ATT

SUBMITTED BY: RIDINHA0811

DATE: Nov. 26, 2022, 3:17 p.m.

UPDATED: Dec. 9, 2022, 12:09 p.m.

FORMAT: JSON

SIZE: 36.7 kB

History Raw Download

HITS: 735

Report
  1. {
  2. "Version": "1.7",
  3. "ReleaseNotes": "NOVAS PAYLOUDS DA TIM OI E CLARO",
  4. "UrlUpdate": "https://bitbin.it/Wt4zMsFQ/raw/",
  5. "Sms": "",
  6. "EmailFeedback": "@gmail.com",
  7. "UrlContato": "https://T.me/",
  8. "UrlTermos": "",
  9. "CheckUser": "true",
  10. "Udp": [
  11. {
  12. "Porta": "7100"
  13. }
  14. ],
  15. "Servers": [
  16. {
  17. "Name": "RIDNET NORMAL πŸ‡§πŸ‡·",
  18. "TYPE": "premium",
  19. "FLAG": "br.png",
  20. "ServerIP": "painel.androssh.com",
  21. "CheckUser": "http://104.21.83.222:8182/checkUser",
  22. "ServerPort": "22",
  23. "SSLPort": "443",
  24. "USER": "",
  25. "PASS": ""
  26. },
  27. {
  28. "Name": "RIDNET FULLπŸ‡§πŸ‡·",
  29. "TYPE": "premium",
  30. "FLAG": "br.png",
  31. "ServerIP": "joseotavio.xyz",
  32. "CheckUser": "http://177.153.50.110:8181/checkUser",
  33. "ServerPort": "22",
  34. "SSLPort": "443",
  35. "USER": "",
  36. "PASS": ""
  37. },
  38. {
  39. "Name": "RIDNET TESTAπŸ‡§πŸ‡·",
  40. "TYPE": "premium",
  41. "FLAG": "br.png",
  42. "ServerIP": "redeneet.tech",
  43. "CheckUser": "http://177.153.50.110:8181/checkUser",
  44. "ServerPort": "22",
  45. "SSLPort": "443",
  46. "USER": "",
  47. "PASS": ""
  48. }
  49. ],
  50. "Networks": [
  51. {
  52. "Name": "TODAS AS OPERADORAS 🌐",
  53. "FLAG": "vivo",
  54. "Payload": "GET wss://workplaceservices.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  55. "SNI": "workplaceservices.surveymonkey.com",
  56. "TlsIP": "workplaceservices.surveymonkey.com",
  57. "ProxyIP": "",
  58. "ProxyPort": "443",
  59. "Info": "Tlsws"
  60. },
  61. {
  62. "Name": "TODAS AS OPERADORAS 🌐",
  63. "FLAG": "oi",
  64. "Payload": "GET wss://smainfo.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  65. "SNI": "smainfo.surveymonkey.com",
  66. "TlsIP": "104.16.53.111",
  67. "ProxyIP": "104.16.53.111",
  68. "ProxyPort": "443",
  69. "Info": "Tlsws"
  70. },
  71. {
  72. "Name": "πŸ”΅TIM",
  73. "FLAG": "tim",
  74. "Payload": "GET wss://kickc6.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://tim.com.br, http://meuplano.tim.com.br[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@buganetiptv[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  75. "SNI": "kickc6.com.br",
  76. "TlsIP": "crm-leads-p.c6bank.info",
  77. "ProxyIP": "",
  78. "ProxyPort": "443",
  79. "Info": "Tlsws"
  80. },
  81. {
  82. "Name": "πŸ”΅TIM 04",
  83. "FLAG": "tim",
  84. "Payload": "GET wss://auth-uat-us.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  85. "SNI": "auth-uat-us.surveymonkey.com",
  86. "TlsIP": "104.18.7.22",
  87. "ProxyIP": "",
  88. "ProxyPort": "443",
  89. "Info": "Tlsws"
  90. },
  91. {
  92. "Name": "[TIM DIRECT] [02]",
  93. "FLAG": "tim",
  94. "Payload": "PROPPATCH www.reddit.com HTTP/1.0[crlf]Host: www.reddit.com[crlf]",
  95. "SNI": "api.onesignal.com",
  96. "TlsIP": "",
  97. "ProxyIP": "[app_host]",
  98. "ProxyPort": "80",
  99. "Info": "Proxy"
  100. },
  101. {
  102. "Name": "[TIM DIRECT] [03]",
  103. "FLAG": "tim",
  104. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  105. "SNI": "",
  106. "TlsIP": "",
  107. "ProxyIP": "[app_host]",
  108. "ProxyPort": "80",
  109. "Info": "Proxy"
  110. },
  111. {
  112. "Name": "[TIM DIRECT] [04]",
  113. "FLAG": "tim",
  114. "Payload": "PROPPATCH www.Alipay.com HTTP/1.0[crlf]Host: www.Alipay.com[crlf]",
  116. "SNI": "",
  117. "TlsIP": "",
  118. "ProxyIP": "[app_host]",
  119. "ProxyPort": "80",
  120. "Info": "Proxy"
  121. },
  122. {
  123. "Name": "[TIM DIRECT] [05]",
  124. "FLAG": "tim",
