ATT

SUBMITTED BY: DonkTV

DATE: Feb. 17, 2023, 5:42 p.m.

UPDATED: March 12, 2023, 3:25 a.m.

FORMAT: Text only

SIZE: 32.6 kB

History Raw Download

HITS: 13798

Report
  1. {
  2. "Version": "15",
  3. "ReleaseNotes": "",
  4. "Sms": "http://atlaspainel.x10.bz/update/admin/sms",
  5. "UrlUpdate": "https://bitbin.it/SW2K9I2O/raw",
  6. "EmailFeedback": "mknet20@gmail.com",
  7. "UrlContato": "",
  8. "UrlTermos": "http://atlaspainel.x10.bz/update/admin/termos",
  9. "CheckUser": "true",
  10. "Udp": [
  11. {
  12. "Porta": "7100"
  13. },
  14. {
  15. "Porta": "7200"
  16. },
  17. {
  18. "Porta": "7300"
  19. },
  20. {
  21. "Porta": "7400"
  22. },
  23. {
  24. "Porta": "7500"
  25. },
  26. {
  27. "Porta": "7600"
  28. }
  29. ],
  30. "Servers": [
  31. {
  32. "Name": "Tecnonet ",
  33. "TYPE": "premium",
  34. "FLAG": "br.png",
  35. "ServerIP": "snowssh.site",
  36. "CheckUser": "http://209.14.70.179:5000/checkUser",
  37. "ServerPort": "22",
  38. "SSLPort": "443",
  39. "USER": "",
  40. "PASS": ""
  41. }
  42. ],
  43. "Networks": [
  44. {
  45. "Name": "VIVO PRÉ 1🇧🇷",
  46. "FLAG": "vivo",
  47. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: infotecno.shop[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  48. "SNI": "",
  49. "TlsIP": "",
  50. "ProxyIP": "104.16.51.111",
  51. "ProxyPort": "80",
  52. "Info": "Proxy"
  53. },
  54. {
  55. "Name": "VIVO PRÉ 2 🇧🇷",
  56. "FLAG": "vivo",
  57. "Payload": "GET-CONTROL ws://infotecno.shop HTTP/1.1[crlf]Host: itsupport.surveymonkey.com[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  58. "SNI": "",
  59. "TlsIP": "",
  60. "ProxyIP": "104.16.51.111",
  61. "ProxyPort": "80",
  62. "Info": "Proxy"
  63. },
  64. {
  65. "Name": "VIVO PRÉ 3 🇧🇷",
  66. "FLAG": "vivo",
  67. "Payload": "GET / HTTP/1.1[crlf]Host: [host_port][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  68. "SNI": "",
  69. "TlsIP": "",
  70. "ProxyIP": "104.16.51.111",
  71. "ProxyPort": "80",
  72. "Info": "Proxy"
  73. },
  74. {
  75. "Name": "VIVO FRONT| 01",
  76. "FLAG": "vivo",
  77. "Payload": "GET / HTTP/1.1[crlf]Host: d3bo989bo2wb31.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  78. "SNI": "",
  79. "TlsIP": "",
  80. "ProxyIP": "108.139.166.122",
  81. "ProxyPort": "80",
  82. "Info": "Proxy"
  83. },
  84. {
  85. "Name": "VIVO FRONT| 02",
  86. "FLAG": "vivo.png",
  87. "Payload": "GET / HTTP/1.1[crlf]Host: d3bo989bo2wb31.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  88. "SNI": "",
  89. "TlsIP": "",
  90. "ProxyIP": "108.139.119.128",
  91. "ProxyPort": "80",
  92. "Info": "Proxy"
  93. },
  94. {
  95. "Name": "VIVO FRONT| 01",
  96. "FLAG": "vivo",
  97. "Payload": "GET / HTTP/1.1[crlf]Host: d3bo989bo2wb31.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  98. "SNI": "",
  99. "TlsIP": "",
  100. "ProxyIP": "108.139.166.122",
  101. "ProxyPort": "80",
  102. "Info": "Proxy"
  103. },
  104. {
  105. "Name": "VIVO FRONT| 02",
  106. "FLAG": "vivo.png",
  107. "Payload": "GET / HTTP/1.1[crlf]Host: d3bo989bo2wb31.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  108. "SNI": "",
