Meu arquivo novo

SUBMITTED BY: bomberdog157

DATE: Aug. 16, 2022, 2:33 a.m.

UPDATED: Aug. 5, 2023, 5:05 a.m.

FORMAT: Text only

SIZE: 43.6 kB

History Raw Download

HITS: 7187

Report
  1. {
  2. "Version": "411",
  3. "ReleaseNotes": "Atualização disponível.",
  4. "UrlUpdate": "https://bitbin.it/PKCgG2tr/raw/",
  5. "Sms": "",
  6. "videoUrl": null,
  7. "logoonline": "https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQEc4YRVMdVKcCKCZ6pNYh5nOUqvY1IIn0fyA&usqp=CAU",
  8. "fundoonline": "https://wallpaperaccess.com/download/blue-gradient-iphone-1155021",
  9. "fundoDoLogOnline": "https://i.imgur.com/PkCl6oH.jpeg",
  10. "EmailFeedback": "",
  11. "UrlContato": "",
  12. "UrlTermos": "",
  14. "CorCaixaServidor": "#64000000",
  16. "CorCaixaPayload": "#64000000",
  18. "CorCaixaUsuario": "#64000000",
  20. "CorCaixaSenha": "#64000000",
  22. "Corbotaostart": "#FF4E00FF",
  24. "CheckUser": "true",
  25. "UdpPort": "7300",
  26. "Servers": [
  27. {
  28. "Name": "SERVIDOR 1",
  29. "TYPE": "premium",
  30. "FLAG": "br.png",
  31. "ServerIP": "serv2.vpsuol.shop",
  32. "CheckUser": "http://149.78.186.152:8080/checkUser",
  33. "ServerPort": "22",
  34. "SSLPort": "443",
  35. "USER": "",
  36. "PASS": ""
  37. }
  38. ],
  39. "Networks": [
  40. {
  41. "Name": "🟣 VIVO PRÉ SECURITY SERVIDOR 1 👇",
  42. "FLAG": "vivo",
  43. "Payload": "",
  44. "SNI": "",
  45. "TlsIP": "",
  46. "ProxyIP": "",
  47. "ProxyPort": "",
  48. "Info": ""
  49. },
  50. {
  51. "Name": "",
  52. "FLAG": "vivo",
  53. "Payload": "",
  54. "SNI": "",
  55. "TlsIP": "",
  56. "ProxyIP": "",
  57. "ProxyPort": "",
  58. "Info": ""
  59. },
  60. {
  61. "Name": "VIVO SECURITY PRÉ SERV 1 [01]",
  62. "FLAG": "vivo",
  63. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  64. "SNI": "::ffff:954e:ba98",
  65. "TlsIP": "::ffff:aa51:2bbb",
  66. "ProxyIP": "::ffff:aa51:2bbb",
  67. "ProxyPort": "80",
  68. "Info": "Proxy"
  69. },
  70. {
  71. "Name": "VIVO SECURITY PRÉ SERV 1 [02]",
  72. "FLAG": "vivo",
  73. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  74. "SNI": "::ffff:954e:ba98",
  75. "TlsIP": "::ffff:aa51:2bbb",
  76. "ProxyIP": "::ffff:aa51:2bbb",
  77. "ProxyPort": "80",
  78. "Info": "Proxy"
  79. },
  80. {
  81. "Name": "VIVO SECURITY PRÉ SERV 1 [03]",
  82. "FLAG": "vivo",
  83. "Payload": "ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  84. "SNI": "::ffff:954e:ba98",
  85. "TlsIP": "::ffff:aa51:2bbb",
  86. "ProxyIP": "::ffff:aa51:2bbb",
  87. "ProxyPort": "80",
  88. "Info": "Proxy"
  89. },
  90. {
  91. "Name": "VIVO SECURITY PRÉ SERV 1 [04]",
  92. "FLAG": "vivo",
  93. "Payload": "ACL HTTP/1.1 Host: plus.google.com \r\n \r\n",
  94. "SNI": "::ffff:aa51:2bbb",
  95. "TlsIP": "::ffff:aa51:2bbb",
  96. "ProxyIP": "::ffff:aa51:2bbb",
  97. "ProxyPort": "80",
  98. "Info": "Proxy"
  99. },
  100. {
  101. "Name": "VIVO SECURITY PRÉ SERV 1 [05]",
  102. "FLAG": "vivo",
  103. "Payload": "MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)tlcomputingbr[crlf]Referer: http://www.google.com[crlf]",
  104. "SNI": "::ffff:aa51:2bbb",
  105. "TlsIP": "::ffff:aa51:2bbb",
  106. "ProxyIP": "::ffff:aa51:2bbb",
  107. "ProxyPort": "80",
  108. "Info": "Proxy"
  109. },
  110. {
  111. "Name": "VIVO SECURITY PRÉ SERV 1 [06]",
  112. "FLAG": "vivo",
  113. "Payload": "ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  114. "SNI": "::ffff:aa51:2bbb",
  115. "TlsIP": "::ffff:aa51:2bbb",
  116. "ProxyIP": "::ffff:aa51:2bbb",
  117. "ProxyPort": "80",
  118. "Info": "Proxy"
  119. },
  120. {
  121. "Name": "VIVO SECURITY PRÉ SERV 1 [07]",
  122. "FLAG": "vivo",
  123. "Payload": "HTTP/1.1[crlf] [crlf][crlf]•",
  124. "SNI": "::ffff:aa51:2bbb",
  125. "TlsIP": "::ffff:aa51:2bbb",
  126. "ProxyIP": "::ffff:aa51:2bbb",
