Base proverbio qnax 1 play store

SUBMITTED BY: CarlosAM3

DATE: Jan. 27, 2023, 12:29 a.m.

UPDATED: March 19, 2024, 8:58 p.m.

FORMAT: Text only

SIZE: 53.0 kB

History Raw Download

HITS: 6064

Report
  1. {
  2. "Version": "1.7.8",
  3. "ReleaseNotes": "FamiliaVPN atualizem vivo e tim adicionado testam em seus ddds",
  4. "UrlUpdate": "https://bitbin.it/QUYBhYVr/raw/",
  5. "Sms": "",
  6. "EmailFeedback": "kiritosshxd5733@gmail.com",
  7. "UrlContato": "",
  8. "UrlTermos": "",
  9. "CheckUser": "true",
  10. "UdpPort": "7100;7200;7300;7400;7500;7600;7700",
  11. "Servers": [
  12. {
  13. "Name": "Familia SSH|BR",
  14. "TYPE": "premium",
  15. "FLAG": "br.png",
  16. "ServerIP": "br.srjesusteama.online",
  17. "CheckUser": "http://209.14.84.31:5050/checkUser",
  18. "ServerPort": "22",
  19. "SSLPort": "443",
  20. "USER": "",
  21. "PASS": ""
  22. }
  23. ],
  24. "Networks": [
  25. {
  26. "Name": "🟣VIVO SECURITY PRÉ🟣 [01]",
  27. "FLAG": "vivo",
  28. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  29. "SNI": "209.14.84.31",
  30. "TlsIP": "209.14.84.31",
  31. "ProxyIP": "209.14.84.31",
  32. "ProxyPort": "80",
  33. "Info": "Proxy"
  34. },
  35. {
  36. "Name": "🟣VIVO SECURITY PRÉ🟣 [02]",
  37. "FLAG": "vivo",
  38. "Payload": "[delay_split]ACL /Set-Cookie: sessionID=fbafa6258966f49f252b404ab9e5c219; path=/admin; domain=revive.vivointernetgratis.com.br; secure; HttpOnly; SameSite=strict HTTP/1.1][lf]",
  39. "SNI": "[app_host]",
  40. "TlsIP": "209.14.84.31",
  41. "ProxyIP": "209.14.84.31",
  42. "ProxyPort": "80",
  43. "Info": "Proxy"
  44. },
  45. {
  46. "Name": "🟣VIVO SECURITY PRÉ🟣 [03]",
  47. "FLAG": "vivo",
  48. "Payload": "[delay_split]GET http://m.clarosync.com/ HTTP/1.1 Host: http://m.clarosync.com/User-Agent: YesConnection: closeProxy-Connection: Keep-Alive[crlf][crlf][netData][crlf] [crlf][crlf]",
  49. "SNI": "[app_host]",
  50. "TlsIP": "209.14.84.31",
  51. "ProxyIP": "209.14.84.31",
  52. "ProxyPort": "80",
  53. "Info": "Proxy"
  54. },
  55. {
  56. "Name": "🟣VIVO SECURITY PRÉ🟣 [04]",
  57. "FLAG": "vivo",
  58. "Payload": "[delay_split]GET http://d1n212ccp6ldpw.cloudfront.net HTTP/1.1\n\r\n\r\nCONNECT 127.0.0.1:443HTTP/1.0X-Online-Host: http://download-this-pl.info/124BR/MP.html \r\n\r\n",
  59. "SNI": "[app_host]",
  60. "TlsIP": "209.14.84.31",
  61. "ProxyIP": "209.14.84.31",
  62. "ProxyPort": "80",
  63. "Info": "Proxy"
  64. },
  65. {
  66. "Name": "🟣VIVO SECURITY PRÉ🟣 [05]",
  67. "FLAG": "vivo",
  68. "Payload": "[delay_split]CONNECT [host_port]<font GET http://portalrecarga.vivo.com.br/recarga/home/187.8.166.33 [protocol][lf][split]CONNECT 187.8.166.33 CONNECT [host_port]149.56.42.236 HTTP/1.1[crlf][crlf]",
  69. "SNI": "[app_host]",
  70. "TlsIP": "209.14.84.31",
  71. "ProxyIP": "209.14.84.31",
  72. "ProxyPort": "80",
  73. "Info": "Proxy"
  74. },
  75. {
  76. "Name": "🟣VIVO SECURITY PRÉ🟣 [06]",
  77. "FLAG": "vivo",
  78. "Payload": "[delay_split]ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]",
  79. "SNI": "[app_host]",
  80. "TlsIP": "209.14.84.31",
  81. "ProxyIP": "209.14.84.31",
  82. "ProxyPort": "80",
  83. "Info": "Proxy"
  84. },
  85. {
  86. "Name": "🟣VIVO SECURITY PRÉ🟣 [07]",
  87. "FLAG": "vivo",
  88. "Payload": "[delay_split]ACL /revive.vivointernetgratis.com.br HTTP/1.1][lf]",
  89. "SNI": "[app_host]",
  90. "TlsIP": "209.14.84.31",
  91. "ProxyIP": "209.14.84.31",
  92. "ProxyPort": "80",
  93. "Info": "Proxy"
  94. },
  95. {
  96. "Name": "🟣VIVO SECURITY PRÉ🟣 [08]",
  97. "FLAG": "vivo",
  98. "Payload": "[delay_split]ACL AtlasN42/ HTTP/1.1[crlf]Host: 209.14.84.31[crlf]Upgrade: websocket[crlf][crlf]",
  99. "SNI": "[app_host]",
  100. "TlsIP": "209.14.84.31",
  101. "ProxyIP": "209.14.84.31",
  102. "ProxyPort": "80",
  103. "Info": "Proxy"
  104. },
  105. {
  107. "Name": "🟣VIVO SECURITY PRÉ🟣 [09]",
  108. "FLAG": "vivo",
  109. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\n\n\n \n",
  110. "SNI": "[app_host]",
  111. "TlsIP": "209.14.84.31",
  112. "ProxyIP": "209.14.84.31",
  113. "ProxyPort": "80",
  114. "Info": "Proxy"
  115. },
  116. {
  117. "Name": "🟣VIVO SECURITY PRÉ🟣 [10]",
  118. "FLAG": "vivo",
  119. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: www.vivo.com.br\n\n\n \n",
  120. "SNI": "[app_host]",
  121. "TlsIP": "209.14.84.31",
  122. "ProxyIP": "209.14.84.31",
  123. "ProxyPort": "80",
  124. "Info": "Proxy"
  125. },
  126. {
  127. "Name": "🟣VIVO SECURITY PRÉ🟣 [11]",
  128. "FLAG": "vivo",
  129. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: www.vivo.com\n\n\n \n",
