WsSecurity VPN


SUBMITTED BY: Willy2023

DATE: July 1, 2023, 5:19 p.m.

UPDATED: Sept. 2, 2023, 1:29 a.m.

FORMAT: Text only

SIZE: 44.7 kB

HITS: 6124

  1. {
  2. "Version": "09.6.14",
  3. "ReleaseNotes": "NOVA ATUALIZAÇÃO DISPONIVEL,,, SEJA BEM-VINDO A WsSecurity!!
  4. ,,, Conexão restabelecida",
  5. "UrlUpdate": "https://bitbin.it/Tw4QwBi9/raw/",
  6. "Sms": " http",
  7. "Bem Vindo (A)": "",
  8. "": "http",
  9. "UrlTermos": "",
  10. "CheckUser": "true",
  11. "Udp": [
  12. {
  13. "Porta":"7100"
  14. },
  15. {
  16. "Porta":"7200"
  17. },
  18. {
  19. "Porta":"7300"
  20. },
  21. {
  22. "Porta":"7400"
  23. },
  24. {
  25. "Porta":"7500"
  26. },
  27. {
  28. "Porta":"7600"
  29. },
  30. {
  31. "Porta":"7700"
  32. }
  33. ],
  34. "Servers": [
  35. {
  36. "Name": "Servidor WsSecurity",
  37. "TYPE": "premium",
  38. "FLAG": "br.png",
  39. "ServerIP": "int.worspite.tk ",
  40. "CheckUser":"http://192.53.121.179:43/checkUser",
  41. "ServerPort": "22",
  42. "SSLPort": "443",
  43. "USER": "",
  44. "PASS": "" }
  45. ],
  46. "Networks": [
  47. {
  48. "Name": "VIVO PRÉ [01]",
  49. "FLAG": "vivo",
  50. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  51. "TlsIP": "",
  52. "ProxyIP": "186.233.118.161",
  53. "ProxyPort": "80",
  54. "Info": "Proxy"
  55. },
  56. {
  57. "Name": "🟣VIVO/Tim Speed",
  58. "FLAG": "vivo/t",
  59. "Payload": "GET / HTTP/1.1[crlf]Host:app.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host] [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  60. "SNI": "",
  61. "TlsIP": "",
  62. "ProxyIP": "104.16.53.111",
  63. "ProxyPort": "80",
  64. "Info": "Proxy"
  65. },
  66. {
  67. "Name": "🟣 PRE/ EASY & PLANOS 1",
  68. "FLAG": "vivo",
  69. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  70. "SNI": "",
  71. "TlsIP": "",
  72. "ProxyIP": "104.16.51.111",
  73. "ProxyPort": "80",
  74. "Info": "Proxy"
  75. },
  76. {
  77. "Name": "🟣VIVO KID",
  78. "FLAG": "vivo",
  79. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  80. "SNI": "",
  81. "TlsIP": "",
  82. "ProxyIP": "104.16.51.111",
  83. "ProxyPort": "80",
  84. "Info": "Proxy"
  85. },
  86. {
  87. "Name": "🟣VIVO ATUALIZADO",
  88. "FLAG": "vivo",
  89. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  90. "SNI": "faq.foxbit.com.br",
  91. "TlsIP": "faq.foxbit.com.br",
  92. "ProxyIP": "faq.foxbit.com.br",
  93. "ProxyPort": "80",
  94. "Info": "Proxy"
  95. },
  96. {
  97. "Name": "TIM Security",
  98. "FLAG": "Tim",
  99. "Payload": "GET / HTTP/1.1[crlf]Host:app.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host] [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  100. "SNI": "",
  101. "TlsIP": "",
  102. "ProxyIP": "104.16.53.111",
  103. "ProxyPort": "80",
  104. "Info": "Proxy"
  105. },
  106. {
  107. "Name": "TIM Principal BR 2023",
  108. "FLAG": "tim",
  109. "Payload": "GET / HTTP/1.1[crlf]Host:jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  110. "SNI": "",
  111. "TlsIP": "",
  112. "ProxyIP": "apptest.c6bank.app",
  113. "ProxyPort": "80",
  114. "Info": "Proxy"
  115. },
  116. {
  117. "Name": "TIM Turbo BR 2023",
  118. "FLAG": "tim",
  119. "Payload": "GET / HTTP/1.1[crlf]Host:jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  120. "SNI": "",
  121. "TlsIP": "",
  122. "ProxyIP": "support.jungledisk.com",
  123. "ProxyPort": "80",
  124. "Info": "Proxy"
  125. },
  126. {
  127. "Name": "TIM 01 BR 2023 atualizada",
  128. "FLAG": "tim",
  129. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host:int.worspite.tk[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  130. "SNI": "",
  131. "TlsIP": "",
  132. "ProxyIP": "104.18.27.160",
  133. "ProxyPort": "80",
  134. "Info": "Proxy"
  135. },
  136. {
  137. "Name": "TIM 02 BR 2023 Atualizada",
  138. "FLAG": "tim",
