsIP": "",
  560. "ProxyIP": "[app_host]",
  561. "ProxyPort": "80",
  562. "Info": "Proxy"
  563. },
  564. {
  565. "Name": "TIM EXPIRADO [20]",
  566. "FLAG": "tim",
  567. "Payload": "HTTP/ [crlf][crlf]|[crlf",
  568. "SNI": "",
  569. "TlsIP": "",
  570. "ProxyIP": "[app_host]",
  571. "ProxyPort": "80",
  572. "Info": "Direct"
  573. },
  574. {
  575. "Name": "TIM EXPIRADO [21]",
  576. "FLAG": "tim",
  577. "Payload": "HTTP/ [crlf][crlf]Host: none[protocol][crlf]|[crlf]",
  578. "SNI": "",
  579. "TlsIP": "",
  580. "ProxyIP": "[app_host]",
  581. "ProxyPort": "80",
  582. "Info": "Direct"
  583. },
  584. {
  585. "Name": "VIVO [92 ROTAÇÕES]",
  586. "FLAG": "vivo",
  587. "Payload": "GET / HTTP/1.1nHost:[rotate=meuvivofixo.vivo.com.br;admin.audiobooks.com;aceitedigital.vivo.com.br;eas19.gestaocontactcenter.vivo.com.br;vivo-br.d23.host;carrinho-pos-familia.vivo.com.br;eas12.gestaocontactcenter.vivo.com.br;content.smatch.com;server1.www1.v1.laopromo.com;vivo.infinityc.xyz;vigia.vivo.com.br;serprovivocombr;legadovivocombr;continueconectadovivocombr;apidigitalvivocombr;vigiavivocombr;cdncloudflarenet;eas4gestaocontactcentervivocombr;wwwozgifts-61com;autenticaintvivocombr;vivoinfinitycsite;rdcdeanpolaxyz;uvpelectionsgovtnzvivo360vivocombr;oauthtvvivocombr;helpcentergovirtuocom;assinevivocombr;cadastrovivocombr;sigitmvivocombr;web-aceitedigitalvivocombr;vivomdk3gxyz;vivothecrazybr1xyz;mapadecoberturavivocombr;simplyaudiobookscom;ultravivoxyz;vivo1gomesnetbrxyz;refreshplaysite;apivivocombr;vivoidvivocombr;portaldeassinaturasvivocombr;soultidejp;ozgifts-61com;atendimentoonlinevivocombr;servicosvivocombr;caaudiobookscom;blogaudiobookscom;5gem7xropdnsnet;sytesvirtualssh4gxyz;comprevivocombr;sigitm3vivocombr;cdncloudflarenet;ged360vivocombr;snowvivocombr;vkf3pt;vivosshbrasilnet;ukaudiobookscom;vivo360vivocombr;cdncloudflarenet;lgpdfrontvivocombr;v1ntinjectorProxyz;equipamentos01vivocombr;sigitm3vivocombr;extranetvivocombr;premium-vivo360vivocombr;Proxyhmtutorsga;direitoadevolucaovivocombr;Proxyvivoapostagnetonline;vivoidvivocombr;siscomvivocombr;lojaempresasvivocombr;meuvivofixoappvivocombr;protecaovivocombr;vivodocdigitalvivocombr;digitaldeliveryvivocombr;celularvivocombr;devsmatchcom;vivoemdiavivocombr;portaljud2vivocombr;wwwappstorevivocombr;vivomusicavivocombr;apistorevivocombr;lojaonlinevivocombr;ipProxy6agraficaonline;audiobookscom;webvivoxyz;webvivocombr;jnjaustriaat;personalizevivocombr;portalsmartgerenciavivocombr;electionsgovtnzgedocvivocombr;portalrecargavivocombr;planosvivocombr;wwwvivoemdiavivocombr;ipvivodominando-worldhoststorevivocombr;wwwaudiobookscom;portaljudvivocombr;vpowebvivocombr;aceitedigitalvivocombr;movimentavivocombr;wwwvivomusicavivocombr;cmssmatchcom;vivoplustze4ciropdnsnet;vvssh4gxyz]nExpect: 100-continuenn[instant_split]nnACL /?/ HTTP/1.1nHost: [app_host]nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  588. "SNI": "",