  109. "TlsIP": "",
  110. "ProxyIP": "108.139.119.128",
  111. "ProxyPort": "80",
  112. "Info": "Proxy"
  113. },
  115. {
  116. "Name": "VIVO FRONT| 03",
  117. "FLAG": "vivo",
  118. "Payload": "GET / HTTP/1.1[crlf]Host: d3bo989bo2wb31.cloudfront.net[crlf]connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  119. "SNI": "d3bo989bo2wb31.cloudfront.net",
  120. "TlsIP": "",
  121. "ProxyIP": "13.227.126.65",
  122. "ProxyPort": "80",
  123. "Info": "Proxy"
  124. },
  126. {
  127. "Name": "VIVO FRONT| 04",
  128. "FLAG": "vivo",
  129. "Payload": "GET / HTTP/1.1[crlf]Host: d3bo989bo2wb31.cloudfront.net[crlf]connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  130. "SNI": "d3bo989bo2wb31.cloudfront.net",
  131. "TlsIP": "",
  132. "ProxyIP": "18.161.200.92",
  133. "ProxyPort": "80",
  134. "Info": "Proxy"
  135. },
  136. {
  137. "Name": "VIVO ",
  138. "FLAG": "vivo",
  139. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  140. "SNI": "",
  141. "TlsIP": "",
  142. "ProxyIP": "104.16.51.111",
  143. "ProxyPort": "80",
  144. "Info": "Tlsws"
  145. },
  146. {
  147. "Name": "VIVO 02",
  148. "FLAG": "vivo",
  149. "Payload": "BASE-LINE wss://[rotate=gracegardencounseling.com;bam.nr-data.net;[app_host];vivoid.vivo.com.br;melhorplano.net;vivo360.vivo.com.br;vivorio.com.br;selectra.net.br;gprs.digitel.com.ve;power4fit.com;bolsas.alfaumuarama.edu.br;eventos.alfaumuarama.edu.br;concursos.alfaumuarama.edu.br;legado.vivo.com.br;carrinho-pos-familia.vivo.com.br;unpkg.com;cdnjs.cloudflare.com;portaljud.vivo.com.br;vivoemdia.vivo.com.br;fly218.com;rapehun.com] HTTP/1.1[lf]Host: [app_host][lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  150. "SNI": "",
  151. "TlsIP": "",
  152. "ProxyIP": "104.16.51.111",
  153. "ProxyPort": "80",
  154. "Info": "Proxy"
  155. },
  156. {
  157. "Name": "VIVO 2.5",
  158. "FLAG": "vivo",
  159. "Payload": "GET / HTTP/1.1[crlf]Host: d3c3963gq318mx.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  160. "SNI": "",
  161. "TlsIP": "",
  162. "ProxyIP": "recarga.vivo.com.br",
  163. "ProxyPort": "80",
  164. "Info": "Proxy"
  165. },
  166. {
  167. "Name": "VIVO 03",
  168. "FLAG": "vivo.png",
  169. "Payload": "GET / HTTP/1.1[crlf]Host: d3c3963gq318mx.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  170. "SNI": "",
  171. "TlsIP": "",
  172. "ProxyIP": "planosvivointernet.com.br",
  173. "ProxyPort": "80",
  174. "Info": "Proxy"
  175. },
  176. {
  177. "Name": "VIVO 04",
  178. "FLAG": "vivo.png",
  179. "Payload": "GET / HTTP/1.1[crlf]Host: d3c3963gq318mx.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  180. "SNI": "",
  181. "TlsIP": "",
  182. "ProxyIP": "108.139.166.122",
  183. "ProxyPort": "80",
  184. "Info": "Proxy"
  185. },
  186. {
  187. "Name": "VIVO 05",
  188. "FLAG": "vivo",
  189. "Payload": "BASELINE-CONTROL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  190. "SNI": "[app_host]",
  191. "TlsIP": "104.18.7.41",
  192. "ProxyIP": "",
  193. "ProxyPort": "",