  127. "ProxyPort": "80",
  128. "Info": "Proxy"
  129. },
  130. {
  131. "Name": "VIVO SECURITY PRÉ SERV 1 [08]",
  132. "FLAG": "vivo",
  133. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  134. "SNI": "::ffff:aa51:2bbb",
  135. "TlsIP": "::ffff:aa51:2bbb",
  136. "ProxyIP": "::ffff:aa51:2bbb",
  137. "ProxyPort": "80",
  138. "Info": "Proxy"
  139. },
  140. {
  141. "Name": "VIVO SECURITY PRÉ SERV 1 [09]",
  142. "FLAG": "vivo",
  143. "Payload": "[delay_split]ACL / HTTP/1.1[crlf]Host: 172.67.202.138[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  144. "SNI": "::ffff:aa51:2bbb",
  145. "TlsIP": "::ffff:aa51:2bbb",
  146. "ProxyIP": "::ffff:aa51:2bbb",
  147. "ProxyPort": "80",
  148. "Info": "Direct"
  149. },
  150. {
  151. "Name": "",
  152. "FLAG": "vivo",
  153. "Payload": "",
  154. "SNI": "",
  155. "TlsIP": "",
  156. "ProxyIP": "",
  157. "ProxyPort": "",
  158. "Info": ""
  159. },
  160. {
  161. "Name": "🟣 VIVO PRÉ SECURITY SERVIDOR 2 👇",
  162. "FLAG": "vivo",
  163. "Payload": "",
  164. "SNI": "",
  165. "TlsIP": "",
  166. "ProxyIP": "",
  167. "ProxyPort": "",
  168. "Info": ""
  169. },
  170. {
  171. "Name": "",
  172. "FLAG": "vivo",
  173. "Payload": "",
  174. "SNI": "",
  175. "TlsIP": "",
  176. "ProxyIP": "",
  177. "ProxyPort": "",
  178. "Info": ""
  179. },
  180. {
  181. "Name": "VIVO SECURITY PRÉ SERV 2 [01]",
  182. "FLAG": "vivo",
  183. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  184. "SNI": "::ffff:954e:ba98",
  185. "TlsIP": "::ffff:954e:ba98",
  186. "ProxyIP": "::ffff:954e:ba98",
  187. "ProxyPort": "80",
  188. "Info": "Proxy"
  189. },
  190. {
  191. "Name": "VIVO SECURITY PRÉ SERV 2 [02]",
  192. "FLAG": "vivo",
  193. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  194. "SNI": "::ffff:954e:ba98",
  195. "TlsIP": "::ffff:954e:ba98",
  196. "ProxyIP": "::ffff:954e:ba98",
  197. "ProxyPort": "80",
  198. "Info": "Proxy"
  199. },
  200. {
  201. "Name": "VIVO SECURITY PRÉ SERV 2 [03]",
  202. "FLAG": "vivo",
  203. "Payload": "ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  204. "SNI": "::ffff:954e:ba98",
  205. "TlsIP": "::ffff:954e:ba98",
  206. "ProxyIP": "::ffff:954e:ba98",
  207. "ProxyPort": "80",
  208. "Info": "Proxy"
  209. },
  210. {
  211. "Name": "VIVO SECURITY PRÉ SERV 2 [04]",
  212. "FLAG": "vivo",
  213. "Payload": "ACL HTTP/1.1 Host: plus.google.com \r\n \r\n",
  214. "SNI": "::ffff:954e:ba98",
  215. "TlsIP": "::ffff:954e:ba98",
  216. "ProxyIP": "::ffff:954e:ba98",
  217. "ProxyPort": "80",
  218. "Info": "Proxy"
  219. },
  220. {
  221. "Name": "VIVO SECURITY PRÉ SERV 2 [05]",
  222. "FLAG": "vivo",
  223. "Payload": "MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)tlcomputingbr[crlf]Referer: http://www.google.com[crlf]",
  224. "SNI": "::ffff:954e:ba98",
  225. "TlsIP": "::ffff:954e:ba98",
  226. "ProxyIP": "::ffff:954e:ba98",
  227. "ProxyPort": "80",
  228. "Info": "Proxy"
  229. },
  230. {
  231. "Name": "VIVO SECURITY PRÉ SERV 2 [06]",
  232. "FLAG": "vivo",
  233. "Payload": "ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: ::ffff:954e:ba98[crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  234. "SNI": "::ffff:954e:ba98",
  235. "TlsIP": "::ffff:954e:ba98",
  236. "ProxyIP": "::ffff:954e:ba98",
  237. "ProxyPort": "80",
  238. "Info": "Proxy"
  239. },
  240. {
  241. "Name": "VIVO SECURITY PRÉ SERV 2 [07]",
  242. "FLAG": "vivo",
  243. "Payload": "HTTP/1.1[crlf] [crlf][crlf]•",
  244. "SNI": "::ffff:954e:ba98",
  245. "TlsIP": "::ffff:954e:ba98",
  246. "ProxyIP": "::ffff:954e:ba98",
  247. "ProxyPort": "80",
  248. "Info": "Proxy"
  249. },
  250. {
  251. "Name": "VIVO SECURITY PRÉ SERV 2 [08]",
  252. "FLAG": "vivo",
  253. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  254. "SNI": "::ffff:954e:ba98",