  130. "SNI": "[app_host]",
  131. "TlsIP": "209.14.84.31",
  132. "ProxyIP": "209.14.84.31",
  133. "ProxyPort": "80",
  134. "Info": "Proxy"
  135. },
  136. {
  137. "Name": "🟣VIVO SECURITY PRÉ🟣 [12]",
  138. "FLAG": "vivo",
  139. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: recarga.vivo.com.br\n\n\n \n",
  140. "SNI": "[app_host]",
  141. "TlsIP": "209.14.84.31",
  142. "ProxyIP": "209.14.84.31",
  143. "ProxyPort": "80",
  144. "Info": "Proxy"
  145. },
  146. {
  147. "Name": "🟣VIVO SECURITY PRÉ🟣️ [13]",
  148. "FLAG": "vivo",
  149. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: www.loja.vivo.com.br\n\n\n \n",
  150. "SNI": "[app_host]",
  151. "TlsIP": "209.14.84.31",
  152. "ProxyIP": "209.14.84.31",
  153. "ProxyPort": "80",
  154. "Info": "Proxy"
  155. },
  156. {
  157. "Name": "🟣VIVO SECURITY PRÉ🟣 [14]",
  158. "FLAG": "vivo",
  159. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  160. "SNI": "[app_host]",
  161. "TlsIP": "209.14.84.31",
  162. "ProxyIP": "209.14.84.31",
  163. "ProxyPort": "80",
  164. "Info": "Proxy"
  165. },
  166. {
  168. "Name": "🟪VIVO SECURITY 2023🟪 [15] ",
  169. "FLAG": "vivo",
  170. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  171. "SNI": "",
  172. "TlsIP": "",
  173. "ProxyIP": "209.14.84.31",
  174. "ProxyPort": "80",
  175. "Info": "Proxy"
  176. },
  177. {
  178. "Name": "🟪VIVO SECURITY 2023🟪 [16] ",
  179. "FLAG": "vivo",
  180. "Payload": "[delay_split][crlf]GET / HTTP/1.1[lf]Host: zyon.ml[lf]Upgrade: websocket[lf]",
  181. "SNI": "",
  182. "TlsIP": "209.14.84.31",
  183. "ProxyIP": "209.14.84.31",
  184. "ProxyPort": "80",
  185. "Info": "Proxy"
  186. },
  187. {
  188. "Name": "🟪VIVO SECURITY 2023🟪 [17] ",
  189. "FLAG": "vivo",
  190. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  191. "SNI": "209.14.84.31",
  192. "TlsIP": "209.14.84.31",
  193. "ProxyIP": "209.14.84.31",
  194. "ProxyPort": "80",
  195. "Info": "Proxy"
  196. },
  197. {
  198. "Name": "🟪VIVO SECURITY 2023🟪 [18]",
  199. "FLAG": "vivo",
  200. "Payload": "[delay_split]PATCH / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br/recarga/home[crlf]X-Forwarded-For:[crlf]Connection:Keep-Alive[crlf]User-Agent: [ua][crlf][raw][crlf][crlf]",
  201. "SNI": "[app_host]",
  202. "TlsIP": "209.14.84.31",
  203. "ProxyIP": "209.14.84.31",
  204. "ProxyPort": "80",
  205. "Info": "Proxy"
  206. },
  207. {
  208. "Name": "🟪VIVO SECURITY 2023🟪 [19]",
  209. "FLAG": "vivo",
  210. "Payload": "[delay_split]PATCH / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br/recarga/home/?;meuplano.tim.com.br/ofertas/#/;t.me/@InterFlashplus@[host_port][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]X-Online-Host: portalrecarga.vivo.com.br/recarga/home/?;meuplano.tim.com.br/ofertas/#/;t.me/@InterFlashplus[crlf]X-Forward-Host: portalrecarga.vivo.com.br/recarga/home/?;meuplano.tim.com.br/ofertas/#/;t.me/@InterFlashplus[crlf]X-Forwarded-For: portalrecarga.vivo.com.br/recarga/home/?;meuplano.tim.com.br/ofertas/#/;t.me/@InterFlashplus[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][raw][crlf][crlf]",
  211. "SNI": "[app_host]",
  212. "TlsIP": "209.14.84.31",
  213. "ProxyIP": "209.14.84.31",
  214. "ProxyPort": "80",
  215. "Info": "Proxy"
  216. },
  217. {
  218. "Name": "🟪VIVO SECURITY 2023🟪 [20]",
  219. "FLAG": "vivo",
  220. "Payload": "[delay_split][lf]GET / 55",
  221. "SNI": "[app_host]",
  222. "TlsIP": "209.14.84.31",
  223. "ProxyIP": "209.14.84.31",
  224. "ProxyPort": "80",
  225. "Info": "Proxy"
  226. },
  227. {
  228. "Name": "🟪VIVO SECURITY 2023🟪 [21]",
  229. "FLAG": "vivo",
  230. "Payload": "[delay_split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]",
  231. "SNI": "",
  232. "TlsIP": "",
  233. "ProxyIP": "209.14.84.31",
  234. "ProxyPort": "80",
  235. "Info": "Proxy"
  236. },
  237. {
  238. "Name": "🟣VIVO SECURITY PRÉ🟣 [22]",
  239. "FLAG": "vivo",
  240. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
  241. "SNI": "",
  242. "TlsIP": "",
  243. "ProxyIP": "209.14.84.31",
  244. "ProxyPort": "80",
  245. "Info": "Proxy"
  246. },
  247. {
  248. "Name": "🟣VIVO SECURITY PRÉ🟣 [23]",
  249. "FLAG": "vivo",
  250. "Payload": "[delay_split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]",
  251. "SNI": "",
  252. "TlsIP": "",
  253. "ProxyIP": "209.14.84.31",
  254. "ProxyPort": "80",
  255. "Info": "Proxy"
  256. },
  257. {
  258. "Name": "🟣VIVO SECURITY PRÉ🟣 [24]",
  259. "FLAG": "vivo",
  260. "Payload": "[delay_split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]",
  261. "SNI": "",