  139. "Payload": "CONNECT / HTTP/1.9[crlf]host: cdna.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Oracle[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  140. "SNI": "",
  141. "TlsIP": "",
  142. "ProxyIP": "104.16.51.111",
  143. "ProxyPort": "80",
  144. "Info": "Proxy"
  145. },
  146. {
  147. "Name": "TIM 03 BR 2023 Atualizada",
  148. "FLAG": "tim",
  149. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: int.worspite.tk[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  150. "SNI": "",
  151. "TlsIP": "",
  152. "ProxyIP": "104.19.239.25",
  153. "ProxyPort": "80",
  154. "Info": "Proxy"
  155. },
  156. {
  157. "Name": "TIM 04 BR 2023 atualizada",
  158. "FLAG": "tim",
  159. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  160. "SNI": "",
  161. "TlsIP": "mobile.c6bank.app",
  162. "ProxyIP": "mobile.c6bank.app",
  163. "ProxyPort": "80",
  164. "Info": "Proxy"
  165. },
  166. {
  167. "Name": "TIM 05 BR 2023",
  168. "FLAG": "tim",
  169. "Payload": "GET / HTTP/1.1[crlf]Host:support.deezer.com
  170. [crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  171. "SNI": "",
  172. "TlsIP": "support.deezer.com",
  173. "ProxyIP": "support.deezer.com",
  174. "ProxyPort": "80",
  175. "Info": "Proxy"
  176. },
  177. {
  178. "Name": "TIM 06 BR 2023",
  179. "FLAG": "tim",
  180. "Payload": "GET / HTTP/1.1[crlf]Host:creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  181. "SNI": "",
  182. "TlsIP": "",
  183. "ProxyIP": "support.migym.com",
  184. "ProxyPort": "80",
  185. "Info": "Proxy"
  186. },
  187. {
  188. "Name": "TIM 07 BR 2023",
  189. "FLAG": "tim",
  190. "Payload": "GET / HTTP/1.1[crlf]Host:support.deezer.com
  191. [crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: int.worspite.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  192. "SNI": "",
  193. "TlsIP": "104.16.53.111",
  194. "ProxyIP": "104.16.53.111",
  195. "ProxyPort": "8080",
  196. "Info": "Proxy"
  197. },
  198. {
  199. "Name":"TIM 08 BR 2023",
  200. "FLAG":"tim",
  201. "Payload":"BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  202. "SNI":"[app_host]",
  203. "TlsIP":"itsupport.surveymonkey.com",
  204. "ProxyIP":"",
  205. "ProxyPort":"80",
  206. "Info":"proxy"
  207. },
  208. {
  209. "Name": "VIVO Security 01 BR 2023",
  210. "FLAG": "vivo",
  211. "Payload": "delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  212. "SNI": "",
  213. "TlsIP": "",
  214. "ProxyIP": "int.worspite.tk",
  215. "ProxyPort": "80",
  216. "Info": "Proxy"
  217. },
  218. {
  219. "Name": "VIVO Security 02 BR 2023",
  220. "FLAG": "vivo",
  221. "Payload": "ACL HTTP/1.1 Host: plus.google.com \r\n \r\n",
  222. "SNI": "",
  223. "TlsIP": "",
  224. "ProxyIP": "int.worspite.tk",
  225. "ProxyPort": "80",
  226. "Info": "Proxy"
  227. },
  228. {
  229. "Name": "VIVO Security 03 BR 2023",
  230. "FLAG": "vivo",
  231. "Payload": "GET / HTTP/1.1[crlf]Host:csssr.zendesk.com[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  232. "SNI": "",
  233. "TlsIP": "",
  234. "ProxyIP": "int.worspite.tk",
  235. "ProxyPort": "80",
  236. "Info": "Proxy"
  237. },
  238. {
  239. "Name": "VIVO SECURITY 01",
  240. "FLAG": "vivo",
  241. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: [random=vivo.com.br;i.vivo.ddivulga.com;www.portalsva2.vivo.com.br;plus.google.com;mobile.adobe.com][lf]",
  242. "SNI": "",
  243. "TlsIP": "",
  244. "ProxyIP": "192.53.121.179",
  245. "ProxyPort": "8080",
  246. "Info": "Proxy"
  247. },
  248. {
  249. "Name": "VIVO SECURITY 02",
  250. "FLAG": "vivo",
  251. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: [lf]",
  252. "SNI": "",
  253. "TlsIP": "",
  254. "ProxyIP": "192.53.121.179",
  255. "ProxyPort": "8080",
  256. "Info": "Proxy"
  257. },
  258. {
  259. "Name": "VIVO SECURITY 04",
  260. "FLAG": "vivo",
  261. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br[lf]",
  262. "SNI": "",
  263. "TlsIP": "",