  194. "Info": "Tlsws"
  195. },
  196. {
  197. "Name": "VIVO 06",
  198. "FLAG": "vivo",
  199. "Payload": "GET / HTTP/1.1[crlf]Host: lmsk.store[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  200. "SNI": "lmsk.store",
  201. "TlsIP": "atendimento.descomplica.com.br",
  202. "ProxyIP": "",
  203. "ProxyPort": "443",
  204. "Info": "Tlsws"
  205. },
  206. {
  207. "Name": "TIM SALDO VALIDO",
  208. "FLAG": "tim",
  209. "Payload": "GET / HTTP/1.1[crlf]Host:landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  210. "SNI": "",
  211. "TlsIP": "",
  212. "ProxyIP": "104.16.53.111",
  213. "ProxyPort": "80",
  214. "Info": "Proxy"
  215. },
  216. {
  217. "Name": "TIM A FRONTEIRA JA ACABOU",
  218. "FLAG": "tim",
  219. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: lmsk.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  220. "SNI": "",
  221. "TlsIP": "",
  222. "ProxyIP": "helpypro.stoodi.com.br",
  223. "ProxyPort": "80",
  224. "Info": "Proxy"
  225. },
  226. {
  227. "Name": "TIM 2023🔵🔥[01]",
  228. "FLAG": "tim",
  229. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: lmsk.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  230. "SNI": "",
  231. "TlsIP": "104.19.239.25",
  232. "ProxyIP": "104.19.239.25",
  233. "ProxyPort": "80",
  234. "Info": "Proxy"
  235. },
  236. {
  237. "Name": "TIM 2023🔵🔥[02]",
  238. "FLAG": "tim",
  239. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: lmsk.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  240. "SNI": "",
  241. "TlsIP": "104.19.239.25",
  242. "ProxyIP": "104.19.239.25",
  243. "ProxyPort": "80",
  244. "Info": "Proxy"
  245. },
  246. {
  247. "Name": "TIM 2023🔵🔥[03]",
  248. "FLAG": "tim",
  249. "Payload": "GET / HTTP/1.1[crlf]Host: cloud.mail.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: lmsk.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.lmsk.store)[crlf][crlf]",
  250. "SNI": "",
  251. "TlsIP": "104.19.239.25",
  252. "ProxyIP": "104.19.239.25",
  253. "ProxyPort": "80",
  254. "Info": "Proxy"
  255. },
  256. {
  257. "Name": "TIM NAVE",
  258. "FLAG": "tim",
  259. "Payload": "GET / HTTP/1.1[crlf]Host: c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET- / HTTP/1.1[crlf]Host: infotecno.shop[crlf]Upgrade: Websocket[crlf][crlf]",
  260. "SNI": "",
  261. "TlsIP": "",
  262. "ProxyIP": "104.16.51.111",
  263. "ProxyPort": "80",
  264. "Info": "Direct"
  265. },
  266. {
  267. "Name": "TIM FRONT + TESTE",
  268. "FLAG": "tim",
  269. "Payload": "GET / HTTP/1.1[crlf]Host: [random=p0h56647b4516n7n86.speedup.mobi;p0h56647b4516n7n86.speedup.mobi;p0h56647b4516n7n86.speedup.mobi][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  270. "SNI": "",
  271. "TlsIP": "",
  272. "ProxyIP": "108.158.124.45",
  273. "ProxyPort": "80",
  274. "Info": "Proxy"
  275. },
  276. {
  277. "Name": "TIM VÁLIDO [02]",
  278. "FLAG": "tim",
  279. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  280. "SNI": "",
  281. "TlsIP": "",
  282. "ProxyIP": "104.16.53.111",
  283. "ProxyPort": "80",
  284. "Info": "Proxy"