  262. "TlsIP": "",
  263. "ProxyIP": "209.14.84.31",
  264. "ProxyPort": "80",
  265. "Info": "Proxy"
  266. },
  267. {
  268. "Name": "🟣VIVO SECURITY PRÉ🟣 [25]",
  269. "FLAG": "vivo",
  270. "Payload": "[delay_split][lf]ACL / HTTP/1.1[crlf]Host: microsoft.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]",
  271. "SNI": "",
  272. "TlsIP": "",
  273. "ProxyIP": "209.14.84.31",
  274. "ProxyPort": "80",
  275. "Info": "Proxy"
  276. },
  277. {
  278. "Name": "🟣VIVO SECURITY PRÉ🟣 [26]",
  279. "FLAG": "vivo",
  280. "Payload": "[delay_split][lf]PUT / HTTP/1.1[crlf]Host: amazonaws.com[crlf]Upgrade: Keep-Alive[crlf]Connection: Upgrade[crlf][crlf]",
  281. "SNI": "",
  282. "TlsIP": "",
  283. "ProxyIP": "209.14.84.31",
  284. "ProxyPort": "80",
  285. "Info": "Proxy"
  286. },
  287. {
  288. "Name": "VIVO TODAS APN FLARE [01]",
  289. "FLAG": "vivo",
  290. "Payload": "GET / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Upgrade: websocket[crlf][crlf]",
  291. "SNI": "br.srjesusteama.online",
  292. "TlsIP": "",
  293. "ProxyIP": "::ffff:6810:336f",
  294. "ProxyPort": "80",
  295. "Info": "Proxy"
  296. },
  297. {
  298. "Name": "VIVO TODAS APN FLARE [2]",
  299. "FLAG": "vivo",
  300. "Payload": "GET / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  301. "SNI": "",
  302. "TlsIP": "",
  303. "ProxyIP": "support.launchdarkly.com",
  304. "ProxyPort": "80",
  305. "Info": "Proxy"
  306. },
  307. {
  308. "Name": "VIVO SSL RAPIDO💗 1",
  309. "FLAG": "vivo",
  310. "Payload": "ACL wss://lojaempresas.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  311. "SNI": "lojaempresas.vivo.com.br",
  312. "TlsIP": "104.18.7.80",
  313. "ProxyIP": "",
  314. "ProxyPort": "443",
  315. "Info": "Tlsws"
  316. },
  317. {
  318. "Name": "VIVO SSL RAPIDO 2",
  319. "FLAG": "vivo",
  320. "Payload": "MKCOL /? compre.vivo.com.br/ HTTP/1.0[lf]Host: silvain.norvaera.com\nUpgrade: sshplus\nConnection: Keep-Alive\nUser-Agent:*\n\n",
  321. "SNI": "br.srjesusteama.online",
  322. "TlsIP": "104.16.53.111",
  323. "ProxyIP": "",
  324. "ProxyPort": "443",
  325. "Info": "Tlsws"
  326. },
  327. {
  328. "Name": "VIVO MODO AVIAO 1",
  329. "FLAG": "vivo",
  330. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  331. "SNI": "",
  332. "TlsIP": "",
  333. "ProxyIP": "104.16.53.111",
  334. "ProxyPort": "80",
  335. "Info": "Proxy"
  336. },
  337. {
  338. "Name": "VIVO MODO AVIAO 2",
  339. "FLAG": "vivo",
  340. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  341. "SNI": "",
  342. "TlsIP": "",
  343. "ProxyIP": "104.16.51.111",
  344. "ProxyPort": "80",
  345. "Info": "Proxy"
  346. },
  347. {
  348. "Name": "VIVO MODO AVIAO 3",
  349. "FLAG": "vivo",
  350. "Payload": "SERVICE-BASELINE / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  351. "SNI": "",
  352. "TlsIP": "",
  353. "ProxyIP": "104.16.53.111",
  354. "ProxyPort": "80",
  355. "Info": "Proxy"
  356. },
  357. {
  358. "Name": "VIVO MODO AVIAO 4",
  359. "FLAG": "vivo",
  360. "Payload": "SERVICE-BASELINE / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  361. "SNI": "",
  362. "TlsIP": "",
  363. "ProxyIP": "104.16.51.111",
  364. "ProxyPort": "80",
  365. "Info": "Proxy"
  366. },
  367. {
  368. "Name": "🟣VIVO EASY [01]🟣",
  369. "FLAG": "vivo",
  370. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  371. "SNI": "",
  372. "TlsIP": "",
  373. "ProxyIP": "104.18.6.80",
  374. "ProxyPort": "80",
  375. "Info": "Proxy"
  376. },
  377. {
  378. "Name": "🟣VIVO EASY - [02]🟣",
  379. "FLAG": "vivo",
  380. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  381. "SNI": "",
  382. "TlsIP": "",
  383. "ProxyIP": "104.18.7.80",
  384. "ProxyPort": "80",
  385. "Info": "Proxy"
  386. },
  387. {
  388. "Name": "🟣VIVO EASY - [03]🟣",
  389. "FLAG": "vivo",
  390. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  391. "SNI": "",
  392. "TlsIP": "",
  393. "ProxyIP": "104.18.6.41",
  394. "ProxyPort": "80",
  395. "Info": "Proxy"
  396. },
  397. {
  398. "Name": "🟣VIVO EASY - [04]🟣",
  399. "FLAG": "vivo",
  400. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  401. "SNI": "",
  402. "TlsIP": "",
  403. "ProxyIP": "104.18.7.41",
  404. "ProxyPort": "80",
  405. "Info": "Proxy"
  406. },
  407. {
  408. "Name": "🟣 VIVO EASY - [05]🟣",
  409. "FLAG": "vivo",
  410. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  411. "SNI": "",
  412. "TlsIP": "",
  413. "ProxyIP": "104.16.51.111",
  414. "ProxyPort": "80",
  415. "Info": "Proxy"
  416. },
  417. {
  418. "Name": "🟣 VIVO EASY - [06]🟣",
  419. "FLAG": "vivo",