  255. "TlsIP": "::ffff:954e:ba98",
  256. "ProxyIP": "::ffff:954e:ba98",
  257. "ProxyPort": "80",
  258. "Info": "Proxy"
  259. },
  260. {
  261. "Name": "VIVO SECURITY PRÉ SERV 2 [09]",
  262. "FLAG": "vivo",
  263. "Payload": "[delay_split]ACL / HTTP/1.1[crlf]Host: 172.67.202.138[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  264. "SNI": "::ffff:954e:ba98",
  265. "TlsIP": "::ffff:954e:ba98",
  266. "ProxyIP": "::ffff:954e:ba98",
  267. "ProxyPort": "80",
  268. "Info": "Direct"
  269. },
  270. {
  271. "Name": "",
  272. "FLAG": "vivo",
  273. "Payload": "",
  274. "SNI": "",
  275. "TlsIP": "",
  276. "ProxyIP": "",
  277. "ProxyPort": "",
  278. "Info": ""
  279. },
  280. {
  281. "Name": "🟣 VIVO TESTE CDN BUNNY 👇",
  282. "FLAG": "vivo",
  283. "Payload": "",
  284. "SNI": "",
  285. "TlsIP": "",
  286. "ProxyIP": "",
  287. "ProxyPort": "",
  288. "Info": ""
  289. },
  290. {
  291. "Name": "",
  292. "FLAG": "vivo",
  293. "Payload": "",
  294. "SNI": "",
  295. "TlsIP": "",
  296. "ProxyIP": "",
  297. "ProxyPort": "",
  298. "Info": ""
  299. },
  300. {
  301. "Name": "VIVO SECURITY PRÉ BUNNY CDN [01]",
  302. "FLAG": "vivo",
  303. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: donomodderajuda.b-cdn.net[lf]",
  304. "SNI": "[app_host]",
  305. "TlsIP": "serv1.vpsuol.shop",
  306. "ProxyIP": "serv1.vpsuol.shop",
  307. "ProxyPort": "80",
  308. "Info": "Proxy"
  309. },
  310. {
  311. "Name": "VIVO SECURITY PRÉ BUNNY CDN [02]",
  312. "FLAG": "vivo",
  313. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: donomodderajuda.b-cdn.net http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  314. "SNI": "[app_host]",
  315. "TlsIP": "serv1.vpsuol.shop",
  316. "ProxyIP": "serv1.vpsuol.shop",
  317. "ProxyPort": "80",
  318. "Info": "Proxy"
  319. },
  320. {
  321. "Name": "VIVO SECURITY PRÉ BUNNY CDN [03]",
  322. "FLAG": "vivo",
  323. "Payload": "ACL HTTP/1.1[crlf]Host: donomodderajuda.b-cdn.net[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  324. "SNI": "[app_host]",
  325. "TlsIP": "serv1.vpsuol.shop",
  326. "ProxyIP": "serv1.vpsuol.shop",
  327. "ProxyPort": "80",
  328. "Info": "Proxy"
  329. },
  330. {
  331. "Name": "VIVO SECURITY PRÉ BUNNY CDN [04]",
  332. "FLAG": "vivo",
  333. "Payload": "ACL HTTP/1.1 Host: donomodderajuda.b-cdn.net \r\n \r\n",
  334. "SNI": "[app_host]",
  335. "TlsIP": "serv1.vpsuol.shop",
  336. "ProxyIP": "serv1.vpsuol.shop",
  337. "ProxyPort": "80",
  338. "Info": "Proxy"
  339. },
  340. {
  341. "Name": "VIVO SECURITY PRÉ BUNNY CDN [05]",
  342. "FLAG": "vivo",
  343. "Payload": "MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: donomodderajuda.b-cdn.net [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)tlcomputingbr[crlf]Referer: http://www.google.com[crlf]",
  344. "SNI": "[app_host]",
  345. "TlsIP": "serv1.vpsuol.shop",
  346. "ProxyIP": "serv1.vpsuol.shop",
  347. "ProxyPort": "80",
  348. "Info": "Proxy"
  349. },
  350. {
  351. "Name": "VIVO SECURITY PRÉ BUNNY CDN [06]",
  352. "FLAG": "vivo",
  353. "Payload": "ACL HTTP/1.1[crlf]Host: donomodderajuda.b-cdn.net[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  354. "SNI": "[app_host]",
  355. "TlsIP": "serv1.vpsuol.shop",
  356. "ProxyIP": "serv1.vpsuol.shop",
  357. "ProxyPort": "80",
  358. "Info": "Proxy"
  359. },
  360. {
  361. "Name": "",
  362. "FLAG": "vivo",
  363. "Payload": "",
  364. "SNI": "",
  365. "TlsIP": "",
  366. "ProxyIP": "",
  367. "ProxyPort": "",
  368. "Info": ""
  369. },
  370. {
  371. "Name": "🟣 VIVO EASY NOVAS 👇",
  372. "FLAG": "vivo",
  373. "Payload": "",
  374. "SNI": "",
  375. "TlsIP": "",
  376. "ProxyIP": "",
  377. "ProxyPort": "",
  378. "Info": ""
  379. },
  380. {
  381. "Name": "",
  382. "FLAG": "vivo",
  383. "Payload": "",
