WsSecurity VPN


SUBMITTED BY: Willy2023

DATE: July 1, 2023, 5:19 p.m.

UPDATED: Sept. 2, 2023, 1:29 a.m.

FORMAT: Text only

SIZE: 40.2 kB

HITS: 6124

  1. {
  2. "Version": "09.6.8b",
  3. "ReleaseNotes": "NOVA ATUALIZAÇÃO DISPONIVEL,,, SEJA BEM-VINDO A WsSecurity!!
  4. ,,, Conexão restabelecida",
  5. "UrlUpdate": "https://bitbin.it/Tw4QwBi9/raw/",
  6. "Sms": " http",
  7. "Bem Vindo (A)": "",
  8. "": "http",
  9. "UrlTermos": "",
  10. "CheckUser": "true",
  11. "Udp": [
  12. {
  13. "Porta":"7100"
  14. },
  15. {
  16. "Porta":"7200"
  17. },
  18. {
  19. "Porta":"7300"
  20. },
  21. {
  22. "Porta":"7400"
  23. },
  24. {
  25. "Porta":"7500"
  26. },
  27. {
  28. "Porta":"7600"
  29. },
  30. {
  31. "Porta":"7700"
  32. }
  33. ],
  34. "Servers": [
  35. {
  36. "Name": "Servidor WsSecurity",
  37. "TYPE": "premium",
  38. "FLAG": "br.png",
  39. "ServerIP": "int.worspite.tk ",
  40. "CheckUser":"http://192.53.121.179:43/checkUser",
  41. "ServerPort": "22",
  42. "SSLPort": "443",
  43. "USER": "",
  44. "PASS": "" }
  45. ],
  46. "Networks": [
  47. {
  48. "Version": "09.6.8b",
  49. "ReleaseNotes": "NOVA ATUALIZAÇÃO DISPONIVEL,,, SEJA BEM-VINDO A WsSecurity!!
  50. ,,, Conexão restabelecida",
  51. "UrlUpdate": "https://bitbin.it/Tw4QwBi9/raw/",
  52. "Sms": " http",
  53. "Bem Vindo (A)": "",
  54. "": "http",
  55. "UrlTermos": "",
  56. "CheckUser": "true",
  57. "Udp": [
  58. {
  59. "Porta":"7100"
  60. },
  61. {
  62. "Porta":"7200"
  63. },
  64. {
  65. "Porta":"7300"
  66. },
  67. {
  68. "Porta":"7400"
  69. },
  70. {
  71. "Porta":"7500"
  72. },
  73. {
  74. "Porta":"7600"
  75. },
  76. {
  77. "Porta":"7700"
  78. }
  79. ],
  80. "Servers": [
  81. {
  82. "Name": "Servidor WsSecurity",
  83. "TYPE": "premium",
  84. "FLAG": "br.png",
  85. "ServerIP": "int.worspite.tk ",
  86. "CheckUser":"http://192.53.121.179:43/checkUser",
  87. "ServerPort": "22",
  88. "SSLPort": "443",
  89. "USER": "",
  90. "PASS": "" }
  91. ],
  92. "Networks": [
  93. {
  94. "Name": "VIVO PRÉ [01]",
  95. "FLAG": "vivo",
  96. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  97. "TlsIP": "",
  98. "ProxyIP": "186.233.118.161",
  99. "ProxyPort": "80",
  100. "Info": "Proxy"
  101. },
  102. {
  103. "Name": "🟣VIVO/Tim Speed",
  104. "FLAG": "vivo/t",
  105. "Payload": "GET / HTTP/1.1[crlf]Host:app.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host] [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  106. "SNI": "",
  107. "TlsIP": "",
  108. "ProxyIP": "104.16.53.111",
  109. "ProxyPort": "80",
  110. "Info": "Proxy"
  111. },
  112. {
  113. "Name": "🟣 PRE/ EASY & PLANOS 1",
  114. "FLAG": "vivo",
  115. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  116. "SNI": "",
  117. "TlsIP": "",
  118. "ProxyIP": "104.16.51.111",
  119. "ProxyPort": "80",
  120. "Info": "Proxy"
  121. },
  122. {
  123. "Name": "🟣VIVO KID",
  124. "FLAG": "vivo",
  125. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  126. "SNI": "",
  127. "TlsIP": "",
  128. "ProxyIP": "104.16.51.111",
  129. "ProxyPort": "80",
  130. "Info": "Proxy"
  131. },
  132. {
  133. "Name": "🟣VIVO ATUALIZADO",
  134. "FLAG": "vivo",
  135. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  136. "SNI": "faq.foxbit.com.br",
  137. "TlsIP": "faq.foxbit.com.br",
  138. "ProxyIP": "faq.foxbit.com.br",
  139. "ProxyPort": "80",
  140. "Info": "Proxy"