  420. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  421. "SNI": "",
  422. "TlsIP": "",
  423. "ProxyIP": "104.16.52.111",
  424. "ProxyPort": "80",
  425. "Info": "Proxy"
  426. },
  427. {
  428. "Name": "🟣 VIVO EASY - [07]🟣",
  429. "FLAG": "vivo",
  430. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  431. "SNI": "",
  432. "TlsIP": "",
  433. "ProxyIP": "104.16.54.111",
  434. "ProxyPort": "80",
  435. "Info": "Proxy"
  436. },
  437. {
  438. "Name": "🔷TIM FAMILIAVPN BR 1",
  439. "FLAG": "tim",
  440. "Payload": "ACL / HTTP/1.9[crlf]host: celular.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  441. "SNI": "104.16.239.166",
  442. "TlsIP": "104.16.239.166",
  443. "ProxyIP": "104.16.239.166",
  444. "ProxyPort": "80",
  445. "Info": "Proxy"
  446. },
  447. {
  448. "Name": "🔷TIM FAMILIAVPN BR 2",
  449. "FLAG": "tim",
  450. "Payload": "split]ACL / HTTP/1.1[crlf]host: app.sandbox.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  451. "SNI": "",
  452. "TlsIP": "",
  453. "ProxyIP": "104.16.239.166",
  454. "ProxyPort": "80",
  455. "Info": "Proxy"
  456. },
  457. {
  458. "Name": "🔷TIM FAMILIAVPN BR 3",
  459. "FLAG": "tim",
  460. "Payload": "CONNECT /cdn-cgi/trace HTTP/1.9[lf]Host: creatorsupport.deezer.com[lf][lf][split][lf][lf]PCVPN / HTTP/1.1[lf]Host: silvain.norvaera.com[lf]Upgrade: websocket[lf][lf]",
  461. "SNI": "www.claro.com.br",
  462. "TlsIP": "",
  463. "ProxyIP": "104.17.64.225",
  464. "ProxyPort": "80",
  465. "Info": "Proxy"
  466. },
  467. {
  468. "Name": "🔷TIM FAMILIAVPN BR 4",
  469. "FLAG": "tim",
  470. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  471. "SNI": "",
  472. "TlsIP": "",
  473. "ProxyIP": "pre-onboarding-p.c6bank.app",
  474. "ProxyPort": "80",
  475. "Info": "Proxy"
  476. },
  477. {
  478. "Name": "🔷TIM FAMILIAVPN BR 5",
  479. "FLAG": "tim",
  480. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  481. "SNI": "[app_host]",
  482. "TlsIP": "",
  483. "ProxyIP": "mtls.sandbox.c6bank.com.br",
  484. "ProxyPort": "80",
  485. "Info": "Proxy"
  486. },
  487. {
  488. "Name": "🔷TIM FAMILIAVPN BR 6",
  489. "FLAG": "tim",
  490. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  491. "SNI": "[app_host]",
  492. "TlsIP": "",
  493. "ProxyIP": "api.sandbox.c6bank.com.br",
  494. "ProxyPort": "80",
  495. "Info": "Proxy"
  496. },
  497. {
  498. "Name": "🔷TIM FAMILIAVPN BR 7",
  499. "FLAG": "tim",
  500. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  501. "SNI": "",
  502. "TlsIP": "",
  503. "ProxyIP": "mobile.c6bank.app",
  504. "ProxyPort": "80",
  505. "Info": "Proxy"
  506. },
  507. {
  508. "Name": "🔷TIM FAMILIAVPN BR 8",
  509. "FLAG": "tim",
  510. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  511. "SNI": "",
  512. "TlsIP": "",
  513. "ProxyIP": "104.17.64.225",
  514. "ProxyPort": "80",
  515. "Info": "Proxy"
  516. },
  517. {
  518. "Name": "🔷TIM FAMILIAVPN BR 9",
  519. "FLAG": "tim",
  520. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  521. "SNI": "",
  522. "TlsIP": "",
  523. "ProxyIP": "104.18.33.113",
  524. "ProxyPort": "80",
  525. "Info": "Proxy"
  526. },
  527. {
  528. "Name": "🔷TIM FAMILIAVPN BR 10",
  529. "FLAG": "tim",
  530. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  531. "SNI": "",
  532. "TlsIP": "",
  533. "ProxyIP": "172.64.154.143",
  534. "ProxyPort": "80",
  535. "Info": "Proxy"
  536. },
  537. {
  538. "Name": "🔷TIM FAMILIAVPN BR 11",
  539. "FLAG": "tim",
  540. "Payload": "GET / HTTP/1.1\nHost:[rotate=support.deezer.com;workplaceservices.surveymonkey.com;duvidas.ampli.com.br]\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  541. "SNI": "",
  542. "TlsIP": "",
  543. "ProxyIP": "support.deezer.com",
  544. "ProxyPort": "80",
  545. "Info": "Proxy"
  546. },
  547. {
  548. "Name": "🔷TIM FAMILIAVPN BR 12",
  549. "FLAG": "tim",
  550. "Payload": "GET / HTTP/1.1\nHost: cms-assets-p.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  551. "SNI": "",
  552. "TlsIP": "104.19.239.25",
  553. "ProxyIP": "104.19.239.25",
  554. "ProxyPort": "80",
  555. "Info": "Proxy"
  556. },
  557. {
  558. "Name": "🔷TIM FAMILIAVPN BR 13",
  559. "FLAG": "tim",
  560. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  561. "SNI": "",
  562. "TlsIP": "",
  563. "ProxyIP": "172.64.154.143",
  564. "ProxyPort": "80",
  565. "Info": "Proxy"
  566. },
  567. {
  568. "Name": "🔷TIM FAMILIAVPN BR 14",
  569. "FLAG": "tim",
  570. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  571. "SNI": "",
  572. "TlsIP": "",
  573. "ProxyIP": "104.17.64.225",