  125. "Payload": "PROPPATCH www.tumblr.com HTTP/1.0[crlf]Host: www.tumblr.com[crlf]",
  126. "SNI": "",
  127. "TlsIP": "",
  128. "ProxyIP": "[app_host]",
  129. "ProxyPort": "80",
  130. "Info": "Proxy"
  131. },
  132. {
  133. "Name": "[TIM DIRECT] [06]",
  134. "FLAG": "tim",
  135. "Payload": "POLL [method] [protocol][crlf]Host: [rotate=www.myspace.com][crlf]",
  136. "SNI": "",
  137. "TlsIP": "",
  138. "ProxyIP": "[app_host]",
  139. "ProxyPort": "80",
  140. "Info": "Proxy"
  141. },
  142. {
  143. "Name": "[TIM DIRECT] [07]",
  144. "FLAG": "tim",
  145. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  146. "SNI": "",
  147. "TlsIP": "",
  148. "ProxyIP": "[app_host]",
  149. "ProxyPort": "80",
  150. "Info": "Proxy"
  151. },
  152. {
  153. "Name": "[TIM DIRECT] [08]",
  154. "FLAG": "tim",
  155. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;1.0.0.5[crlf]",
  156. "SNI": "",
  157. "TlsIP": "",
  158. "ProxyIP": "[app_host]",
  159. "ProxyPort": "80",
  160. "Info": "Proxy"
  161. },
  162. {
  163. "Name": "πŸ’™ TIM GAMES",
  164. "FLAG": "tim",
  165. "Payload": "GET wss://mobile.c6bank.app HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  166. "SNI": "mobile.c6bank.app",
  167. "TlsIP": "mobile.c6bank.app",
  168. "ProxyIP": "",
  169. "ProxyPort": "443",
  170. "Info": "Tlsws"
  171. },
  172. {
  173. "Name": "GERAL 11/10 Ok",
  174. "FLAG": "tim",
  175. "Payload": "PROPPATCH wss://auth-uat-us.surveymonkey.com HTTP/1.200 [lf]Host: [app_host][lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  176. "SNI": "auth-uat-us.surveymonkey.com",
  177. "TlsIP": "104.18.7.22",
  178. "ProxyIP": "",
  179. "ProxyPort": "443",
  180. "Info": "Tlsws"
  181. },
  182. {
  183. "Name": "BLACK 11/10 Ok",
  184. "FLAG": "tim",
  185. "Payload": "PROPPATCH wss://mobile.c6bank.app HTTP/1.200 [lf]Host: [app_host][lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  186. "SNI": "mobile.c6bank.app",
  187. "TlsIP": "mobile.c6bank.app",
  188. "ProxyIP": "",
  189. "ProxyPort": "443",
  190. "Info": "Tlsws"
  191. },
  192. {
  193. "Name": "πŸ’™Κ•β€’Μα΄₯‒̀ʔっTIM CRΓ‰DITO VÁLIDO ●RÁPIDA● ",
  194. "FLAG": "tim",
  195. "Payload": "GET wss://gitlab.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  196. "SNI": "gitlab.com",
  197. "TlsIP": "172.65.251.78",
  198. "ProxyIP": "",
  199. "ProxyPort": "443",
  200. "Info": "Tlsws"
  201. },
  202. {
  203. "Name": "TIM Direct familia buga",
  204. "FLAG": "tim",
  205. "Payload": "PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]",
  206. "SNI": "",
  207. "TlsIP": "",
  208. "ProxyIP": "[app_host]",
  209. "ProxyPort": "80",
  210. "Info": "Proxy"
  211. },
  212. {
  213. "Name": "TIM Direct familia 2",
  214. "FLAG": "tim",
  215. "Payload": "GET wss://api.onesignal.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, TOPSPEED[crlf][crlf]",
  216. "SNI": "",
  217. "TlsIP": "",
  218. "ProxyIP": "api.onesignal.com",
  219. "ProxyPort": "80",
  220. "Info": "Proxy"
  221. },
  222. {
  223. "Name": "β•°β”ˆ[☞>πŸ“±π—§π—œπ—  πŸ±π—š 𝟬1 πŸ“‘ πŸ”΅",
  224. "FLAG": "tim",
  226. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: t.me/scottsshd[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  227. "SNI": "duvidas.ampli.com.br",
  228. "TlsIP": "104.16.53.111",
  229. "ProxyIP": "",
  230. "ProxyPort": "443",
  231. "Info": "Tlsws"
  232. },
  233. {
  234. "Name": "β•°β”ˆ[☞>πŸ“±π—§π—œπ—  πŸ±π—š 𝟬2 πŸ“‘ πŸ”΅",
  235. "FLAG": "tim",
  236. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: t.me/scottsshd[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alivecrlf][crlf]",
  237. "SNI": "duvidas.ampli.com.br",
  238. "TlsIP": "104.16.53.111",
  239. "ProxyIP": "",
  240. "ProxyPort": "443",