  264. "ProxyIP": "192.53.121.179",
  265. "ProxyPort": "8080",
  266. "Info": "Proxy"
  267. },
  268. {
  269. "Name": "VIVO FRONT 01",
  270. "FLAG": "vivo",
  271. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  272. "SNI": "",
  273. "TlsIP": "",
  274. "ProxyIP": "192.53.121.179",
  275. "ProxyPort": "80",
  276. "Info": "Proxy"
  277. },
  278. {
  279. "Name": "VIVO FRONT 02",
  280. "FLAG": "vivo",
  281. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  282. "SNI": "",
  283. "TlsIP": "",
  284. "ProxyIP": "108.158.161.16",
  285. "ProxyPort": "80",
  286. "Info": "Proxy"
  287. },
  288. {
  289. "Name": "VIVO FRONT 03",
  290. "FLAG": "vivo",
  291. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  292. "SNI": "",
  293. "TlsIP": "",
  294. "ProxyIP": "108.158.122.124",
  295. "ProxyPort": "80",
  296. "Info": "Proxy"
  297. },
  298. {
  299. "Name": "VIVO FLARE 01",
  300. "FLAG": "vivo",
  301. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  302. "SNI": "[app_host]",
  303. "TlsIP": "104.16.51.111",
  304. "ProxyIP": "",
  305. "ProxyPort": "443",
  306. "Info": "Tlsws"
  307. },
  308. {
  309. "Name": "VIVO FLARE 02",
  310. "FLAG": "vivo",
  311. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  312. "SNI": "[app_host]",
  313. "TlsIP": "104.16.53.111",
  314. "ProxyIP": "",
  315. "ProxyPort": "443",
  316. "Info": "Tlsws"
  317. },
  318. {
  319. "Name": "VIVO VELOZ 01",
  320. "FLAG": "vivo",
  321. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  322. "SNI": "",
  323. "TlsIP": "",
  324. "ProxyIP": "int.worspite.tk",
  325. "ProxyPort": "80",
  326. "Info": "Proxy"
  327. },
  328. {
  329. "Name": "VIVO VELOZ 020",
  330. "FLAG": "vivo",
  331. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  332. "SNI": "",
  333. "TlsIP": "",
  334. "ProxyIP": "192.53.121.179",
  335. "ProxyPort": "80",
  336. "Info": "Proxy"
  337. },
  338. {
  339. "Name": "VIVO 01 NOVA DDD's",
  340. "FLAG": "vivo",
  341. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  342. "SNI": "",
  343. "TlsIP": "",
  344. "ProxyIP": "108.139.113.33",
  345. "ProxyPort": "80",
  346. "Info": "Proxy"
  347. },
  348. {
  349. "Name": "VIVO 02 NOVA DDD's",
  350. "FLAG": "vivo",
  351. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Accept-Encoding: gzip, chunked[crlf][crlf]",
  352. "SNI": "",
  353. "TlsIP": "",
  354. "ProxyIP": "108.139.113.33",
  355. "ProxyPort": "80",
  356. "Info": "Proxy"
  357. },
  358. {
  359. "Name": "VIVO FLARE IPV6 [01]",
  360. "FLAG": "vivo",
  361. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: [app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  362. "SNI": "",
  363. "TlsIP": "",
  364. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:336f",
  365. "ProxyPort": "80",
  366. "Info": "Proxy"
  367. },
  368. {
  369. "Name": "VIVO FLARE IPV6 [02]",
  370. "FLAG": "vivo",
  371. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  372. "SNI": "",
  373. "TlsIP": "",
  374. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6810:7daf",
  375. "ProxyPort": "80",
  376. "Info": "Proxy"
  377. },
  378. {
  379. "Name": "VIVO FRONT IPV6 [01]",
  380. "FLAG": "vivo",
  381. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  382. "SNI": "",
  383. "TlsIP": "",
  384. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6c8b:7781",
  385. "ProxyPort": "80",
  386. "Info": "Proxy"
  387. },
  388. {
  389. "Name": "VIVO FRONT IPV6 [02]",
  390. "FLAG": "vivo",
  391. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate= d2o1e3o9p5prgq.cloudfront.net;d2o1e3o9p5prgq.cloudfront.net;dx5b0ia9vowc3.cloudfront.net][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  392. "SNI": "",
  393. "TlsIP": "",
  394. "ProxyIP": "0000:0000:0000:0000:0000:ffff:3455:d517",
  395. "ProxyPort": "80",
  396. "Info": "Proxy"
  397. },
  398. {