  574. "ProxyPort": "80",
  575. "Info": "Proxy"
  576. },
  577. {
  578. "Name": "🔵TIM [TORRE 01]",
  579. "FLAG": "tim",
  580. "Payload": "CONNECT / HTTP/1.1[crlf]Host: [rotate=apptest.c6bank.com.br;api.sandbox.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]MOVE- /?/ HTTP/1.1[crlf]Host: br.srjesusteama.online[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  581. "SNI": "",
  582. "TlsIP": "104.16.53.111",
  583. "ProxyIP": "104.16.53.111",
  584. "ProxyPort": "80",
  585. "Info": "Direct"
  586. },
  587. {
  588. "Name": "🔵TIM [TORRE 02]",
  589. "FLAG": "tim",
  590. "Payload": "DELETE / HTTP/1.1[crlf]Host: [rotate=apptest.c6bank.com.br;api.sandbox.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]MOVE- /?/ HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  591. "SNI": "",
  592. "TlsIP": "dataacademy.descomplica.com.br",
  593. "ProxyIP": "104.19.242.25",
  594. "ProxyPort": "80",
  595. "Info": "Direct"
  596. },
  597. {
  598. "Name": "🔵TIM [TORRE 03]",
  599. "FLAG": "tim",
  600. "Payload": "CONNECT / HTTP/1.1[crlf]Host: [rotate=apptest.c6bank.com.br;api.sandbox.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]MOVE- /?/ HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  601. "SNI": "",
  602. "TlsIP": "104.19.242.25",
  603. "ProxyIP": "104.16.53.111",
  604. "ProxyPort": "80",
  605. "Info": "Direct"
  606. },
  607. {
  608. "Name": "🔵TIM [TORRE 04]",
  609. "FLAG": "tim",
  610. "Payload": "DELETE / HTTP/1.1[crlf]Host: [rotate=apptest.c6bank.com.br;api.sandbox.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]POLL- /?/ HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  611. "SNI": "",
  612. "TlsIP": "dataacademy.descomplica.com.br",
  613. "ProxyIP": "104.19.241.25",
  614. "ProxyPort": "80",
  615. "Info": "Direct"
  616. },
  617. {
  618. "Name": "🔵TIM [TORRE 05]",
  619. "FLAG": "tim",
  620. "Payload": "CONNECT / HTTP/1.9[crlf]host: cloud.mail.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  621. "SNI": "",
  622. "TlsIP": "",
  623. "ProxyIP": "104.16.51.111",
  624. "ProxyPort":"80",
  625. "Info": "Proxy"
  626. },
  627. {
  628. "Name": "🔵TIM [TORRE 06]",
  629. "FLAG": "tim",
  630. "Payload": "CONNECT / HTTP/1.9[crlf]host: [random=image.mail.c6bank.com.br;cloud.mail.c6bank.com.br;cloud.mail.c6bank.com.br;creatorsupport.deezer.com;checkv.c6bank.app;landing.stoodi.com.br;www.c6bank.app;cdn.c6bank.com.br;cdn.c6bank.com.br;c6bank.com.br;cms-assets-p.c6bank.com.br;helpypro.stoodi.com.br;blog.c6bank.com.br;ajuda.c6bank.com.br;image.mail.c6bank.com.br;terms.c6bank.com.br;assets-sf.c6bank.com.br;mobile.hom.c6bank.app][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://chat.whatsapp.com [crlf]Referer: https://ssh.geralnet.com.br/ [crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  631. "SNI": "",
  632. "TlsIP": "",
  633. "ProxyIP": "104.19.241.25",
  634. "ProxyPort":"80",
  635. "Info": "Proxy"
  636. },
  637. {
  638. "Name": "🔵TIM [TORRE 07]",
  639. "FLAG": "tim",
  640. "Payload": "CONNECT /cdn-cgi/trace HTTP/1.1[crlf]Host: descomplica.com.br[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]",
  641. "SNI": "",
  642. "TlsIP": "",
  643. "ProxyIP": "104.19.241.93",
  644. "ProxyPort":"80",
  645. "Info": "Proxy"
  646. },
  647. {
  648. "Name": "🔵TIM [TORRE 08]",
  649. "FLAG": "tim",
  650. "Payload": "GET /cdn-cgi/trace HTTP/1.1[crlf]Host: wtaphf.descomplica.com.br[crlf][crlf][crlf][crlf]PUT- / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]",
  651. "SNI": "",
  652. "TlsIP": "",
  653. "ProxyIP": "104.19.241.93",
  654. "ProxyPort":"80",
  655. "Info": "Proxy"
  656. },
  657. {
  658. "Name": "TIM MODO AVIÃO 01",
  659. "FLAG": "tim",
  660. "Payload": "[split]ACL / HTTP/1.9[crlf]Host: apptest2.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.9[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  661. "SNI": "",
  662. "TlsIP": "",
  663. "ProxyIP": "104.16.239.166",
  664. "ProxyPort": "80",
  665. "Info": "Proxy"
  666. },
  667. {
  668. "Name": "TIM MODO AVIÃO 02",
  669. "FLAG": "tim",
  670. "Payload": "[split]ACL / HTTP/1.1[crlf]host: app.sandbox.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  671. "SNI": "",
  672. "TlsIP": "",
  673. "ProxyIP": "104.16.239.166",
  674. "ProxyPort": "80",
  675. "Info": "Proxy"
  676. },
  677. {
  678. "Name": "TIM SALDO VALIDO 01",
  679. "FLAG": "tim",
  680. "Payload": "CONNECT /cdn-cgi/trace HTTP/1.1[lf]Host: creatorsupport.deezer.com[lf][lf][split][lf][lf]PCVPN / HTTP/1.1[lf]Host: silvain.norvaera.com[lf]Upgrade: websocket[lf][lf]",