  285. },
  286. {
  287. "Name": "TIM VÁLIDO [03]",
  288. "FLAG": "tim",
  289. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  290. "SNI": "",
  291. "TlsIP": "",
  292. "ProxyIP": "104.16.53.111",
  293. "ProxyPort": "80",
  294. "Info": "Proxy"
  295. },
  296. {
  297. "Name": "TIM VÁLIDO [04]",
  298. "FLAG": "tim",
  299. "Payload": "GET / HTTP/1.1[lf]Host: api.sandbox.c6bank.com.br[lf]Expect: 100-continue[lf][lf][split][lf][lf]ACL /?/ HTTP/1.1[lf]Host: [app_host] [lf]Expect: 100-continue[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  300. "SNI": "",
  301. "TlsIP": "",
  302. "ProxyIP": "104.19.239.25",
  303. "ProxyPort": "80",
  304. "Info": "Proxy"
  305. },
  306. {
  307. "Name": "TIM VÁLIDO [05]",
  308. "FLAG": "tim",
  309. "Payload": "GET / HTTP/1.1[crlf]Host: c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET- / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  310. "SNI": "",
  311. "TlsIP": "",
  312. "ProxyIP": "104.16.51.111",
  313. "ProxyPort": "80",
  314. "Info": "Proxy"
  315. },
  316. {
  317. "Name": "TIM VÁLIDO [06]",
  318. "FLAG": "tim",
  319. "Payload": "GET / HTTP/1.1nHost: api.sandbox.c6bank.com.brnExpect: 100-continuenn[split]nnACL /?/ HTTP/1.1nHost: [app_host]nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  320. "SNI": "",
  321. "TlsIP": "",
  322. "ProxyIP": "104.19.239.25",
  323. "ProxyPort": "80",
  324. "Info": "Proxy"
  325. },
  326. {
  327. "Name": "TIM VÁLIDO [07]",
  328. "FLAG": "tim",
  329. "Payload": "GDMNET- wss://mobilidade.cloud.caixa.gov.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  330. "SNI": "mobilidade.cloud.caixa.gov.br",
  331. "TlsIP": "162.159.133.62",
  332. "ProxyIP": "",
  333. "ProxyPort": "",
  334. "Info": "Tlsws"
  335. },
  336. {
  337. "Name": "TIM VÁLIDO [08]",
  338. "FLAG": "tim",
  339. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  340. "SNI": "feedback.infinitepay.io",
  341. "TlsIP": "",
  342. "ProxyIP": "104.16.18.94",
  343. "ProxyPort": "80",
  344. "Info": "Proxy"
  345. },
  346. {
  347. "Name": "TIM VÁLIDO [09]",
  348. "FLAG": "tim",
  349. "Payload": "GET / HTTP/1.1nHost: api.sandbox.c6bank.com.brnExpect: 100-continuenn[split]nnACL /?/ HTTP/1.1nHost: [app_host] nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  350. "SNI": "",
  351. "TlsIP": "",
  352. "ProxyIP": "104.18.28.182",
  353. "ProxyPort": "80",
  354. "Info": "Proxy"
  355. },
  356. {
  357. "Name": "TIM VÁLIDO [10]",
  358. "FLAG": "tim",
  359. "Payload": "GET / HTTP/1.1nHost: api.sandbox.c6bank.com.brnExpect: 100-continuenn[split]nnACL- /?/ HTTP/1.1nHost: [app_host] nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  360. "SNI": "",
  361. "TlsIP": "",
  362. "ProxyIP": "104.18.28.182",
  363. "ProxyPort": "80",
  364. "Info": "Proxy"
  365. },
  366. {
  367. "Name": "TIM VÁLIDO [11]",
  368. "FLAG": "tim",
  369. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  370. "SNI": "",
  371. "TlsIP": "[app_host]",
  372. "ProxyIP": "104.16.51.111",
  373. "ProxyPort": "80",
  374. "Info": "Proxy"
  375. },