  399. "Name": "VIVO EASY",
  400. "FLAG": "vivo",
  401. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  402. "SNI": "",
  403. "TlsIP": "",
  404. "ProxyIP": "172.64.144.109",
  405. "ProxyPort": "80",
  406. "Info": "Proxy"
  407. },
  408. {
  409. "Name": "VIVO EASY 01",
  410. "FLAG": "vivo",
  411. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  412. "SNI": "",
  413. "TlsIP": "",
  414. "ProxyIP": "104.18.7.41",
  415. "ProxyPort": "80",
  416. "Info": "Proxy"
  417. },
  418. {
  419. "Name": "VIVO EASY 02",
  420. "FLAG": "vivo",
  421. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  422. "SNI": "",
  423. "TlsIP": "",
  424. "ProxyIP": "104.18.6.80",
  425. "ProxyPort": "80",
  426. "Info": "Proxy"
  427. },
  428. {
  429. "Name": "VIVO EASY 03",
  430. "FLAG": "vivo",
  431. "Payload": "TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  432. "SNI": "",
  433. "TlsIP": "",
  434. "ProxyIP": "104.18.6.41",
  435. "ProxyPort": "80",
  436. "Info": "Proxy"
  437. },
  438. {
  439. "Name": "VIVO EASY 04",
  440. "FLAG": "vivo",
  441. "Payload": "BASELINE-CONTROL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  442. "SNI": "",
  443. "TlsIP": "",
  444. "ProxyIP": "104.18.7.80",
  445. "ProxyPort": "80",
  446. "Info": "Proxy"
  447. },
  448. {
  449. "Name": "VIVO EASY 05",
  450. "FLAG": "vivo",
  451. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  452. "SNI": "",
  453. "TlsIP": "",
  454. "ProxyIP": "legado.vivo.com.br",
  455. "ProxyPort": "80",
  456. "Info": "Proxy"
  457. },
  458. {
  459. "Name": "VIVO EASY 06",
  460. "FLAG": "vivo",
  461. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  462. "SNI": "",
  463. "TlsIP": "",
  464. "ProxyIP": "vigia.vivo.com.br",
  465. "ProxyPort": "80",
  466. "Info": "Proxy"
  467. },
  468. {
  469. "Name": "TIM ",
  470. "FLAG": "tim",
  471. "Payload": "GET wss://smainfo.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  472. "SNI": "smainfo.surveymonkey.com",
  473. "TlsIP": "smainfo.surveymonkey.com",
  474. "ProxyIP": "serv1.vpsuol.shop",
  475. "ProxyPort": "443",
  476. "Info": "Tlsws"
  477. },
  478. {
  479. "Name": "TIM ",
  480. "FLAG": "tim",
  481. "Payload": "Lock sunnywinechina.com HTTP HTTP/2.0[crlf]Host: 146.75.34.97.img.redbull.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.2 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: //*.yahoo.com[crlf]",
  482. "SNI": "",
  483. "TlsIP": "",
  484. "ProxyIP": "serv1.vpsuol.shop",
  485. "ProxyPort": "80",
  486. "Info": "Proxy"
  487. },
  488. {
  489. "Name": "TIM ",
  490. "FLAG": "tim",
  491. "Payload": "MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: r03.spine101.lax01.fab.netarch.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]",
  492. "SNI": "",
  493. "TlsIP": "",
  494. "ProxyIP": "serv1.vpsuol.shop",
  495. "ProxyPort": "80",
  496. "Info": "Proxy"
  497. },
  498. {
  499. "Name": "TIM NORMAL [01]",
  500. "FLAG": "tim",
  501. "Payload": "GET wss://assets-sf.c6bank.com.br// HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  502. "SNI": "assets-sf.c6bank.com.br",
  503. "TlsIP": "104.16.237.16",
  504. "ProxyIP": "",
  505. "ProxyPort": "443",
  506. "Info": "Tlsws"
  507. },
  508. {
  509. "Name": "TIM",
  510. "FLAG": "tim",
  511. "Payload": "POST wss://duvidas.ampli.com.br/hc/pt-br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: covid[crlf]Connection: Keep-Alive[crlf][crlf]",
  512. "SNI": "duvidas.ampli.com.br",
  513. "TlsIP": "104.16.53.111",
  514. "ProxyIP": "",
  515. "ProxyPort": "443",
  516. "Info": "Tlsws"
  517. },
  518. {
  519. "Name": "TIM NORMAL [02]",
  520. "FLAG": "tim",
  521. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  522. "SNI": "duvidas.ampli.com.br",
  523. "TlsIP": "104.16.53.111",
  524. "ProxyIP": "",
  525. "ProxyPort": "443",
  526. "Info": "Tlsws"
  527. },