  384. "SNI": "",
  385. "TlsIP": "",
  386. "ProxyIP": "",
  387. "ProxyPort": "",
  388. "Info": ""
  389. },
  390. {
  391. "Name": "VIVO EASY NOVA [01]",
  392. "FLAG": "vivo",
  393. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  394. "SNI": "",
  395. "TlsIP": "",
  396. "ProxyIP": "104.18.7.41",
  397. "ProxyPort": "80",
  398. "Info": "Proxy"
  399. },
  400. {
  401. "Name": "VIVO EASY NOVA [02]",
  402. "FLAG": "vivo",
  403. "Payload": "GET / HTTP/1.1[crlf]Host: serv1.vpsuol.shop[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: Websocket[crlf][crlf]",
  404. "SNI": "serv1.vpsuol.shop",
  405. "TlsIP": "104.18.7.41",
  406. "ProxyIP": "",
  407. "ProxyPort": "443",
  408. "Info": "Tlsws"
  409. },
  410. {
  411. "Name": "VIVO EASY NOVA [03]",
  412. "FLAG": "vivo",
  413. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=serv1.vpsuol.shop][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive-Upgrade[crlf] https://@canaldotl[crlf][crlf]",
  414. "SNI": "",
  415. "TlsIP": "",
  416. "ProxyIP": "104.16.126.175",
  417. "ProxyPort": "80",
  418. "Info": "Proxy"
  419. },
  420. {
  421. "Name": "VIVO EASY NOVA [04]",
  422. "FLAG": "vivo",
  423. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  424. "SNI": "[app_host]",
  425. "TlsIP": "170.81.43.187",
  426. "ProxyIP": "170.81.43.187",
  427. "ProxyPort": "80",
  428. "Info": "Proxy"
  429. },
  430. {
  431. "Name": "VIVO EASY NOVA [05]",
  432. "FLAG": "vivo",
  433. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  434. "SNI": "[app_host]",
  435. "TlsIP": "170.81.43.187",
  436. "ProxyIP": "170.81.43.187",
  437. "ProxyPort": "443",
  438. "Info": "Tlsws"
  439. },
  440. {
  441. "Name": "",
  442. "FLAG": "vivo",
  443. "Payload": "",
  444. "SNI": "",
  445. "TlsIP": "",
  446. "ProxyIP": "",
  447. "ProxyPort": "",
  448. "Info": ""
  449. },
  450. {
  451. "Name": "🟣 VIVO PRÉ NOVAS 👇",
  452. "FLAG": "vivo",
  453. "Payload": "",
  454. "SNI": "",
  455. "TlsIP": "",
  456. "ProxyIP": "",
  457. "ProxyPort": "",
  458. "Info": ""
  459. },
  460. {
  461. "Name": "",
  462. "FLAG": "vivo",
  463. "Payload": "",
  464. "SNI": "",
  465. "TlsIP": "",
  466. "ProxyIP": "",
  467. "ProxyPort": "",
  468. "Info": ""
  469. },
  470. {
  471. "Name": "VIVO PRÉ [01]",
  472. "FLAG": "vivo",
  473. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: LaranjoVPN[crlf][crlf]",
  474. "SNI": "[app_host]",
  475. "TlsIP": "",
  476. "ProxyIP": "[app_host]",
  477. "ProxyPort": "80",
  478. "Info": "Proxy"
  479. },
  480. {
  481. "Name": "VIVO PRÉ [02]",
  482. "FLAG": "vivo",
  483. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: [app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  484. "SNI": "",
  485. "TlsIP": "",
  486. "ProxyIP": "104.16.51.111",
  487. "ProxyPort": "80",
  488. "Info": "Proxy"
  489. },
  490. {
  491. "Name": "VIVO PRÉ [03]",
  492. "FLAG": "vivo",
  493. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  494. "SNI": "",
  495. "TlsIP": "",
  496. "ProxyIP": "104.16.51.111",
  497. "ProxyPort": "80",
  498. "Info": "Proxy"
  499. },
  500. {
  501. "Name": "VIVO PRÉ [04]",
  502. "FLAG": "vivo",
  503. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  504. "SNI": "",
  505. "TlsIP": "",
  506. "ProxyIP": "104.16.51.111",
  507. "ProxyPort": "80",
  508. "Info": "Proxy"
  509. },
  510. {
  511. "Name": "VIVO PRÉ [05]",
  512. "FLAG": "vivo",
  513. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  514. "SNI": "",
  515. "TlsIP": "",
  516. "ProxyIP": "ayuda.tigo.com.gt",
  517. "ProxyPort": "80",
  518. "Info": "Proxy"
  519. },
  520. {
  521. "Name": "VIVO PRÉ [06]",
  522. "FLAG": "vivo",
  523. "Payload": "GET / HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  524. "SNI": "[app_host]",