  376. {
  377. "Name": "TIM VÁLIDO [12]",
  378. "FLAG": "tim",
  379. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  380. "SNI": "[app_host]",
  381. "TlsIP": "[app_host]",
  382. "ProxyIP": "104.16.51.111",
  383. "ProxyPort": "80",
  384. "Info": "Proxy"
  385. },
  386. {
  387. "Name": "TIM VÁLIDO [13]",
  388. "FLAG": "tim",
  389. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  390. "SNI": "[app_host]",
  391. "TlsIP": "",
  392. "ProxyIP": "104.16.51.111",
  393. "ProxyPort": "80",
  394. "Info": "Proxy"
  395. },
  396. {
  397. "Name": "TIM VÁLIDO/EXPIRADO [1+]",
  398. "FLAG": "tim",
  399. "Payload": "GDMNET- wss://songbird.cardinalcommerce.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  400. "SNI": "songbird.cardinalcommerce.com",
  401. "TlsIP": "198.217.251.250",
  402. "ProxyIP": "",
  403. "ProxyPort": "443",
  404. "Info": "Tlsws"
  405. },
  406. {
  407. "Name": "TIM VÁLIDO/EXPIRADO [2+]",
  408. "FLAG": "tim",
  409. "Payload": "GET / HTTP/1.1[crlf]Host: pre-onboarding-h.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: m.madamenet.online[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  410. "SNI": "pre-onboarding-h.c6bank.app",
  411. "TlsIP": "pre-onboarding-h.c6bank.app",
  412. "ProxyIP": "",
  413. "ProxyPort": "80",
  414. "Info": "Direct"
  415. },
  416. {
  417. "Name": "TIM EXPIRADO [01]",
  418. "FLAG": "tim",
  419. "Payload": "HEAD wss://[app_host] HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]",
  420. "SNI": "[app_host]",
  421. "TlsIP": "",
  422. "ProxyIP": "104.16.53.111",
  423. "ProxyPort": "80",
  424. "Info": "Proxy"
  425. },
  426. {
  427. "Name": "TIM EXPIRADO [02]",
  428. "FLAG": "tim",
  429. "Payload": "[protocol][crlf] [crlf][crlf]@",
  430. "SNI": "",
  431. "TlsIP": "",
  432. "ProxyIP": "[app_host]",
  433. "ProxyPort": "80",
  434. "Info": "Direct"
  435. },
  436. {
  437. "Name": "TIM EXPIRADO [03]",
  438. "FLAG": "tim",
  439. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: websocket[crlf][crlf]",
  440. "SNI": "feedback.infinitepay.io",
  441. "TlsIP": "",
  442. "ProxyIP": "104.16.18.94",
  443. "ProxyPort": "80",
  444. "Info": "Proxy"
  445. },
  446. {
  447. "Name": "TIM EXPIRADO [04]",
  448. "FLAG": "tim",
  449. "Payload": "ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]",
  450. "SNI": "",
  451. "TlsIP": "",
  452. "ProxyIP": "[app_host]",
  453. "ProxyPort": "80",
  454. "Info": "Direct"
  455. },
  456. {
  457. "Name": "TIM EXPIRADO [05]",
  458. "FLAG": "tim",
  459. "Payload": "HTTP/1.1[crlf] [crlf][crlf]•",
  460. "SNI": "",
  461. "TlsIP": "",
  462. "ProxyIP": "[app_host]",
  463. "ProxyPort": "80",
  464. "Info": "Direct"
  465. },
  466. {
  467. "Name": "TIM EXPIRADO [06]",
  468. "FLAG": "tim",
  469. "Payload": "[protocol] nn/",
  470. "SNI": "",
  471. "TlsIP": "",
  472. "ProxyIP": "[app_host]",
  473. "ProxyPort": "80",
  474. "Info": "Proxy"
  475. },
  476. {
  477. "Name": "TIM EXPIRADO [07]",
  478. "FLAG": "tim",
  479. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  480. "SNI": "",