  141. },
  142. {
  143. "Name": "TIM Security",
  144. "FLAG": "Tim",
  145. "Payload": "GET / HTTP/1.1[crlf]Host:app.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host] [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  146. "SNI": "",
  147. "TlsIP": "",
  148. "ProxyIP": "104.16.53.111",
  149. "ProxyPort": "80",
  150. "Info": "Proxy"
  151. },
  152. {
  153. "Name": "TIM Principal BR 2023",
  154. "FLAG": "tim",
  155. "Payload": "GET / HTTP/1.1[crlf]Host:jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  156. "SNI": "",
  157. "TlsIP": "",
  158. "ProxyIP": "apptest.c6bank.app",
  159. "ProxyPort": "80",
  160. "Info": "Proxy"
  161. },
  162. {
  163. "Name": "TIM Turbo BR 2023",
  164. "FLAG": "tim",
  165. "Payload": "GET / HTTP/1.1[crlf]Host:jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  166. "SNI": "",
  167. "TlsIP": "",
  168. "ProxyIP": "support.jungledisk.com",
  169. "ProxyPort": "80",
  170. "Info": "Proxy"
  171. },
  172. {
  173. "Name": "TIM 01 BR 2023 atualizada",
  174. "FLAG": "tim",
  175. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host:int.worspite.tk[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  176. "SNI": "",
  177. "TlsIP": "",
  178. "ProxyIP": "104.18.27.160",
  179. "ProxyPort": "80",
  180. "Info": "Proxy"
  181. },
  182. {
  183. "Name": "TIM 02 BR 2023 Atualizada",
  184. "FLAG": "tim",
  185. "Payload": "CONNECT / HTTP/1.9[crlf]host: cdna.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Oracle[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  186. "SNI": "",
  187. "TlsIP": "",
  188. "ProxyIP": "104.16.51.111",
  189. "ProxyPort": "80",
  190. "Info": "Proxy"
  191. },
  192. {
  193. "Name": "TIM 03 BR 2023 Atualizada",
  194. "FLAG": "tim",
  195. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: int.worspite.tk[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  196. "SNI": "",
  197. "TlsIP": "",
  198. "ProxyIP": "104.19.239.25",
  199. "ProxyPort": "80",
  200. "Info": "Proxy"
  201. },
  202. {
  203. "Name": "TIM 04 BR 2023 atualizada",
  204. "FLAG": "tim",
  205. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  206. "SNI": "",
  207. "TlsIP": "mobile.c6bank.app",
  208. "ProxyIP": "mobile.c6bank.app",
  209. "ProxyPort": "80",
  210. "Info": "Proxy"
  211. },
  212. {
  213. "Name": "TIM 05 BR 2023",
  214. "FLAG": "tim",
  215. "Payload": "GET / HTTP/1.1[crlf]Host:support.deezer.com
  216. [crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  217. "SNI": "",
  218. "TlsIP": "support.deezer.com",
  219. "ProxyIP": "support.deezer.com",
  220. "ProxyPort": "80",
  221. "Info": "Proxy"
  222. },
  223. {
  224. "Name": "TIM 06 BR 2023",
  225. "FLAG": "tim",
  226. "Payload": "GET / HTTP/1.1[crlf]Host:creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  227. "SNI": "",
  228. "TlsIP": "",
  229. "ProxyIP": "support.migym.com",
  230. "ProxyPort": "80",
  231. "Info": "Proxy"
  232. },
  233. {
  234. "Name": "TIM 07 BR 2023",
  235. "FLAG": "tim",
  236. "Payload": "GET / HTTP/1.1[crlf]Host:support.deezer.com
  237. [crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  238. "SNI": "",
  239. "TlsIP": "104.16.53.111",
  240. "ProxyIP": "104.16.53.111",
  241. "ProxyPort": "8080",
  242. "Info": "Proxy"
  243. },
  244. {
  245. "Name":"TIM 08 BR 2023",
  246. "FLAG":"tim",