  525. "TlsIP": "",
  526. "ProxyIP": "104.18.29.182 ",
  527. "ProxyPort": "80",
  528. "Info": "Direct"
  529. },
  530. {
  531. "Name": "VIVO PRÉ [07]",
  532. "FLAG": "vivo",
  533. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  534. "SNI": "[app_host]",
  535. "TlsIP": "104.16.51.111",
  536. "ProxyIP": "",
  537. "ProxyPort": "",
  538. "Info": "Tlsws"
  539. },
  540. {
  541. "Name": "VIVO SECURITY PRÉ [01]",
  542. "FLAG": "vivo",
  543. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  544. "SNI": "[app_host]",
  545. "TlsIP": "[app_host]",
  546. "ProxyIP": "[app_host]",
  547. "ProxyPort": "80",
  548. "Info": "Proxy"
  549. },
  550. {
  551. "Name": "VIVO SECURITY PRÉ [02]",
  552. "FLAG": "vivo",
  553. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  554. "SNI": "[app_host]",
  555. "TlsIP": "[app_host]",
  556. "ProxyIP": "[app_host]",
  557. "ProxyPort": "80",
  558. "Info": "Proxy"
  559. },
  560. {
  561. "Name": "VIVO SECURITY PRÉ [03]",
  562. "FLAG": "vivo",
  563. "Payload": "ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  564. "SNI": "[app_host]",
  565. "TlsIP": "[app_host]",
  566. "ProxyIP": "[app_host]",
  567. "ProxyPort": "80",
  568. "Info": "Proxy"
  569. },
  570. {
  571. "Name": "",
  572. "FLAG": "tim",
  573. "Payload": "",
  574. "SNI": "",
  575. "TlsIP": "",
  576. "ProxyIP": "",
  577. "ProxyPort": "",
  578. "Info": ""
  579. },
  580. {
  581. "Name": "🔵 TIM SALDO VALIDO 👇",
  582. "FLAG": "tim",
  583. "Payload": "",
  584. "SNI": "",
  585. "TlsIP": "",
  586. "ProxyIP": "",
  587. "ProxyPort": "",
  588. "Info": ""
  589. },
  590. {
  591. "Name": "",
  592. "FLAG": "tim",
  593. "Payload": "",
  594. "SNI": "",
  595. "TlsIP": "",
  596. "ProxyIP": "",
  597. "ProxyPort": "",
  598. "Info": ""
  599. },
  600. {
  601. "Name": "TIM SALDO VALIDO [01]",
  602. "FLAG": "tim",
  603. "Payload": "CONNECT / HTTP/1.9[crlf]host: mobile.hom.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://wa.me/84996862124 [crlf]Referer: https://t.me/starlinkoficial [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  604. "SNI": "",
  605. "TlsIP": "",
  606. "ProxyIP": "104.19.240.25",
  607. "ProxyPort": "80",
  608. "Info": "Proxy"
  609. },
  610. {
  611. "Name": "TIM SALDO VALIDO [02]",
  612. "FLAG": "tim",
  613. "Payload": "CONNECT / HTTP/1.9[crlf]host: appdev.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  614. "SNI": "",
  615. "TlsIP": "",
  616. "ProxyIP": "104.18.27.160",
  617. "ProxyPort": "80",
  618. "Info": "Proxy"
  619. },
  620. {
  621. "Name": "TIM SALDO VALIDO [03]",
  622. "FLAG": "tim",
  623. "Payload": "CONNECT / HTTP/1.9[crlf]host: appdev.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  624. "SNI": "",
  625. "TlsIP": "104.19.239.25",
  626. "ProxyIP": "104.19.239.25",
  627. "ProxyPort": "80",
  628. "Info": "Proxy"
  629. },
  630. {
  631. "Name": "TIM SALDO VALIDO [04]",
  632. "FLAG": "tim",
  633. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host:globalnetwork.arcanjoteam.shop[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  634. "SNI": "",
  635. "TlsIP": "104.19.240.25",
  636. "ProxyIP": "blog.c6bank.com.br",
  637. "ProxyPort": "80",
  638. "Info": "Proxy"
  639. },
  640. {
  641. "Name": "TIM SALDO VALIDO [05]",
  642. "FLAG": "tim",
  643. "Payload": "CONNECT / HTTP/1.9[crlf]host: appdev.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  644. "SNI": "",
  645. "TlsIP": "104.19.240.25",
  646. "ProxyIP": "ajuda.c6bank.com.br",
  647. "ProxyPort": "80",
  648. "Info": "Proxy"
  649. },
  650. {
  651. "Name": "TIM SALDO VALIDO [06]",
  652. "FLAG": "tim",
  653. "Payload": "CONNECT / HTTP/1.9[crlf]host: appdev.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  654. "SNI": "",
  655. "TlsIP": "",