  481. "TlsIP": "",
  482. "ProxyIP": "[app_host]",
  483. "ProxyPort": "80",
  484. "Info": "Direct"
  485. },
  486. {
  487. "Name": "TIM EXPIRADO [08]",
  488. "FLAG": "tim",
  489. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  490. "SNI": "",
  491. "TlsIP": "",
  492. "ProxyIP": "[app_host]",
  493. "ProxyPort": "80",
  494. "Info": "Proxy"
  495. },
  496. {
  497. "Name": "TIM EXPIRADO [09]",
  498. "FLAG": "tim",
  499. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  500. "SNI": "",
  501. "TlsIP": "",
  502. "ProxyIP": "[app_host]",
  503. "ProxyPort": "80",
  504. "Info": "Direct"
  505. },
  506. {
  507. "Name": "TIM EXPIRADO [10]",
  508. "FLAG": "tim",
  509. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  510. "SNI": "",
  511. "TlsIP": "",
  512. "ProxyIP": "[app_host]",
  513. "ProxyPort": "80",
  514. "Info": "Proxy"
  515. },
  516. {
  517. "Name": "TIM EXPIRADO [11]",
  518. "FLAG": "tim",
  519. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  520. "SNI": "",
  521. "TlsIP": "",
  522. "ProxyIP": "179.96.120.112",
  523. "ProxyPort": "80",
  524. "Info": "Proxy"
  525. },
  526. {
  527. "Name": "TIM EXPIRADO [12]",
  528. "FLAG": "tim",
  529. "Payload": "GET http://wap.tim.com.br HTTP/1.0[crlf]Host: [app_host] [crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  530. "SNI": "",
  531. "TlsIP": "",
  532. "ProxyIP": "179.96.120.112",
  533. "ProxyPort": "80",
  534. "Info": "Proxy"
  535. },
  536. {
  537. "Name": "TIM EXPIRADO [13]",
  538. "FLAG": "tim",
  539. "Payload": "HTTP/ 2nHOST : m.opera.comnn",
  540. "SNI": "",
  541. "TlsIP": "",
  542. "ProxyIP": "[app_host]",
  543. "ProxyPort": "80",
  544. "Info": "Direct"
  545. },
  546. {
  547. "Name": "TIM EXPIRADO [14]",
  548. "FLAG": "tim",
  549. "Payload": "HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]",
  550. "SNI": "",
  551. "TlsIP": "",
  552. "ProxyIP": "[app_host]",
  553. "ProxyPort": "80",
  554. "Info": "Direct"
  555. },
  556. {
  557. "Name": "TIM EXPIRADO [15]",
  558. "FLAG": "tim",
  559. "Payload": "HTTP/ [crlf][crlf]|[crlf]]]",
  560. "SNI": "",
  561. "TlsIP": "",
  562. "ProxyIP": "[app_host]",
  563. "ProxyPort": "80",
  564. "Info": "Direct"
  565. },
  566. {
  567. "Name": "TIM EXPIRADO [16]",
  568. "FLAG": "tim",
  569. "Payload": "MERGE mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]",
  570. "SNI": "",
  571. "TlsIP": "",
  572. "ProxyIP": "[app_host]",
  573. "ProxyPort": "80",
  574. "Info": "Proxy"
  575. },
  576. {
  577. "Name": "TIM EXPIRADO [17]",
  578. "FLAG": "tim",
  579. "Payload": "ACL http://1.1.1.1rotate=www.waze.com;buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;www.myspace.com.br;www.waze.com;1.0.0.5[crlf]",
  580. "SNI": "",
  581. "TlsIP": "",
  582. "ProxyIP": "[app_host]",
  583. "ProxyPort": "80",
  584. "Info": "Proxy"
  585. },
  586. {
  587. "Name": "TIM EXPIRADO [18]",
  588. "FLAG": "tim",
  589. "Payload": "PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]",
  590. "SNI": "",
  591. "TlsIP": "",