  247. "Payload":"BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  248. "SNI":"[app_host]",
  249. "TlsIP":"itsupport.surveymonkey.com",
  250. "ProxyIP":"",
  251. "ProxyPort":"80",
  252. "Info":"proxy"
  253. },
  254. {
  255. "Name": "VIVO Security 01 BR 2023",
  256. "FLAG": "vivo",
  257. "Payload": "delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  258. "SNI": "",
  259. "TlsIP": "",
  260. "ProxyIP": "int.worspite.tk",
  261. "ProxyPort": "80",
  262. "Info": "Proxy"
  263. },
  264. {
  265. "Name": "VIVO Security 02 BR 2023",
  266. "FLAG": "vivo",
  267. "Payload": "ACL HTTP/1.1 Host: plus.google.com \r\n \r\n",
  268. "SNI": "",
  269. "TlsIP": "",
  270. "ProxyIP": "int.worspite.tk",
  271. "ProxyPort": "80",
  272. "Info": "Proxy"
  273. },
  274. {
  275. "Name": "VIVO Security 03 BR 2023",
  276. "FLAG": "vivo",
  277. "Payload": "GET / HTTP/1.1[crlf]Host:csssr.zendesk.com[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  278. "SNI": "",
  279. "TlsIP": "",
  280. "ProxyIP": "int.worspite.tk",
  281. "ProxyPort": "80",
  282. "Info": "Proxy"
  283. },
  284. {
  285. "Name": "VIVO SECURITY 01",
  286. "FLAG": "vivo",
  287. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: [random=vivo.com.br;i.vivo.ddivulga.com;www.portalsva2.vivo.com.br;plus.google.com;mobile.adobe.com][lf]",
  288. "SNI": "",
  289. "TlsIP": "",
  290. "ProxyIP": "192.53.121.179",
  291. "ProxyPort": "8080",
  292. "Info": "Proxy"
  293. },
  294. {
  295. "Name": "VIVO SECURITY 02",
  296. "FLAG": "vivo",
  297. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: [lf]",
  298. "SNI": "",
  299. "TlsIP": "",
  300. "ProxyIP": "192.53.121.179",
  301. "ProxyPort": "8080",
  302. "Info": "Proxy"
  303. },
  304. {
  305. "Name": "VIVO SECURITY 04",
  306. "FLAG": "vivo",
  307. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br[lf]",
  308. "SNI": "",
  309. "TlsIP": "",
  310. "ProxyIP": "192.53.121.179",
  311. "ProxyPort": "8080",
  312. "Info": "Proxy"
  313. },
  314. {
  315. "Name": "VIVO FRONT 01",
  316. "FLAG": "vivo",
  317. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  318. "SNI": "",
  319. "TlsIP": "",
  320. "ProxyIP": "192.53.121.179",
  321. "ProxyPort": "80",
  322. "Info": "Proxy"
  323. },
  324. {
  325. "Name": "VIVO FRONT 02",
  326. "FLAG": "vivo",
  327. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  328. "SNI": "",
  329. "TlsIP": "",
  330. "ProxyIP": "108.158.161.16",
  331. "ProxyPort": "80",
  332. "Info": "Proxy"
  333. },
  334. {
  335. "Name": "VIVO FRONT 03",
  336. "FLAG": "vivo",
  337. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  338. "SNI": "",
  339. "TlsIP": "",
  340. "ProxyIP": "108.158.122.124",
  341. "ProxyPort": "80",
  342. "Info": "Proxy"
  343. },
  344. {
  345. "Name": "VIVO FLARE 01",
  346. "FLAG": "vivo",
  347. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  348. "SNI": "[app_host]",
  349. "TlsIP": "104.16.51.111",
  350. "ProxyIP": "",
  351. "ProxyPort": "443",
  352. "Info": "Tlsws"
  353. },
  354. {
  355. "Name": "VIVO FLARE 02",
  356. "FLAG": "vivo",
  357. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  358. "SNI": "[app_host]",
  359. "TlsIP": "104.16.53.111",
  360. "ProxyIP": "",
  361. "ProxyPort": "443",
  362. "Info": "Tlsws"
  363. },
  364. {
  365. "Name": "VIVO VELOZ 01",
  366. "FLAG": "vivo",
  367. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  368. "SNI": "",