  681. "SNI": "",
  682. "TlsIP": "",
  683. "ProxyIP": "104.17.64.225",
  684. "ProxyPort": "80",
  685. "Info": "Proxy"
  686. },
  687. {
  688. "Name": "TIM VALIDO DDS",
  689. "FLAG": "tim",
  690. "Payload": "CONNECT / HTTP/1.9[crlf]Host: celular.c6bank.app[crlf]Expect: 200-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.9[crlf]Host: silvain.norvaera.com[crlf]Upgrade: Websocket[crlf]Referer: timbrasil.com.br[crlf][crlf]",
  691. "SNI": "",
  692. "TlsIP": "",
  693. "ProxyIP": "104.19.242.25",
  694. "ProxyPort": "80",
  695. "Info": "Proxy"
  696. },
  697. {
  698. "Name": "TIM NOVA",
  699. "FLAG": "tim",
  700. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  701. "SNI": "",
  702. "TlsIP": "",
  703. "ProxyIP": "mtls.sandbox.c6bank.com.br",
  704. "ProxyPort": "80",
  705. "Info": "Proxy"
  706. },
  707. {
  708. "Name": "TIM SALDO VALIDO 03",
  709. "FLAG": "tim",
  710. "Payload": "[split]ACL / HTTP/1.9[crlf]host: app.sandbox.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  711. "SNI": "",
  712. "TlsIP": "",
  713. "ProxyIP": "104.18.33.113",
  714. "ProxyPort": "80",
  715. "Info": "Proxy"
  716. },
  717. {
  718. "Name": "TIM NOVA 03",
  719. "FLAG": "tim",
  720. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf]BASELINE-CONTROL / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]_BASELINE-CONTROL wss://mobile.c6bank.app/ HTTP/1.1[crlf]Host: app12.twonet.tech[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  721. "SNI": "",
  722. "TlsIP": "",
  723. "ProxyIP": "104.18.28.182",
  724. "ProxyPort": "80",
  725. "Info": "Proxy"
  726. },
  727. {
  728. "Name": "TIM NOVA 04",
  729. "FLAG": "tim",
  730. "Payload": "CONNECT / HTTP/1.9[crlf]host: blog.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [random=silvain.norvaera.com][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  731. "SNI": "",
  732. "TlsIP": "",
  733. "ProxyIP": "104.18.33.113",
  734. "ProxyPort": "80",
  735. "Info": "Proxy"
  736. },
  737. {
  738. "Name": "TIM NOVA 05",
  739. "FLAG": "tim",
  740. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  741. "SNI": "",
  742. "TlsIP": "",
  743. "ProxyIP": "104.19.239.25",
  744. "ProxyPort": "80",
  745. "Info": "Proxy"
  746. },
  747. {
  748. "Name": "TIM NOVA 06",
  749. "FLAG": "tim",
  750. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  751. "SNI": "",
  752. "TlsIP": "",
  753. "ProxyIP": "172.64.154.143",
  754. "ProxyPort": "80",
  755. "Info": "Proxy"
  756. },
  757. {
  758. "Name": "TIM VALIDO 01",
  759. "FLAG": "tim",
  760. "Payload": "CONNECT / HTTP/1.1[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL // HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  761. "SNI": "",
  762. "TlsIP": "",
  763. "ProxyIP": "104.18.33.113",
  764. "ProxyPort": "80",
  765. "Info": "Proxy"
  766. },
  767. {
  768. "Name": "TIM VALIDO 02",
  769. "FLAG": "tim",
  770. "Payload": "CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  771. "SNI": "",
  772. "TlsIP": "",
  773. "ProxyIP": "104.18.98.70",
  774. "ProxyPort": "80",
  775. "Info": "Proxy"
  776. },
  777. {
  778. "Name": "TIM VALIDO 03",
  779. "FLAG": "tim",
  780. "Payload": "CONNECT / HTTP/1.1[crlf]Host: saas-h.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  781. "SNI": "",
  782. "TlsIP": "",
  783. "ProxyIP": "104.18.27.160",
  784. "ProxyPort": "80",
  785. "Info": "Proxy"
  786. },
  787. {
  788. "Name": "TIM 04",
  789. "FLAG": "tim",
  790. "Payload": "ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  791. "SNI": "",
  792. "TlsIP": "",
  793. "ProxyIP": "104.19.239.25",
  794. "ProxyPort": "80",
  795. "Info": "Proxy"
  796. },
  797. {
  798. "Name": "TIM VALIDO 06",
  799. "FLAG": "tim",
  800. "Payload": "GET / HTTP/1.1nHost: api.sandbox.c6bank.com.brnExpect: 100-continuenn[split]nnACL /?/ HTTP/1.1nHost: [random=silvain.norvaera.com]nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  801. "SNI": "",
  802. "TlsIP": "",
  803. "ProxyIP": "104.18.28.182",
  804. "ProxyPort": "80",
  805. "Info": "Proxy"
  806. },
  807. {
  808. "Name": "PROVEDOR TIM 01",
  809. "FLAG": "tim",
  810. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf]BASELINE-CONTROL / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Expect: 100-continue[crlf]_BASELINE-CONTROL wss://mobile.c6bank.app/ HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  811. "SNI": "",
  812. "TlsIP": "",
  813. "ProxyIP": "104.18.28.182",
  814. "ProxyPort": "80",
  815. "Info": "Proxy"
  816. },
  817. {
  818. "Name": "",