  656. "ProxyIP": "104.16.53.111",
  657. "ProxyPort": "80",
  658. "Info": "Proxy"
  659. },
  660. {
  661. "Name": "",
  662. "FLAG": "tim",
  663. "Payload": "",
  664. "SNI": "",
  665. "TlsIP": "",
  666. "ProxyIP": "",
  667. "ProxyPort": "",
  668. "Info": ""
  669. },
  670. {
  671. "Name": "🔵TIM SALDO EXPIRADO 👇",
  672. "FLAG": "tim",
  673. "Payload": "",
  674. "SNI": "",
  675. "TlsIP": "",
  676. "ProxyIP": "",
  677. "ProxyPort": "",
  678. "Info": ""
  679. },
  680. {
  681. "Name": "",
  682. "FLAG": "tim",
  683. "Payload": "",
  684. "SNI": "",
  685. "TlsIP": "",
  686. "ProxyIP": "",
  687. "ProxyPort": "",
  688. "Info": ""
  689. },
  690. {
  691. "Name": "TIM EXPIRADO [01]",
  692. "FLAG": "tim",
  693. "Payload": "HEAD wss://[app_host] HTTP/1.1[lf]Host: none[crlf]Upgrade: Websocket[crlf][crlf]",
  694. "SNI": "[app_host]",
  695. "TlsIP": "",
  696. "ProxyIP": "104.18.29.182 ",
  697. "ProxyPort": "80",
  698. "Info": "Direct"
  699. },
  700. {
  701. "Name": "TIM EXPIRADO [02]",
  702. "FLAG": "tim",
  703. "Payload": "[protocol][crlf] [crlf][crlf]@",
  704. "SNI": "",
  705. "TlsIP": "",
  706. "ProxyIP": "[app_host]",
  707. "ProxyPort": "80",
  708. "Info": "Direct"
  709. },
  710. {
  711. "Name": "TIM EXPIRADO [03]",
  712. "FLAG": "tim",
  713. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: websocket[crlf][crlf]",
  714. "SNI": "feedback.infinitepay.io",
  715. "TlsIP": "",
  716. "ProxyIP": "104.16.18.94",
  717. "ProxyPort": "80",
  718. "Info": "Direct"
  719. },
  720. {
  721. "Name": "TIM EXPIRADO [04]",
  722. "FLAG": "tim",
  723. "Payload": "PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]",
  724. "SNI": "",
  725. "TlsIP": "",
  726. "ProxyIP": "[app_host]",
  727. "ProxyPort": "80",
  728. "Info": "Direct"
  729. },
  730. {
  731. "Name": "TIM EXPIRADO [05]",
  732. "FLAG": "tim",
  733. "Payload": "HTTP/1.1[crlf] [crlf][crlf]•",
  734. "SNI": "",
  735. "TlsIP": "",
  736. "ProxyIP": "[app_host]",
  737. "ProxyPort": "80",
  738. "Info": "Direct"
  739. },
  740. {
  741. "Name": "TIM EXPIRADO [06]",
  742. "FLAG": "tim",
  743. "Payload": "[protocol] \n\n/",
  744. "SNI": "",
  745. "TlsIP": "",
  746. "ProxyIP": "[app_host]",
  747. "ProxyPort": "80",
  748. "Info": "Proxy"
  749. },
  750. {
  751. "Name": "TIM EXPIRADO [07]",
  752. "FLAG": "tim",
  753. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  754. "SNI": "",
  755. "TlsIP": "",
  756. "ProxyIP": "[app_host]",
  757. "ProxyPort": "80",
  758. "Info": "Direct"
  759. },
  760. {
  761. "Name": "TIM EXPIRADO [08]",
  762. "FLAG": "tim",
  763. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  764. "SNI": "",
  765. "TlsIP": "",
  766. "ProxyIP": "[app_host]",
  767. "ProxyPort": "80",
  768. "Info": "Proxy"
  769. },
  770. {
  771. "Name": "TIM EXPIRADO [09]",
  772. "FLAG": "tim",
  773. "Payload": "ACL [app_host] HTTP/2[crlf]Host: google.es[crlf]Referer: @Laranjo01[crlf]",
  774. "SNI": "[app_host]",
  775. "TlsIP": "[app_host]",
  776. "ProxyIP": "[app_host]",
  777. "ProxyPort": "80",
  778. "Info": "Proxy"
  779. },
  780. {
  781. "Name": "TIM EXPIRADO [10]",
  782. "FLAG": "tim",
  783. "Payload": "HTTP/ \n\n",
  784. "SNI": "",
  785. "TlsIP": "",
  786. "ProxyIP": "[app_host]",
  787. "ProxyPort": "80",
  788. "Info": "Direct"
  789. },
  790. {
  791. "Name": "TIM EXPIRADO [11]",
  792. "FLAG": "tim",
  793. "Payload": "ACL HTTP/2[crlf]Host: plus.google.com[crlf]",
  794. "SNI": "",
  795. "TlsIP": "",
  796. "ProxyIP": "[app_host]",
  797. "ProxyPort": "80",
  798. "Info": "Direct"
  799. },
  800. {
  801. "Name": "TIM EXPIRADO [12]",
  802. "FLAG": "tim",
  803. "Payload": "MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referer: http://www.google.com[crlf]",