  528. {
  529. "Name": "TIM NORMAL [04]",
  530. "FLAG": "tim",
  531. "Payload": "GET wss://js-agent.newrelic.com HTTP/1.1[crlf]Host: [crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  532. "SNI": "js-agent.newrelic.com",
  533. "TlsIP": "optim.tenb.xyz",
  534. "ProxyIP": "",
  535. "ProxyPort": "443",
  536. "Info": "Tlsws"
  537. },
  538. {
  539. "Name": "TIM NORMAL [05]",
  540. "FLAG": "tim",
  541. "Payload": "GET wss://cdn.c6bank.com.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  542. "SNI": "cdn.c6bank.com.br",
  543. "TlsIP": "104.16.236.16",
  544. "ProxyIP": "",
  545. "ProxyPort": "443",
  546. "Info": "Tlsws"
  547. },
  548. {
  549. "Name": "TIM NORMAL [06]",
  550. "FLAG": "tim",
  551. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  552. "SNI": "ajuda.c6bank.com.br",
  553. "TlsIP": "ajuda.c6bank.com.br",
  554. "ProxyIP": "",
  555. "ProxyPort": "443",
  556. "Info": "Tlsws"
  557. },
  558. {
  559. "Name": "VIVO EASY [01]",
  560. "FLAG": "vivo",
  561. "Payload": "GET wss://money-staging.infinitepay.io/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  562. "SNI": "money-staging.infinitepay.io",
  563. "TlsIP": "104.18.6.80",
  564. "ProxyIP": "",
  565. "ProxyPort": "443",
  566. "Info": "Tlsws"
  567. },
  568. {
  569. "Name": "VIVO EASY [02]",
  570. "FLAG": "vivo",
  571. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: mentalista[crlf][crlf]",
  572. "SNI": "",
  573. "TlsIP": "",
  574. "ProxyIP": "104.18.7.80",
  575. "ProxyPort": "80",
  576. "Info": "Proxy"
  577. },
  578. {
  579. "Name": "VIVO EASY [03]",
  580. "FLAG": "vivo",
  581. "Payload": "GET wss://support.duolingo.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: WayNet[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  582. "SNI": "support.duolingo.com",
  583. "TlsIP": "",
  584. "ProxyIP": "104.18.7.80",
  585. "ProxyPort": "80",
  586. "Info": "Proxy"
  587. },
  588. {
  589. "Name": "VIVO EASY [04]",
  590. "FLAG": "vivo",
  591. "Payload": "GET wss://live.vivo.com.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  592. "SNI": "live.vivo.com.br",
  593. "TlsIP": "104.16.56.6",
  594. "ProxyIP": "",
  595. "ProxyPort": "443",
  596. "Info": "Tlsws"
  597. },
  598. {
  599. "Name": "VIVO EASY [05]",
  600. "FLAG": "vivo",
  601. "Payload": "GET wss://vivoemdia.vivo.com.br/ HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]Referer: [crlf][crlf]",
  602. "SNI": "vivoemdia.vivo.com.br",
  603. "TlsIP": "104.18.6.80",
  604. "ProxyIP": "",
  605. "ProxyPort": "443",
  606. "Info": "Tlsws"
  607. },
  608. {
  609. "Name": "VIVO EASY [06]",
  610. "FLAG": "vivo",
  611. "Payload": "GET wss://support.deezer.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  612. "SNI": "support.deezer.com",
  613. "TlsIP": "104.18.7.80",
  614. "ProxyIP": "",
  615. "ProxyPort": "443",
  616. "Info": "Tlsws"
  617. },
  618. {
  619. "Name": "VIVO EASY [07]",
  620. "FLAG": "vivo",
  621. "Payload": "GET wss://www.alura.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  622. "SNI": "www.alura.com.br",
  623. "TlsIP": "104.18.7.80",
  624. "ProxyIP": "",
  625. "ProxyPort": "443",
  626. "Info": "Tlsws"
  627. },
  628. {
  629. "Name": "VIVO EASY [08]",
  630. "FLAG": "vivo",
  631. "Payload": "GET ssl://gedoc.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  632. "SNI": "gedoc.vivo.com.br",
  633. "TlsIP": "104.18.6.80",
  634. "ProxyIP": "",
  635. "ProxyPort": "443",
  636. "Info": "Tlsws"
  637. },
  638. {
  639. "Name": "VIVO NORMAL [00]",
  640. "FLAG": "vivo",
  641. "Payload": "GET wss://support.pokemon.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  642. "SNI": "support.pokemon.com",
  643. "TlsIP": "support.pokemon.com",
  644. "ProxyIP": "",
  645. "ProxyPort": "443",
  646. "Info": "Tlsws"
  647. },
  648. {
  649. "Name": "VIVO ",
  650. "FLAG": "vivo",