  369. "TlsIP": "",
  370. "ProxyIP": "int.worspite.tk",
  371. "ProxyPort": "80",
  372. "Info": "Proxy"
  373. },
  374. {
  375. "Name": "VIVO VELOZ 020",
  376. "FLAG": "vivo",
  377. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  378. "SNI": "",
  379. "TlsIP": "",
  380. "ProxyIP": "192.53.121.179",
  381. "ProxyPort": "80",
  382. "Info": "Proxy"
  383. },
  384. {
  385. "Name": "VIVO 01 NOVA DDD's",
  386. "FLAG": "vivo",
  387. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  388. "SNI": "",
  389. "TlsIP": "",
  390. "ProxyIP": "108.139.113.33",
  391. "ProxyPort": "80",
  392. "Info": "Proxy"
  393. },
  394. {
  395. "Name": "VIVO 02 NOVA DDD's",
  396. "FLAG": "vivo",
  397. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  398. "SNI": "",
  399. "TlsIP": "",
  400. "ProxyIP": "108.139.113.33",
  401. "ProxyPort": "80",
  402. "Info": "Proxy"
  403. },
  404. {
  405. "Name": "VIVO FLARE IPV6 [01]",
  406. "FLAG": "vivo",
  407. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: [app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  408. "SNI": "",
  409. "TlsIP": "",
  410. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  411. "ProxyPort": "80",
  412. "Info": "Proxy"
  413. },
  414. {
  415. "Name": "VIVO FLARE IPV6 [02]",
  416. "FLAG": "vivo",
  417. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  418. "SNI": "",
  419. "TlsIP": "",
  420. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:7daf",
  421. "ProxyPort": "80",
  422. "Info": "Proxy"
  423. },
  424. {
  425. "Name": "VIVO FRONT IPV6 [01]",
  426. "FLAG": "vivo",
  427. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  428. "SNI": "",
  429. "TlsIP": "",
  430. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6c8b:7781",
  431. "ProxyPort": "80",
  432. "Info": "Proxy"
  433. },
  434. {
  435. "Name": "VIVO FRONT IPV6 [02]",
  436. "FLAG": "vivo",
  437. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  438. "SNI": "",
  439. "TlsIP": "",
  440. "ProxyIP": "0000:0000:0000:0000:0000:ffff:3455:d517",
  441. "ProxyPort": "80",
  442. "Info": "Proxy"
  443. },
  444. {
  445. "Name": "VIVO EASY",
  446. "FLAG": "vivo",
  447. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  448. "SNI": "",
  449. "TlsIP": "",
  450. "ProxyIP": "172.64.144.109",
  451. "ProxyPort": "80",
  452. "Info": "Proxy"
  453. },
  454. {
  455. "Name": "VIVO EASY 01",
  456. "FLAG": "vivo",
  457. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  458. "SNI": "",
  459. "TlsIP": "",
  460. "ProxyIP": "104.18.7.41",
  461. "ProxyPort": "80",
  462. "Info": "Proxy"
  463. },
  464. {
  465. "Name": "VIVO EASY 02",
  466. "FLAG": "vivo",
  467. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  468. "SNI": "",
  469. "TlsIP": "",
  470. "ProxyIP": "104.18.6.80",
  471. "ProxyPort": "80",
  472. "Info": "Proxy"
  473. },
  474. {
  475. "Name": "VIVO EASY 03",
  476. "FLAG": "vivo",
  477. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  478. "SNI": "",
  479. "TlsIP": "",
  480. "ProxyIP": "104.18.6.41",
  481. "ProxyPort": "80",
  482. "Info": "Proxy"
  483. },
  484. {
  485. "Name": "VIVO EASY 04",
  486. "FLAG": "vivo",
  487. "Payload": "BASELINE-CONTROL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  488. "SNI": "",
  489. "TlsIP": "",
  490. "ProxyIP": "104.18.7.80",
  491. "ProxyPort": "80",
  492. "Info": "Proxy"