  592. "ProxyIP": "[app_host]",
  593. "ProxyPort": "80",
  594. "Info": "Proxy"
  595. },
  596. {
  597. "Name": "TIM EXPIRADO [19]",
  598. "FLAG": "tim",
  599. "Payload": "MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: indexer10.sjc.northshore.akamai.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]",
  600. "SNI": "",
  601. "TlsIP": "",
  602. "ProxyIP": "[app_host]",
  603. "ProxyPort": "80",
  604. "Info": "Proxy"
  605. },
  606. {
  607. "Name": "TIM EXPIRADO [20]",
  608. "FLAG": "tim",
  609. "Payload": "HTTP/ [crlf][crlf]|[crlf",
  610. "SNI": "",
  611. "TlsIP": "",
  612. "ProxyIP": "[app_host]",
  613. "ProxyPort": "80",
  614. "Info": "Direct"
  615. },
  616. {
  617. "Name": "TIM EXPIRADO [21]",
  618. "FLAG": "tim",
  619. "Payload": "HTTP/ [crlf][crlf]Host: none[protocol][crlf]|[crlf]",
  620. "SNI": "",
  621. "TlsIP": "",
  622. "ProxyIP": "[app_host]",
  623. "ProxyPort": "80",
  624. "Info": "Direct"
  625. },
  626. {
  627. "Name": "VIVO [92 ROTAÇÕES]",
  628. "FLAG": "vivo",
  629. "Payload": "GET / HTTP/1.1nHost:[rotate=meuvivofixo.vivo.com.br;admin.audiobooks.com;aceitedigital.vivo.com.br;eas19.gestaocontactcenter.vivo.com.br;vivo-br.d23.host;carrinho-pos-familia.vivo.com.br;eas12.gestaocontactcenter.vivo.com.br;content.smatch.com;server1.www1.v1.laopromo.com;vivo.infinityc.xyz;vigia.vivo.com.br;serprovivocombr;legadovivocombr;continueconectadovivocombr;apidigitalvivocombr;vigiavivocombr;cdncloudflarenet;eas4gestaocontactcentervivocombr;wwwozgifts-61com;autenticaintvivocombr;vivoinfinitycsite;rdcdeanpolaxyz;uvpelectionsgovtnzvivo360vivocombr;oauthtvvivocombr;helpcentergovirtuocom;assinevivocombr;cadastrovivocombr;sigitmvivocombr;web-aceitedigitalvivocombr;vivomdk3gxyz;vivothecrazybr1xyz;mapadecoberturavivocombr;simplyaudiobookscom;ultravivoxyz;vivo1gomesnetbrxyz;refreshplaysite;apivivocombr;vivoidvivocombr;portaldeassinaturasvivocombr;soultidejp;ozgifts-61com;atendimentoonlinevivocombr;servicosvivocombr;caaudiobookscom;blogaudiobookscom;5gem7xropdnsnet;sytesvirtualssh4gxyz;comprevivocombr;sigitm3vivocombr;cdncloudflarenet;ged360vivocombr;snowvivocombr;vkf3pt;vivosshbrasilnet;ukaudiobookscom;vivo360vivocombr;cdncloudflarenet;lgpdfrontvivocombr;v1ntinjectorProxyz;equipamentos01vivocombr;sigitm3vivocombr;extranetvivocombr;premium-vivo360vivocombr;Proxyhmtutorsga;direitoadevolucaovivocombr;Proxyvivoapostagnetonline;vivoidvivocombr;siscomvivocombr;lojaempresasvivocombr;meuvivofixoappvivocombr;protecaovivocombr;vivodocdigitalvivocombr;digitaldeliveryvivocombr;celularvivocombr;devsmatchcom;vivoemdiavivocombr;portaljud2vivocombr;wwwappstorevivocombr;vivomusicavivocombr;apistorevivocombr;lojaonlinevivocombr;ipProxy6agraficaonline;audiobookscom;webvivoxyz;webvivocombr;jnjaustriaat;personalizevivocombr;portalsmartgerenciavivocombr;electionsgovtnzgedocvivocombr;portalrecargavivocombr;planosvivocombr;wwwvivoemdiavivocombr;ipvivodominando-worldhoststorevivocombr;wwwaudiobookscom;portaljudvivocombr;vpowebvivocombr;aceitedigitalvivocombr;movimentavivocombr;wwwvivomusicavivocombr;cmssmatchcom;vivoplustze4ciropdnsnet;vvssh4gxyz]nExpect: 100-continuenn[instant_split]nnACL /?/ HTTP/1.1nHost: [app_host]nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  630. "SNI": "",