  819. "FLAG": "",
  820. "Payload": "",
  821. "SNI": "",
  822. "TlsIP": "",
  823. "ProxyIP": "",
  824. "ProxyPort": "80",
  825. "Info": ""
  826. },
  827. {
  828. "Name": "TIM DIRECT 01",
  829. "FLAG": "tim",
  830. "Payload": "ACL / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Upgrade: websocket[crlf][crlf]",
  831. "SNI": "",
  832. "TlsIP": "",
  833. "ProxyIP": "104.16.239.166",
  834. "ProxyPort": "80",
  835. "Info": "Proxy"
  836. },
  837. {
  838. "Name": "TIM DIRECT 02",
  839. "FLAG": "tim",
  840. "Payload": "ACL / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Upgrade: websocket[crlf][crlf]",
  841. "SNI": "",
  842. "TlsIP": "",
  843. "ProxyIP": "104.16.239.3",
  844. "ProxyPort": "80",
  845. "Info": "Proxy"
  846. },
  847. {
  848. "Name": "TIM DIRECT 03",
  849. "FLAG": "tim",
  850. "Payload": "ACL / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Upgrade: websocket[crlf][crlf]",
  851. "SNI": "",
  852. "TlsIP": "",
  853. "ProxyIP": "unpkg.com",
  854. "ProxyPort": "80",
  855. "Info": "Proxy"
  856. },
  857. {
  858. "Name": "",
  859. "FLAG": "",
  860. "Payload": "",
  861. "SNI": "",
  862. "TlsIP": "",
  863. "ProxyIP": "",
  864. "ProxyPort": "80",
  865. "Info": ""
  866. },
  867. {
  868. "Name": "TIM SALDO EXPIRADO 01",
  869. "FLAG": "tim",
  870. "Payload": "[protocol][crlf] [crlf][crlf]@",
  871. "SNI": "",
  872. "TlsIP": "",
  873. "ProxyIP": "209.14.84.31",
  874. "ProxyPort": "80",
  875. "Info": "Proxy"
  876. },
  877. {
  878. "Name": "TIM SALDO EXPIRADO 02",
  879. "FLAG": "tim",
  880. "Payload": "HTTP/ [crlf][crlf]|[crlf]]]",
  881. "SNI": "",
  882. "TlsIP": "",
  883. "ProxyIP": "209.14.84.31",
  884. "ProxyPort": "80",
  885. "Info": "Proxy"
  886. },
  887. {
  888. "Name": "TIM SALDO EXPIRADO 03",
  889. "FLAG": "tim",
  890. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  891. "SNI": "",
  892. "TlsIP": "",
  893. "ProxyIP": "209.14.84.31",
  894. "ProxyPort": "80",
  895. "Info": "Proxy"
  896. },
  897. {
  898. "Name": "TIM SALDO EXPIRADO 04",
  899. "FLAG": "tim",
  900. "Payload": "MERGE mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]",
  901. "SNI": "",
  902. "TlsIP": "",
  903. "ProxyIP": "209.14.84.31",
  904. "ProxyPort": "80",
  905. "Info": "Proxy"
  906. },
  907. {
  908. "Name": "TIM SALDO EXPIRADO 05",
  909. "FLAG": "tim",
  910. "Payload": "PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]",
  911. "SNI": "",
  912. "TlsIP": "",
  913. "ProxyIP": "209.14.84.31",
  914. "ProxyPort": "80",
  915. "Info": "Proxy"
  916. },
  917. {
  918. "Name": "TIM SALDO EXPIRADO 06",
  919. "FLAG": "tim",
  920. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  921. "SNI": "",
  922. "TlsIP": "",
  923. "ProxyIP": "209.14.84.31",
  924. "ProxyPort": "80",
  925. "Info": "Proxy"
  926. },
  927. {
  928. "Name": "TIM SALDO EXPIRADO 07",
  929. "FLAG": "tim",
  930. "Payload": "MOVE HTTP/1.1[lf]Host:pt.foursquare.com/v/vivo-portal-celulares/519cd8a3498e55a588aa93c1[lf][lf]",
  931. "SNI": "",
  932. "TlsIP": "",
  933. "ProxyIP": "209.14.84.31",
  934. "ProxyPort": "80",
  935. "Info": "Proxy"
  936. },
  937. {
  938. "Name": "TIM SALDO EXPIRADO 08",
  939. "FLAG": "tim",
  940. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  941. "SNI": "",
  942. "TlsIP": "",
  943. "ProxyIP": "209.14.84.31",
  944. "ProxyPort": "80",
  945. "Info": "Proxy"
  946. },
  947. {
  948. "Name": "[01] | TIM BR - Válido 📶",
  949. "FLAG": "tim",
  950. "Payload": "CONNECT / HTTP/1.9[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: br.srjesusteama.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  951. "SNI": "",
  952. "TlsIP": "",
  953. "ProxyIP": "104.19.242.25",
  954. "ProxyPort": "80",
  955. "Info": "Proxy"
  956. },
  957. {
  958. "Name": "[02] | TIM BR - Válido 📶",
  959. "FLAG": "tim",
  960. "Payload": "CONNECT / HTTP/1.9[crlf]host: ajuda.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  961. "SNI": "",
  962. "TlsIP": "",
  963. "ProxyIP": "104.19.239.25",
  964. "ProxyPort": "80",
  965. "Info": "Proxy"
  966. },
  967. {
  968. "Name": "[03] | TIM BR - Válido 📶",
  969. "FLAG": "tim",
  970. "Payload": "CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: silvain.norvaera.com[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  971. "SNI": "",
  972. "TlsIP": "",
  973. "ProxyIP": "104.19.240.25",
  974. "ProxyPort": "80",
  975. "Info": "Proxy"
  976. },
  977. {
  978. "Name": "[04] | TIM BR - Válido 📶",
  979. "FLAG": "tim",