  804. "SNI": "",
  805. "TlsIP": "",
  806. "ProxyIP": "[app_host]",
  807. "ProxyPort": "80",
  808. "Info": "Direct"
  809. },
  810. {
  811. "Name": "",
  812. "FLAG": "claro",
  813. "Payload": "",
  814. "SNI": "",
  815. "TlsIP": "",
  816. "ProxyIP": "",
  817. "ProxyPort": "",
  818. "Info": "Tlsws"
  819. },
  820. {
  821. "Name": "🔴CLARO PROMOÇÃO 👇",
  822. "FLAG": "claro",
  823. "Payload": "",
  824. "SNI": "",
  825. "TlsIP": "",
  826. "ProxyIP": "",
  827. "ProxyPort": "",
  828. "Info": "Tlsws"
  829. },
  830. {
  831. "Name": "",
  832. "FLAG": "claro",
  833. "Payload": "",
  834. "SNI": "",
  835. "TlsIP": "",
  836. "ProxyIP": "",
  837. "ProxyPort": "",
  838. "Info": "Tlsws"
  839. },
  840. {
  841. "Name": "CLARO PLANO [01]",
  842. "FLAG": "claro",
  843. "Payload": "",
  844. "SNI": "blog.whatsapp.com",
  845. "TlsIP": "",
  846. "ProxyIP": "",
  847. "ProxyPort": "",
  848. "Info": "Ssl"
  849. },
  850. {
  851. "Name": "CLARO PLANO [02]",
  852. "FLAG": "claro",
  853. "Payload": "",
  854. "SNI": "api.whatsapp.com",
  855. "TlsIP": "",
  856. "ProxyIP": "",
  857. "ProxyPort": "",
  858. "Info": "Ssl"
  859. },
  860. {
  861. "Name": "CLARO PLANO [03]",
  862. "FLAG": "claro",
  863. "Payload": "",
  864. "SNI": "translate.whatsapp.com",
  865. "TlsIP": "",
  866. "ProxyIP": "",
  867. "ProxyPort": "",
  868. "Info": "Ssl"
  869. },
  870. {
  871. "Name": "CLARO PLANO [04]",
  872. "FLAG": "claro",
  873. "Payload": "",
  874. "SNI": "dev-web.whatsapp.com",
  875. "TlsIP": "",
  876. "ProxyIP": "",
  877. "ProxyPort": "",
  878. "Info": "Ssl"
  879. },
  880. {
  881. "Name": "CLARO PLANO [05]",
  882. "FLAG": "claro",
  883. "Payload": "",
  884. "SNI": "faq.whatsapp.com",
  885. "TlsIP": "",
  886. "ProxyIP": "",
  887. "ProxyPort": "",
  888. "Info": "Ssl"
  889. },
  890. {
  891. "Name": "CLARO PLANO [06]",
  892. "FLAG": "claro",
  893. "Payload": "",
  894. "SNI": "chat.whatsapp.com",
  895. "TlsIP": "",
  896. "ProxyIP": "",
  897. "ProxyPort": "",
  898. "Info": "Ssl"
  899. },
  900. {
  901. "Name": "CLARO PLANO [07]",
  902. "FLAG": "claro",
  903. "Payload": "",
  904. "SNI": "campaign.line.me.ncov19.ga;graph.whatsapp.com",
  905. "TlsIP": "",
  906. "ProxyIP": "",
  907. "ProxyPort": "",
  908. "Info": "Ssl"
  909. },
  910. {
  911. "Name": "CLARO PLANO [08]",
  912. "FLAG": "claro",
  913. "Payload": "",
  914. "SNI": "web-assets.waze.com",
  915. "TlsIP": "",
  916. "ProxyIP": "",
  917. "ProxyPort": "",
  918. "Info": "Ssl"
  919. },
  920. {
  921. "Name": "CLARO PLANO [09]",
  922. "FLAG": "claro",
  923. "Payload": "",
  924. "SNI": "m.waze.com",
  925. "TlsIP": "",
  926. "ProxyIP": "",
  927. "ProxyPort": "",
  928. "Info": "Ssl"
  929. },
  930. {
  931. "Name": "CLARO PLANO [10]",
  932. "FLAG": "claro",
  933. "Payload": "",
  934. "SNI": "twitter.com",
  935. "TlsIP": "",
  936. "ProxyIP": "",
  937. "ProxyPort": "",
  938. "Info": "Ssl"
  939. },
  940. {
  941. "Name": "CLARO PLANO [11]",
  942. "FLAG": "claro",
  943. "Payload": "",
  944. "SNI": "m.twitter.com",
  945. "TlsIP": "",
  946. "ProxyIP": "",
  947. "ProxyPort": "",
  948. "Info": "Ssl"
  949. },
  950. {
  951. "Name": "CLARO PLANO [12]",
  952. "FLAG": "claro",
  953. "Payload": "GET wss://go.launchdarkly.com HTTP/1.1\nHost: [app_host]\nUpgrade: WebSocket\n\n",
  954. "SNI": "go.launchdarkly.com",
  955. "TlsIP": "go.launchdarkly.com",
  956. "ProxyIP": "go.launchdarkly.com",
  957. "ProxyPort": "443",
  958. "Info": "Tlsws"
  959. },
  960. {
  961. "Name": "CLARO PLANO [13]",
  962. "FLAG": "claro",
  963. "Payload": "GET wss://go.launchdarkly.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  964. "SNI": "go.launchdarkly.com",
  965. "TlsIP": "go.launchdarkly.com",
  966. "ProxyIP": "",