  651. "Payload": "GET wss://beneficios.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  652. "SNI": "beneficios.vivo.com.br",
  653. "TlsIP": "beneficios.vivo.com.br",
  654. "ProxyIP": "",
  655. "ProxyPort": "443",
  656. "Info": "Tlsws"
  657. },
  658. {
  659. "Name": "VIVO ",
  660. "FLAG": "vivo",
  661. "Payload": "GET wss://carrinho-pos-familia.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  662. "SNI": "carrinho-pos-familia.vivo.com.br",
  663. "TlsIP": "carrinho-pos-familia.vivo.com.br",
  664. "ProxyIP": "",
  665. "ProxyPort": "443",
  666. "Info": "Tlsws"
  667. },
  668. {
  669. "Name": "VIVO NORMAL [03]",
  670. "FLAG": "vivo",
  671. "Payload": "GET wss://vigia.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  672. "SNI": "vigia.vivo.com.br",
  673. "TlsIP": "vigia.vivo.com.br",
  674. "ProxyIP": "",
  675. "ProxyPort": "443",
  676. "Info": "Tlsws"
  677. },
  678. {
  679. "Name": " VIVO 🟣 TLS",
  680. "FLAG": "vivo",
  681. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  682. "SNI": "[app_host]",
  683. "TlsIP": "104.16.53.111",
  684. "ProxyIP": "",
  685. "ProxyPort": "443",
  686. "Info": "Tlsws"
  687. },
  688. {
  689. "Name": "VIVO SPEED MAX",
  690. "FLAG": "vivo",
  691. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  692. "SNI": "",
  693. "TlsIP": "",
  694. "ProxyIP": "104.16.53.111",
  695. "ProxyPort": "80",
  696. "Info": "Direct"
  697. },
  698. {
  699. "Name": "VIVO FLARE 01",
  700. "FLAG": "vivo",
  701. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  702. "SNI": "[app_host]",
  703. "TlsIP": "104.16.53.111",
  704. "ProxyIP": "",
  705. "ProxyPort": "443",
  706. "Info": "Tlsws"
  707. },
  708. {
  709. "Name": "VIVO FLARE 02",
  710. "FLAG": "vivo",
  711. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  712. "SNI": "[app_host]",
  713. "TlsIP": "104.16.53.111",
  714. "ProxyIP": "",
  715. "ProxyPort": "443",
  716. "Info": "Tlsws"
  717. },
  718. {
  719. "Name": "VIVO FLARE 03",
  720. "FLAG": "vivo",
  721. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  722. "SNI": "",
  723. "TlsIP": "",
  724. "ProxyIP": "104.16.51.111",
  725. "ProxyPort": "80",
  726. "Info": "Proxy"
  727. },
  728. {
  729. "Name": "VIVO FLARE 04",
  730. "FLAG": "vivo",
  731. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  732. "SNI": "",
  733. "TlsIP": "",
  734. "ProxyIP": "104.16.53.111",
  735. "ProxyPort": "80",
  736. "Info": "Proxy"
  737. },
  738. {
  739. "Name": "VIVO FLARE 05",
  740. "FLAG": "vivo",
  741. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  742. "SNI": "",
  743. "TlsIP": "",
  744. "ProxyIP": "help.livestream.com",
  745. "ProxyPort": "80",
  746. "Info": "Proxy"
  747. },
  748. {
  749. "Name": "VIVO FLARE 06",
  750. "FLAG": "vivo",
  751. "Payload": "GET-CONTROL ws://[app_host] HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  752. "SNI": "[app_host]",
  753. "TlsIP": "104.16.51.111",
  754. "ProxyIP": "",
  755. "ProxyPort": "443",
  756. "Info": "Tlsws"
  757. },
  758. {
  759. "Name": "VIVO FLARE 07",
  760. "FLAG": "vivo",
  761. "Payload": "GET-CONTROL ws://[app_host] HTTP/1.1[crlf]Host: assine.vivo.com.br[crlf]Proxy-Connection: Keep-Alive[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  762. "SNI": "[app_host]",
  763. "TlsIP": "104.16.53.111",
  764. "ProxyIP": "",
  765. "ProxyPort": "443",
  766. "Info": "Tlsws"
  767. },
  768. {
  769. "Name": "VIVO FLARE [01]",
  770. "FLAG": "vivo.png",
  771. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  772. "SNI": "",
  773. "TlsIP": "",
  774. "ProxyIP": "104.16.53.111",
  775. "ProxyPort": "80",
  776. "Info": "Proxy"
  777. },
  778. {
  779. "Name": "VIVO FLARE [02]",
  780. "FLAG": "vivo",
  781. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  782. "SNI": "",
  783. "TlsIP": "",
  784. "ProxyIP": "ffsupportbd.garena.com",