  493. },
  494. {
  495. "Name": "VIVO EASY 05",
  496. "FLAG": "vivo",
  497. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  498. "SNI": "",
  499. "TlsIP": "",
  500. "ProxyIP": "legado.vivo.com.br",
  501. "ProxyPort": "80",
  502. "Info": "Proxy"
  503. },
  504. {
  505. "Name": "VIVO EASY 06",
  506. "FLAG": "vivo",
  507. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  508. "SNI": "",
  509. "TlsIP": "",
  510. "ProxyIP": "vigia.vivo.com.br",
  511. "ProxyPort": "80",
  512. "Info": "Proxy"
  513. },
  514. {
  515. "Name": "TIM ",
  516. "FLAG": "tim",
  517. "Payload": "GET wss://smainfo.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  518. "SNI": "smainfo.surveymonkey.com",
  519. "TlsIP": "smainfo.surveymonkey.com",
  520. "ProxyIP": "serv1.vpsuol.shop",
  521. "ProxyPort": "443",
  522. "Info": "Tlsws"
  523. },
  524. {
  525. "Name": "TIM ",
  526. "FLAG": "tim",
  527. "Payload": "Lock sunnywinechina.com HTTP HTTP/2.0[crlf]Host: 146.75.34.97.img.redbull.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.2 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: //*.yahoo.com[crlf]",
  528. "SNI": "",
  529. "TlsIP": "",
  530. "ProxyIP": "serv1.vpsuol.shop",
  531. "ProxyPort": "80",
  532. "Info": "Proxy"
  533. },
  534. {
  535. "Name": "TIM ",
  536. "FLAG": "tim",
  537. "Payload": "MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: r03.spine101.lax01.fab.netarch.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]",
  538. "SNI": "",
  539. "TlsIP": "",
  540. "ProxyIP": "serv1.vpsuol.shop",
  541. "ProxyPort": "80",
  542. "Info": "Proxy"
  543. },
  544. {
  545. "Name": "TIM NORMAL [01]",
  546. "FLAG": "tim",
  547. "Payload": "GET wss://assets-sf.c6bank.com.br// HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  548. "SNI": "assets-sf.c6bank.com.br",
  549. "TlsIP": "104.16.237.16",
  550. "ProxyIP": "",
  551. "ProxyPort": "443",
  552. "Info": "Tlsws"
  553. },
  554. {
  555. "Name": "TIM",
  556. "FLAG": "tim",
  557. "Payload": "POST wss://duvidas.ampli.com.br/hc/pt-br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: covid[crlf]Connection: Keep-Alive[crlf][crlf]",
  558. "SNI": "duvidas.ampli.com.br",
  559. "TlsIP": "104.16.53.111",
  560. "ProxyIP": "",
  561. "ProxyPort": "443",
  562. "Info": "Tlsws"
  563. },
  564. {
  565. "Name": "TIM NORMAL [02]",
  566. "FLAG": "tim",
  567. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  568. "SNI": "duvidas.ampli.com.br",
  569. "TlsIP": "104.16.53.111",
  570. "ProxyIP": "",
  571. "ProxyPort": "443",
  572. "Info": "Tlsws"
  573. },
  574. {
  575. "Name": "TIM NORMAL [04]",
  576. "FLAG": "tim",
  577. "Payload": "GET wss://js-agent.newrelic.com HTTP/1.1[crlf]Host: [crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  578. "SNI": "js-agent.newrelic.com",
  579. "TlsIP": "optim.tenb.xyz",
  580. "ProxyIP": "",
  581. "ProxyPort": "443",
  582. "Info": "Tlsws"
  583. },
  584. {
  585. "Name": "TIM NORMAL [05]",
  586. "FLAG": "tim",
  587. "Payload": "GET wss://cdn.c6bank.com.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  588. "SNI": "cdn.c6bank.com.br",
  589. "TlsIP": "104.16.236.16",
  590. "ProxyIP": "",
  591. "ProxyPort": "443",
  592. "Info": "Tlsws"
  593. },
  594. {
  595. "Name": "TIM NORMAL [06]",
  596. "FLAG": "tim",
  597. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  598. "SNI": "ajuda.c6bank.com.br",