  980. "Payload": "CONNECT / HTTP/1.1[lf]Host: www.c6bank.app[lf][lf][split][lf]BCOPY / HTTP/1.1[crlf]Host: silvain.norvaera.com[lf]Upgrade: Websocket[crlf]Connection: keep-alive-Upgrade-Insecure-Requests[lf]Upgrade: websocket[lf]TSTOPSPEED[lf][lf]",
  981. "SNI": "",
  982. "TlsIP": "",
  983. "ProxyIP": "104.19.240.25",
  984. "ProxyPort": "80",
  985. "Info": "Proxy"
  986. },
  987. {
  988. "Name": "[05] | TIM BR - Válido 📶",
  989. "FLAG": "tim",
  990. "Payload": "CONNECT /close/ HTTP/1.1[lf]Host: support.deezer.com[lf][lf][split][lf]GET-TOPSPEED / HTTP/1.1[crlf]Host: silvain.norvaera.com[lf]Upgrade: Websocket[crlf]Connection: keep-alive-Upgrade-Insecure-Requests[lf]Upgrade: websocket[lf]TSTOPSPEED[lf][lf]",
  991. "SNI": "",
  992. "TlsIP": "",
  993. "ProxyIP": "104.19.240.25",
  994. "ProxyPort": "80",
  995. "Info": "Proxy"
  996. },
  997. {
  998. "Name": "[06] | TIM BR - Válido 📶",
  999. "FLAG": "tim",
  1000. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: silvain.norvaera.com[crlf]Upgrade: Websocket[crlf][crlf]",
  1001. "SNI": "",
  1002. "TlsIP": "",
  1003. "ProxyIP": "104.19.239.25",
  1004. "ProxyPort": "80",
  1005. "Info": "Proxy"
  1006. },
  1007. {
  1008. "Name": "Tim Expirado 1",
  1009. "FLAG": "tim",
  1010. "Payload": "PROPPATCH http://mercadolivre.com.br HTTP/2[crlf]Host: http://mercadolivre.com.br[crlf]",
  1011. "SNI": "",
  1012. "TlsIP": "",
  1013. "ProxyIP": "209.14.84.31",
  1014. "ProxyPort": "80",
  1015. "Info": "Proxy"
  1016. },
  1017. {
  1018. "Name": "Tim Expirado 2",
  1019. "FLAG": "tim",
  1020. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  1021. "SNI": "209.14.84.31",
  1022. "TlsIP": "209.14.84.31",
  1023. "ProxyIP": "209.14.84.31",
  1024. "ProxyPort": "80",
  1025. "Info": "Proxy"
  1026. },
  1027. {
  1028. "Name": "Tim Expirado 3",
  1029. "FLAG": "tim",
  1030. "Payload": "GET ssl://silvain.norvaera.com HTTP/1.1[crlf]Host: [app_host]: Websocket[crlf][crlf]",
  1031. "SNI": "",
  1032. "TlsIP": "",
  1033. "ProxyIP": "209.14.84.31",
  1034. "ProxyPort": "80",
  1035. "Info": " Proxy"
  1036. },
  1037. {
  1038. "Name": "Tim Expirado 4",
  1039. "FLAG": "tim",
  1040. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  1041. "SNI": "209.14.84.31",
  1042. "TlsIP": "209.14.84.31",
  1043. "ProxyIP": "209.14.84.31",
  1044. "ProxyPort": "80",
  1045. "Info": "Proxy"
  1046. },
  1047. {
  1048. "Name": "Tim Expirado 5",
  1049. "FLAG": "tim",
  1050. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  1051. "SNI": "",
  1052. "TlsIP": "",
  1053. "ProxyIP": "209.14.84.31",
  1054. "ProxyPort": "80",
  1055. "Info": "Proxy"
  1056. },
  1057. {
  1058. "Name": "Tim Expirado 6",
  1059. "FLAG": "tim",
  1060. "Payload": "ACL https://www.google.com.br HTTP/1.1 [crlf]Host: https://www.google.com[crlf]",
  1061. "SNI": "",
  1062. "TlsIP": "",
  1063. "ProxyIP": "209.14.84.31",
  1064. "ProxyPort": "80",
  1065. "Info": "Proxy"
  1066. },
  1067. {
  1068. "Name": "Tim Expirado 7",
  1069. "FLAG": "tim",
  1070. "Payload": "ACL https://www.google.com.br HTTP/1.1 [crlf]Host: https://www.google.com[crlf]",
  1071. "SNI": "www.google.com.br",
  1072. "TlsIP": "www.google.com.br",
  1073. "ProxyIP": "209.14.84.31",
  1074. "ProxyPort": "80",
  1075. "Info": "Proxy"
  1076. },
  1077. {
  1078. "Name": "Tim Expirado 8",
  1079. "FLAG": "tim",
  1080. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  1081. "SNI": "209.14.84.31",
  1082. "TlsIP": "209.14.84.31",
  1083. "ProxyIP": "209.14.84.31",
  1084. "ProxyPort": "80",
  1085. "Info": "Proxy"
  1086. },
  1087. {
  1088. "Name": "[CLARO] [ PREZÃO ] [ WHATSAPP ] ",
  1089. "FLAG": "claro",
  1090. "Payload": "",
  1091. "SNI": "api.whatsapp.com",
  1092. "TlsIP": "209.14.84.31",
  1093. "ProxyIP": "",
  1094. "ProxyPort": "",
  1095. "Info": "Ssl"
  1096. },
  1097. {
  1098. "Name": "[CLARO] [ PREZÃO ] [ ARCADE ]",
  1099. "FLAG": "claro",
  1100. "Payload": "",
  1101. "SNI": "arcade.giphy.com",
  1102. "TlsIP": "209.14.84.31",
  1103. "ProxyIP": "",
  1104. "ProxyPort": "",
  1105. "Info": "Ssl"
  1106. },
  1107. {
  1108. "Name": "Claro PLANOS",
  1109. "FLAG": "claro",
  1110. "Payload": "",
  1111. "SNI": "whatsapp.com",
  1112. "TlsIP": "209.14.84.31",
  1113. "ProxyIP": "",
  1114. "ProxyPort": "443",
  1115. "Info": "Ssl"
  1116. },
  1117. {
  1118. "Name": "Claro FLEX",
  1119. "FLAG": "claro",
  1120. "Payload": "",
  1121. "SNI": "m.waze.com",
  1122. "TlsIP": "209.14.84.31",
  1123. "ProxyIP": "",
  1124. "ProxyPort": "443",
  1125. "Info": "Ssl"
  1126. }
  1127. ]
  1128. }
comments powered by Disqus