  589. "TlsIP": "",
  590. "ProxyIP": "104.16.53.111",
  591. "ProxyPort": "80",
  592. "Info": "Proxy"
  593. },
  594. {
  595. "Name": "VIVO PRÉ [05]",
  596. "FLAG": "vivo",
  597. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  598. "SNI": "",
  599. "TlsIP": "",
  600. "ProxyIP": "ffsupportbd.garena.com",
  601. "ProxyPort": "80",
  602. "Info": "Proxy"
  603. },
  604. {
  605. "Name": "VIVO PRÉ [06]",
  606. "FLAG": "vivo",
  607. "Payload": "GET / HTTP/1.1[lf]Host: serv4.diogoodev17.gq[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  608. "SNI": "",
  609. "TlsIP": "",
  610. "ProxyIP": "duvidas.ampli.com.br",
  611. "ProxyPort": "80",
  612. "Info": "Proxy"
  613. },
  614. {
  615. "Name": "VIVO PRÉ [07]",
  616. "FLAG": "vivo",
  617. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  618. "SNI": "",
  619. "TlsIP": "",
  620. "ProxyIP": "support.moovitapp.com",
  621. "ProxyPort": "80",
  622. "Info": "Proxy"
  623. },
  624. {
  625. "Name": "VIVO PRÉ [08]",
  626. "FLAG": "vivo",
  627. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  628. "SNI": "",
  629. "TlsIP": "",
  630. "ProxyIP": "support.hotmart.com",
  631. "ProxyPort": "80",
  632. "Info": "Proxy"
  633. },
  634. {
  635. "Name": "VIVO PRÉ [09]",
  636. "FLAG": "vivo",
  637. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  638. "SNI": "",
  639. "TlsIP": "",
  640. "ProxyIP": "localonlinepresence.com",
  641. "ProxyPort": "80",
  642. "Info": "Proxy"
  643. },
  644. {
  645. "Name": "VIVO PRÉ [10]",
  646. "FLAG": "vivo",
  647. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  648. "SNI": "",
  649. "TlsIP": "",
  650. "ProxyIP": "104.16.51.111",
  651. "ProxyPort": "80",
  652. "Info": "Proxy"
  653. },
  654. {
  655. "Name": "VIVO PRÉ [11]",
  656. "FLAG": "vivo",
  657. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  658. "SNI": "",
  659. "TlsIP": "1",
  660. "ProxyIP": "amon14--support.zendesk.com",
  661. "ProxyPort": "80",
  662. "Info": "Proxy"
  663. },
  664. {
  665. "Name": "VIVO PRÉ [12]",
  666. "FLAG": "vivo",
  667. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  668. "SNI": "",
  669. "TlsIP": "",
  670. "ProxyIP": "ayuda.tigo.com.gt",
  671. "ProxyPort": "80",
  672. "Info": "Proxy"
  673. },
  674. {
  675. "Name": "VIVO PRÉ [13]",
  676. "FLAG": "vivo",
  677. "Payload": "GET / HTTP/1.1nHost: [app_host]nUpgrade: wsnn",
  678. "SNI": "[app_host]",
  679. "TlsIP": "",
  680. "ProxyIP": "104.16.53.111",
  681. "ProxyPort": "80",
  682. "Info": "Proxy"
  683. },
  684. {
  685. "Name": "VIVO PRÉ [14]",
  686. "FLAG": "vivo",
  687. "Payload": "GET / HTTP/1.1nHost: [app_host]nUpgrade: wsnn",
  688. "SNI": "mobilidade.cloud.caixa.gov.br",
  689. "TlsIP": "",
  690. "ProxyIP": "104.16.51.111",
  691. "ProxyPort": "80",
  692. "Info": "Proxy"
  693. }
  694. ]
  695. }
comments powered by Disqus