  599. "TlsIP": "ajuda.c6bank.com.br",
  600. "ProxyIP": "",
  601. "ProxyPort": "443",
  602. "Info": "Tlsws"
  603. },
  604. {
  605. "Name": "VIVO EASY [01]",
  606. "FLAG": "vivo",
  607. "Payload": "GET wss://money-staging.infinitepay.io/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  608. "SNI": "money-staging.infinitepay.io",
  609. "TlsIP": "104.18.6.80",
  610. "ProxyIP": "",
  611. "ProxyPort": "443",
  612. "Info": "Tlsws"
  613. },
  614. {
  615. "Name": "VIVO EASY [02]",
  616. "FLAG": "vivo",
  617. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  618. "SNI": "",
  619. "TlsIP": "",
  620. "ProxyIP": "104.18.7.80",
  621. "ProxyPort": "80",
  622. "Info": "Proxy"
  623. },
  624. {
  625. "Name": "VIVO EASY [03]",
  626. "FLAG": "vivo",
  627. "Payload": "GET wss://support.duolingo.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: WayNet[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  628. "SNI": "support.duolingo.com",
  629. "TlsIP": "",
  630. "ProxyIP": "104.18.7.80",
  631. "ProxyPort": "80",
  632. "Info": "Proxy"
  633. },
  634. {
  635. "Name": "VIVO EASY [04]",
  636. "FLAG": "vivo",
  637. "Payload": "GET wss://live.vivo.com.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  638. "SNI": "live.vivo.com.br",
  639. "TlsIP": "104.16.56.6",
  640. "ProxyIP": "",
  641. "ProxyPort": "443",
  642. "Info": "Tlsws"
  643. },
  644. {
  645. "Name": "VIVO EASY [05]",
  646. "FLAG": "vivo",
  647. "Payload": "GET wss://vivoemdia.vivo.com.br/ HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]Referer: [crlf][crlf]",
  648. "SNI": "vivoemdia.vivo.com.br",
  649. "TlsIP": "104.18.6.80",
  650. "ProxyIP": "",
  651. "ProxyPort": "443",
  652. "Info": "Tlsws"
  653. },
  654. {
  655. "Name": "VIVO EASY [06]",
  656. "FLAG": "vivo",
  657. "Payload": "GET wss://support.deezer.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  658. "SNI": "support.deezer.com",
  659. "TlsIP": "104.18.7.80",
  660. "ProxyIP": "",
  661. "ProxyPort": "443",
  662. "Info": "Tlsws"
  663. },
  664. {
  665. "Name": "VIVO EASY [07]",
  666. "FLAG": "vivo",
  667. "Payload": "GET wss://www.alura.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  668. "SNI": "www.alura.com.br",
  669. "TlsIP": "104.18.7.80",
  670. "ProxyIP": "",
  671. "ProxyPort": "443",
  672. "Info": "Tlsws"
  673. },
  674. {
  675. "Name": "VIVO EASY [08]",
  676. "FLAG": "vivo",
  677. "Payload": "GET ssl://gedoc.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  678. "SNI": "gedoc.vivo.com.br",
  679. "TlsIP": "104.18.6.80",
  680. "ProxyIP": "",
  681. "ProxyPort": "443",
  682. "Info": "Tlsws"
  683. },
  684. {
  685. "Name": "VIVO NORMAL [00]",
  686. "FLAG": "vivo",
  687. "Payload": "GET wss://support.pokemon.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  688. "SNI": "support.pokemon.com",
  689. "TlsIP": "support.pokemon.com",
  690. "ProxyIP": "",
  691. "ProxyPort": "443",
  692. "Info": "Tlsws"
  693. },
  694. {
  695. "Name": "VIVO ",
  696. "FLAG": "vivo",
  697. "Payload": "GET wss://beneficios.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  698. "SNI": "beneficios.vivo.com.br",
  699. "TlsIP": "beneficios.vivo.com.br",
  700. "ProxyIP": "",
  701. "ProxyPort": "443",
  702. "Info": "Tlsws"
  703. },
  704. {
  705. "Name": "VIVO ",
  706. "FLAG": "vivo",