  785. "ProxyPort": "80",
  786. "Info": "Proxy"
  787. },
  788. {
  789. "Name": "VIVO FLARE [03]",
  790. "FLAG": "vivo",
  791. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][crlf][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  792. "SNI": "",
  793. "TlsIP": "",
  794. "ProxyIP": "duvidas.ampli.com.br",
  795. "ProxyPort": "80",
  796. "Info": "Proxy"
  797. },
  798. {
  799. "Name": "VIVO FLARE [04]",
  800. "FLAG": "vivo",
  801. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  802. "SNI": "",
  803. "TlsIP": "",
  804. "ProxyIP": "support.moovitapp.com",
  805. "ProxyPort": "80",
  806. "Info": "Proxy"
  807. },
  808. {
  809. "Name": "VIVO FLARE [05]",
  810. "FLAG": "vivo",
  811. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  812. "SNI": "",
  813. "TlsIP": "",
  814. "ProxyIP": "support.deezer.com",
  815. "ProxyPort": "80",
  816. "Info": "Proxy"
  817. },
  818. {
  819. "Name": "VIVO FLARE [06]",
  820. "FLAG": "vivo",
  821. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  822. "SNI": "",
  823. "TlsIP": "",
  824. "ProxyIP": "support.hotmart.com",
  825. "ProxyPort": "80",
  826. "Info": "Proxy"
  827. },
  828. {
  829. "Name": "VIVO FLARE [07]",
  830. "FLAG": "vivo",
  831. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  832. "SNI": "",
  833. "TlsIP": "",
  834. "ProxyIP": "localonlinepresence.com",
  835. "ProxyPort": "80",
  836. "Info": "Proxy"
  837. },
  838. {
  839. "Name": "VIVO FLARE [08]",
  840. "FLAG": "vivo",
  841. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  842. "SNI": "",
  843. "TlsIP": "",
  844. "ProxyIP": "104.16.51.111",
  845. "ProxyPort": "80",
  846. "Info": "Proxy"
  847. },
  848. {
  849. "Name": "VIVO FLARE [09]",
  850. "FLAG": "vivo",
  851. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  852. "SNI": "",
  853. "TlsIP": "1",
  854. "ProxyIP": "amon14--support.zendesk.com",
  855. "ProxyPort": "80",
  856. "Info": "Proxy"
  857. },
  858. {
  859. "Name": "VIVO FLARE [10]",
  860. "FLAG": "vivo",
  861. "Payload": "GET / HTTP/1.1[lf]Host: [app_host][lf]Expect: 100-wesley[lf]Connection: Upgrade[lf]Upgrade: websocket[lf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[lf][lf]",
  862. "SNI": "",
  863. "TlsIP": "",
  864. "ProxyIP": "ayuda.tigo.com.gt",
  865. "ProxyPort": "80",
  866. "Info": "Proxy"
  867. },
  868. {
  869. "Name": "VIVO FLARE [11]",
  870. "FLAG": "vivo",
  871. "Payload": "GET / HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  872. "SNI": "[app_host]",
  873. "TlsIP": "",
  874. "ProxyIP": "104.16.53.111",
  875. "ProxyPort": "80",
  876. "Info": "Proxy"
  877. },
  878. {
  879. "Name": "VIVO FLARE [12]",
  880. "FLAG": "vivo",
  881. "Payload": "GET / HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  882. "SNI": "mobilidade.cloud.caixa.gov.br",
  883. "TlsIP": "",
  884. "ProxyIP": "104.16.51.111",
  885. "ProxyPort": "80",
  886. "Info": "Proxy"
  887. },
  888. {
  889. "Name": "VIVO FLARE | 01",
  890. "FLAG": "vivo",
  891. "Payload": "BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: link-net.shop[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  892. "SNI": "link-net.shop",
  893. "TlsIP": "104.16.53.111",
  894. "ProxyIP": "",
  895. "ProxyPort": "443",
  896. "Info": "Tlsws"
  897. },
  898. {
  899. "Name": "VIVO FLARE | 02",
  900. "FLAG": "vivo",
  901. "Payload": "BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: link-net.shop[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]",
  902. "SNI": "link-net.shop",
  903. "TlsIP": "104.16.53.111",
  904. "ProxyIP": "",
  905. "ProxyPort": "443",
  906. "Info": "Tlsws"
  907. },
  908. {
  909. "Name": "VIVO FLARE | 03",
  910. "FLAG": "vivo",
  911. "Payload": "GET / HTTP/1.1[crlf]Host: link-net.shop[crlf]Upgrade: websocket[crlf][crlf]",
  912. "SNI": "privacidade.ambev.com.br",