  967. "ProxyPort": "443",
  968. "Info": "Tlsws"
  969. },
  970. {
  971. "Name": "CLARO PLANO [14]",
  972. "FLAG": "claro",
  973. "Payload": "",
  974. "SNI": "whatsapp.com",
  975. "TlsIP": "",
  976. "ProxyIP": "",
  977. "ProxyPort": "",
  978. "Info": "Ssl"
  979. },
  980. {
  981. "Name": "CLARO PLANO [15]",
  982. "FLAG": "claro",
  983. "Payload": "",
  984. "SNI": "business.whatsapp.com",
  985. "TlsIP": "",
  986. "ProxyIP": "",
  987. "ProxyPort": "",
  988. "Info": "Ssl"
  989. },
  990. {
  991. "Name": "",
  992. "FLAG": "oi",
  993. "Payload": "",
  994. "SNI": "",
  995. "TlsIP": "",
  996. "ProxyIP": "",
  997. "ProxyPort": "",
  998. "Info": "Tlsws"
  999. },
  1000. {
  1001. "Name": "🟡OI FLARE 👇",
  1002. "FLAG": "oi",
  1003. "Payload": "",
  1004. "SNI": "",
  1005. "TlsIP": "",
  1006. "ProxyIP": "",
  1007. "ProxyPort": "",
  1008. "Info": "Tlsws"
  1009. },
  1010. {
  1011. "Name": "",
  1012. "FLAG": "oi",
  1013. "Payload": "",
  1014. "SNI": "",
  1015. "TlsIP": "",
  1016. "ProxyIP": "",
  1017. "ProxyPort": "",
  1018. "Info": "Tlsws"
  1019. },
  1020. {
  1021. "Name": "OI FLARE [01]",
  1022. "FLAG": "oi",
  1023. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket [crlf][crlf]",
  1024. "SNI": "",
  1025. "TlsIP": "",
  1026. "ProxyIP": "13.226.52.28",
  1027. "ProxyPort": "80",
  1028. "Info": "Proxy"
  1029. },
  1030. {
  1031. "Name": "OI FLARE [02]",
  1032. "FLAG": "oi",
  1033. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  1034. "SNI": "www.hbogo.com.br",
  1035. "TlsIP": "104.16.53.91",
  1036. "ProxyIP": "",
  1037. "ProxyPort": "",
  1038. "Info": "Tlsws"
  1039. },
  1040. {
  1041. "Name": "OI FLARE [03]",
  1042. "FLAG": "oi",
  1043. "Payload": "GET sni://www.hbogo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1044. "SNI": "www.hbogo.com.br",
  1045. "TlsIP": "104.16.51.91",
  1046. "ProxyIP": "",
  1047. "ProxyPort": "",
  1048. "Info": "Tlsws"
  1049. },
  1050. {
  1051. "Name": "OI FLARE [04]",
  1052. "FLAG": "oi",
  1053. "Payload": "GET wss://bam.nr-data.net HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1054. "SNI": "bam.nr-data.net",
  1055. "TlsIP": "bam.nr-data.net",
  1056. "ProxyIP": "",
  1057. "ProxyPort": "",
  1058. "Info": "Tlsws"
  1059. },
  1060. {
  1061. "Name": "OI FLARE [05]",
  1062. "FLAG": "oi",
  1063. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1064. "SNI": "",
  1065. "TlsIP": "",
  1066. "ProxyIP": "104.16.53.111",
  1067. "ProxyPort": "80",
  1068. "Info": "Proxy"
  1069. },
  1070. {
  1071. "Name": "OI FLARE [06]",
  1072. "FLAG": "oi",
  1073. "Payload": "GET / HTTP/1.1\nHost: blog.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host] \nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1074. "SNI": "meganet.ascnet.tk",
  1075. "TlsIP": "",
  1076. "ProxyIP": "104.19.239.25",
  1077. "ProxyPort": "80",
  1078. "Info": "Proxy"
  1079. },
  1080. {
  1081. "Name": "OI FLARE [07]",
  1082. "FLAG": "oi",
  1083. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host] \nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1084. "SNI": "",
  1085. "TlsIP": "",
  1086. "ProxyIP": "104.19.239.25",
  1087. "ProxyPort": "80",
  1088. "Info": "Proxy"
  1089. },
  1090. {
  1091. "Name": "OI FLARE [08]",
  1092. "FLAG": "oi",
  1093. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  1094. "SNI": "",
  1095. "TlsIP": "",
  1096. "ProxyIP": "104.19.239.25",
  1097. "ProxyPort": "80",
  1098. "Info": "Proxy"
  1099. },
  1100. {
  1101. "Name": "OI FLARE [09]",
  1102. "FLAG": "oi",
  1103. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1104. "SNI": "",
  1105. "TlsIP": "",
  1106. "ProxyIP": "104.19.239.25",
  1107. "ProxyPort": "80",
  1108. "Info": "Proxy"
  1109. }
  1110. ]
  1111. }
comments powered by Disqus