  707. "Payload": "GET wss://carrinho-pos-familia.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  708. "SNI": "carrinho-pos-familia.vivo.com.br",
  709. "TlsIP": "carrinho-pos-familia.vivo.com.br",
  710. "ProxyIP": "",
  711. "ProxyPort": "443",
  712. "Info": "Tlsws"
  713. },
  714. {
  715. "Name": "VIVO NORMAL [03]",
  716. "FLAG": "vivo",
  717. "Payload": "GET wss://vigia.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  718. "SNI": "vigia.vivo.com.br",
  719. "TlsIP": "vigia.vivo.com.br",
  720. "ProxyIP": "",
  721. "ProxyPort": "443",
  722. "Info": "Tlsws"
  723. },
  724. {
  725. "Name": " VIVO 🟣 TLS",
  726. "FLAG": "vivo",
  727. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  728. "SNI": "[app_host]",
  729. "TlsIP": "104.16.53.111",
  730. "ProxyIP": "",
  731. "ProxyPort": "443",
  732. "Info": "Tlsws"
  733. },
  734. {
  735. "Name": "VIVO SPEED MAX",
  736. "FLAG": "vivo",
  737. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  738. "SNI": "",
  739. "TlsIP": "",
  740. "ProxyIP": "104.16.53.111",
  741. "ProxyPort": "80",
  742. "Info": "Direct"
  743. },
  744. {
  745. "Name": "VIVO FLARE 01",
  746. "FLAG": "vivo",
  747. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  748. "SNI": "[app_host]",
  749. "TlsIP": "104.16.53.111",
  750. "ProxyIP": "",
  751. "ProxyPort": "443",
  752. "Info": "Tlsws"
  753. },
  754. {
  755. "Name": "VIVO FLARE 02",
  756. "FLAG": "vivo",
  757. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  758. "SNI": "[app_host]",
  759. "TlsIP": "104.16.53.111",
  760. "ProxyIP": "",
  761. "ProxyPort": "443",
  762. "Info": "Tlsws"
  763. },
  764. {
  765. "Name": "VIVO FLARE 03",
  766. "FLAG": "vivo",
  767. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  768. "SNI": "",
  769. "TlsIP": "",
  770. "ProxyIP": "104.16.51.111",
  771. "ProxyPort": "80",
  772. "Info": "Proxy"
  773. },
  774. {
  775. "Name": "VIVO FLARE 04",
  776. "FLAG": "vivo",
  777. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  778. "SNI": "",
  779. "TlsIP": "",
  780. "ProxyIP": "104.16.53.111",
  781. "ProxyPort": "80",
  782. "Info": "Proxy"
  783. },
  784. {
  785. "Name": "VIVO FLARE 05",
  786. "FLAG": "vivo",
  787. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  788. "SNI": "",
  789. "TlsIP": "",
  790. "ProxyIP": "help.livestream.com",
  791. "ProxyPort": "80",
  792. "Info": "Proxy"
  793. },
  794. {
  795. "Name": "VIVO FLARE 06",
  796. "FLAG": "vivo",
  797. "Payload": "GET-CONTROL ws://[app_host] HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  798. "SNI": "[app_host]",
  799. "TlsIP": "104.16.51.111",
  800. "ProxyIP": "",
  801. "ProxyPort": "443",
  802. "Info": "Tlsws"
  803. },
  804. {
  805. "Name": "VIVO FLARE 07",
  806. "FLAG": "vivo",
  807. "Payload": "GET-CONTROL ws://[app_host] HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  808. "SNI": "[app_host]",
  809. "TlsIP": "104.16.53.111",
  810. "ProxyIP": "",
  811. "ProxyPort": "443",
  812. "Info": "Tlsws"
  813. },
  814. {
  815. "Name": "VIVO FLARE [01]",
  816. "FLAG": "vivo.png",
  817. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  818. "SNI": "",
  819. "TlsIP": "",
  820. "ProxyIP": "104.16.53.111",
  821. "ProxyPort": "80",
  822. "Info": "Proxy"
  823. },
  824. {
  825. "Name": "VIVO FLARE [02]",
  826. "FLAG": "vivo",
  827. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  828. "SNI": "",