  631. "TlsIP": "",
  632. "ProxyIP": "104.16.53.111",
  633. "ProxyPort": "80",
  634. "Info": "Proxy"
  635. },
  636. {
  637. "Name": "VIVO PRÉ [05]",
  638. "FLAG": "vivo",
  639. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  640. "SNI": "",
  641. "TlsIP": "",
  642. "ProxyIP": "ffsupportbd.garena.com",
  643. "ProxyPort": "80",
  644. "Info": "Proxy"
  645. },
  646. {
  647. "Name": "VIVO PRÉ [06]",
  648. "FLAG": "vivo",
  649. "Payload": "GET / HTTP/1.1[lf]Host: serv4.diogoodev17.gq[lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  650. "SNI": "",
  651. "TlsIP": "",
  652. "ProxyIP": "duvidas.ampli.com.br",
  653. "ProxyPort": "80",
  654. "Info": "Proxy"
  655. },
  656. {
  657. "Name": "VIVO PRÉ [07]",
  658. "FLAG": "vivo",
  659. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  660. "SNI": "",
  661. "TlsIP": "",
  662. "ProxyIP": "support.moovitapp.com",
  663. "ProxyPort": "80",
  664. "Info": "Proxy"
  665. },
  666. {
  667. "Name": "VIVO PRÉ [08]",
  668. "FLAG": "vivo",
  669. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  670. "SNI": "",
  671. "TlsIP": "",
  672. "ProxyIP": "support.hotmart.com",
  673. "ProxyPort": "80",
  674. "Info": "Proxy"
  675. },
  676. {
  677. "Name": "VIVO PRÉ [09]",
  678. "FLAG": "vivo",
  679. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  680. "SNI": "",
  681. "TlsIP": "",
  682. "ProxyIP": "localonlinepresence.com",
  683. "ProxyPort": "80",
  684. "Info": "Proxy"
  685. },
  686. {
  687. "Name": "VIVO PRÉ [10]",
  688. "FLAG": "vivo",
  689. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  690. "SNI": "",
  691. "TlsIP": "",
  692. "ProxyIP": "104.16.51.111",
  693. "ProxyPort": "80",
  694. "Info": "Proxy"
  695. },
  696. {
  697. "Name": "VIVO PRÉ [11]",
  698. "FLAG": "vivo",
  699. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  700. "SNI": "",
  701. "TlsIP": "1",
  702. "ProxyIP": "amon14--support.zendesk.com",
  703. "ProxyPort": "80",
  704. "Info": "Proxy"
  705. },
  706. {
  707. "Name": "VIVO PRÉ [12]",
  708. "FLAG": "vivo",
  709. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  710. "SNI": "",
  711. "TlsIP": "",
  712. "ProxyIP": "ayuda.tigo.com.gt",
  713. "ProxyPort": "80",
  714. "Info": "Proxy"
  715. },
  716. {
  717. "Name": "VIVO PRÉ [13]",
  718. "FLAG": "vivo",
  719. "Payload": "GET / HTTP/1.1nHost: [app_host]nUpgrade: wsnn",
  720. "SNI": "[app_host]",
  721. "TlsIP": "",
  722. "ProxyIP": "104.16.53.111",
  723. "ProxyPort": "80",
  724. "Info": "Proxy"
  725. },
  726. {
  727. "Name": "VIVO PRÉ [14]",
  728. "FLAG": "vivo",
  729. "Payload": "GET / HTTP/1.1nHost: [app_host]nUpgrade: wsnn",
  730. "SNI": "mobilidade.cloud.caixa.gov.br",
  731. "TlsIP": "",
  732. "ProxyIP": "104.16.51.111",
  733. "ProxyPort": "80",
  734. "Info": "Proxy"
  735. }
  736. ]
  737. }
comments powered by Disqus