  913. "TlsIP": "privacidade.ambev.com.br",
  914. "ProxyIP": "privacidade.ambev.com.br",
  915. "ProxyPort": "80",
  916. "Info": "Proxy"
  917. },
  918. {
  919. "Name": "꧁🌎 Opções TIM Saldo Válido 🌎꧂",
  920. "FLAG": "",
  921. "Payload": "",
  922. "SNI": "",
  923. "TlsIP": "",
  924. "ProxyIP": "",
  925. "ProxyPort": "",
  926. "Info": ""
  927. },
  928. {
  929. "Name": "VIVO GPD EASY",
  930. "FLAG": "vivo",
  931. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  932. "SNI": "",
  933. "TlsIP": "",
  934. "ProxyIP": "lgpdfront.vivo.com.br",
  935. "ProxyPort": "80",
  936. "Info": "Proxy"
  937. },
  938. {
  939. "Name": "VIVO WEB EASY",
  940. "FLAG": "vivo",
  941. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Referer: google.com[crlf][crlf]",
  942. "SNI": "",
  943. "TlsIP": "104.18.6.41",
  944. "ProxyIP": "104.18.6.41",
  945. "ProxyPort": "80",
  946. "Info": "Proxy"
  947. },
  948. {
  949. "Name": "VIVO LEGADO EASY",
  950. "FLAG": "vivo",
  951. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Referer: google.com[crlf][crlf]",
  952. "SNI": "",
  953. "TlsIP": "104.18.7.41",
  954. "ProxyIP": "104.18.7.41",
  955. "ProxyPort": "80",
  956. "Info": "Proxy"
  957. },
  958. {
  959. "Name": "VIVO SONIC",
  960. "FLAG": "vivo",
  961. "Payload": "GET / HTTP/1.1[lf]Host: support.deezer.com[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  962. "SNI": "",
  963. "TlsIP": "",
  964. "ProxyIP": "adapitvivo.sonicvpn.xyz",
  965. "ProxyPort": "80",
  966. "Info": "Proxy"
  967. },
  968. {
  969. "Name": "VIVO E TIM FULL",
  970. "FLAG": "vivo",
  971. "Payload": "GET / HTTP/1.5[crlf]Host: [rotate=gitlab.com;atendimento.lojadointer.com.br;atendimento.magazineluiza.com.br;mycannabisconversation.com.br;compre.vivo.com.br;snow.vivo.com.br;backoffice-equipamentos01.vivo.com.br;lgpdfront.vivo.com.br;workplaceservices.surveymonkey.com][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  972. "SNI": "",
  973. "TlsIP": "104.15.51.111",
  974. "ProxyIP": "104.16.53.111",
  975. "ProxyPort": "80",
  976. "Info": "Proxy"
  977. },
  978. {
  979. "Name": "VIVO PRE WORKPLACE",
  980. "FLAG": "vivo",
  981. "Payload": "GET wss://[app_host] HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  982. "SNI": "[app_host]",
  983. "TlsIP": "workplaceservices.surveymonkey.com",
  984. "ProxyIP": "workplaceservices.surveymonkey.com",
  985. "ProxyPort": "443",
  986. "Info": "Tlsws"
  987. },
  988. {
  989. "Name": "VIVO MOD",
  990. "FLAG": "vivo",
  991. "Payload": "GET /? HTTP/1.2rnHost: [app_host]rnUpgrade: websocketrnConnection: Keep-AlivenUser-Agent: [ua]nReferer: rnrnSEJA UM REVENDEDOR 10 LOGINS=R$30,00 25 LOGINS=R$45,0030 LOGINS=R$55,00 40LOGINS=R$60,00 50LOGINS=R$80,00 100 LOGINS=R$100,00(https://crownleypst.wixsite.com/vipervpn)",
  992. "SNI": "",
  993. "TlsIP": "",
  994. "ProxyIP": "104.16.53.111",
  995. "ProxyPort": "80",
  996. "Info": "Proxy"
  997. },
  998. {
  999. "Name": "VIVO PRE ROTATE NOVA",
  1000. "FLAG": "vivo",
  1001. "Payload": "YUNO HTTP://[random=[app_host]] HTTP/1.3[crlf]Host: [rotate=atendimento.lojadointer.com.br;atendimento.magazineluiza.com.br;mycannabisconversation.com.br;compre.vivo.com.br;snow.vivo.com.br;backoffice-equipamentos01.vivo.com.br][crlf]Upgrade: Websocket[crlf][crlf]",
  1002. "SNI": "",
  1003. "TlsIP": "",
  1004. "ProxyIP": "atendimento.lojadointer.com.br",
  1005. "ProxyPort": "80",
  1006. "Info": "Proxy"
  1007. },
  1008. {
  1009. "Name": "VIVO CLOUDFRONT TODOS DDDS",
  1010. "FLAG": "vivo",
  1011. "Payload": "GET / HTTP/1.1[crlf]Host: d2sryo4xtk00av.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf]Expect: 100-continue[crlf][crlf]",
  1012. "SNI": "",
  1013. "TlsIP": "",
  1014. "ProxyIP": "web.vivorecarga.m4u.com.br",
  1015. "ProxyPort": "80",
  1016. "Info": "Proxy"
  1017. },
  1018. },
  1019. ]
  1020. }

comments powered by Disqus