  829. "TlsIP": "",
  830. "ProxyIP": "ffsupportbd.garena.com",
  831. "ProxyPort": "80",
  832. "Info": "Proxy"
  833. },
  834. {
  835. "Name": "VIVO FLARE [03]",
  836. "FLAG": "vivo",
  837. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][crlf][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  838. "SNI": "",
  839. "TlsIP": "",
  840. "ProxyIP": "duvidas.ampli.com.br",
  841. "ProxyPort": "80",
  842. "Info": "Proxy"
  843. },
  844. {
  845. "Name": "VIVO FLARE [04]",
  846. "FLAG": "vivo",
  847. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  848. "SNI": "",
  849. "TlsIP": "",
  850. "ProxyIP": "support.moovitapp.com",
  851. "ProxyPort": "80",
  852. "Info": "Proxy"
  853. },
  854. {
  855. "Name": "VIVO FLARE [05]",
  856. "FLAG": "vivo",
  857. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  858. "SNI": "",
  859. "TlsIP": "",
  860. "ProxyIP": "support.deezer.com",
  861. "ProxyPort": "80",
  862. "Info": "Proxy"
  863. },
  864. {
  865. "Name": "VIVO FLARE [06]",
  866. "FLAG": "vivo",
  867. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  868. "SNI": "",
  869. "TlsIP": "",
  870. "ProxyIP": "support.hotmart.com",
  871. "ProxyPort": "80",
  872. "Info": "Proxy"
  873. },
  874. {
  875. "Name": "VIVO FLARE [07]",
  876. "FLAG": "vivo",
  877. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  878. "SNI": "",
  879. "TlsIP": "",
  880. "ProxyIP": "localonlinepresence.com",
  881. "ProxyPort": "80",
  882. "Info": "Proxy"
  883. },
  884. {
  885. "Name": "VIVO FLARE [08]",
  886. "FLAG": "vivo",
  887. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  888. "SNI": "",
  889. "TlsIP": "",
  890. "ProxyIP": "104.16.51.111",
  891. "ProxyPort": "80",
  892. "Info": "Proxy"
  893. },
  894. {
  895. "Name": "VIVO FLARE [09]",
  896. "FLAG": "vivo",
  897. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  898. "SNI": "",
  899. "TlsIP": "1",
  900. "ProxyIP": "amon14--support.zendesk.com",
  901. "ProxyPort": "80",
  902. "Info": "Proxy"
  903. },
  904. {
  905. "Name": "VIVO FLARE [10]",
  906. "FLAG": "vivo",
  907. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  908. "SNI": "",
  909. "TlsIP": "",
  910. "ProxyIP": "ayuda.tigo.com.gt",
  911. "ProxyPort": "80",
  912. "Info": "Proxy"
  913. },
  914. {
  915. "Name": "VIVO FLARE [11]",
  916. "FLAG": "vivo",
  917. "Payload": "GET / HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  918. "SNI": "[app_host]",
  919. "TlsIP": "",
  920. "ProxyIP": "104.16.53.111",
  921. "ProxyPort": "80",
  922. "Info": "Proxy"
  923. },
  924. {
  925. "Name": "VIVO FLARE [12]",
  926. "FLAG": "vivo",
  927. "Payload": "GET / HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  928. "SNI": "mobilidade.cloud.caixa.gov.br",
  929. "TlsIP": "",
  930. "ProxyIP": "104.16.51.111",
  931. "ProxyPort": "80",
  932. "Info": "Proxy"
  933. },
  934. {
  935. "Name": "VIVO PRÉ [01]",
  936. "FLAG": "vivo",
  937. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  938. "TlsIP": "",
  939. "ProxyIP": "186.233.118.161",
  940. "ProxyPort": "80",
  941. "Info": "Proxy"
  942. },
  943. {
  944. *_🔥Fluke🔥_*
  945. PAYLOAD:GET /flu.ke HTTP/1.1[crlf]Host: tx.space-technology.online[crlf]Origin: https://www.google.com, http://www.google.com[crlf]ser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]
  946. },
  947. ]
  948. }

comments powered by Disqus