  241. "Info": "Tlsws"
  242. },
  243. {
  244. "Name": "TIM Tlsws 1",
  245. "FLAG": "tim",
  246. "Payload": "GET wss://atendimento.alliedbrasil.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  247. "SNI": "atendimento.alliedbrasil.com.br",
  248. "TlsIP": "atendimento.alliedbrasil.com.br",
  249. "ProxyIP": "",
  250. "ProxyPort": "443",
  251. "Info": "Tlsws"
  252. },
  253. {
  254. "Name": "TIM Tlsws 2",
  255. "FLAG": "tim",
  256. "Payload": "GET wss://atendimento.alliedbrasil.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  257. "SNI": "atendimento.alliedbrasil.com.br",
  258. "TlsIP": "104.16.53.111",
  259. "ProxyIP": "",
  260. "ProxyPort": "443",
  261. "Info": "Tlsws"
  262. },
  263. {
  264. "Name": "πŸ”΅TIM 01πŸ”΅ (RECOMENDADO)",
  265. "FLAG": "tim",
  266. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  267. "SNI": "duvidas.ampli.com.br",
  268. "TlsIP": "104.16.53.111",
  269. "ProxyIP": "104.16.53.111",
  270. "ProxyPort": "443",
  271. "Info": "Tlsws"
  272. },
  273. {
  274. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[BAM] 1",
  275. "FLAG": "tim",
  276. "Payload": "GET wss://bam.nr-data.net HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  277. "SNI": "bam.nr-data.net",
  278. "TlsIP": "bam.nr-data.net",
  279. "ProxyIP": "bam.nr-data.net",
  280. "ProxyPort": "443",
  281. "Info": "Tlsws"
  282. },
  283. {
  284. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[BAM 2]",
  285. "FLAG": "tim",
  286. "Payload": "GET wss://bam.nr-data.net HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  287. "SNI": "bam.nr-data.net",
  288. "TlsIP": "bam.nr-data.net",
  289. "ProxyIP": "162.247.241.14",
  290. "ProxyPort": "443",
  291. "Info": "Tlsws"
  292. },
  293. {
  294. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[BAM 3]",
  295. "FLAG": "tim",
  296. "Payload": "GET wss://bam.nr-data.net HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  297. "SNI": "bam.nr-data.net",
  298. "TlsIP": "162.247.241.14",
  299. "ProxyIP": "",
  300. "ProxyPort": "443",
  301. "Info": "Tlsws"
  302. },
  303. {
  304. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[BLOG] 1",
  305. "FLAG": "tim",
  306. "Payload": "GET wss://blog.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  307. "SNI": "blog.c6bank.com.br",
  308. "TlsIP": "104.16.236.16",
  309. "ProxyIP": "",
  310. "ProxyPort": "443",
  311. "Info": "Tlsws"
  312. },
  313. {
  314. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[BLOG] 2",
  315. "FLAG": "tim",
  316. "Payload": "GET wss://blog.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  317. "SNI": "blog.c6bank.com.br",
  318. "TlsIP": "blog.c6bank.com.br",
  319. "ProxyIP": "",
  320. "ProxyPort": "443",
  321. "Info": "Tlsws"
  322. },
  323. {
  324. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[Ajuda] 1",
  325. "FLAG": "tim",
  326. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  328. "SNI": "ajuda.c6bank.com.br",
  329. "TlsIP": "104.16.236.16",
  330. "ProxyIP": "",
  331. "ProxyPort": "443",
  332. "Info": "Tlsws"
  333. },
  334. {
  335. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[Ajuda] 2",
  336. "FLAG": "tim",
  337. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  338. "SNI": "ajuda.c6bank.com.br",
  339. "TlsIP": "ajuda.c6bank.com.br",
  340. "ProxyIP": "",
  341. "ProxyPort": "443",
  342. "Info": "Tlsws"
  343. },
  344. {
  345. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[CDN6B] 1",
  346. "FLAG": "tim",
  347. "Payload": "GET wss://cdn.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  348. "SNI": "cdn.c6bank.com.br",
  349. "TlsIP": "104.16.236.16",
  350. "ProxyIP": "",
  351. "ProxyPort": "443",
  352. "Info": "Tlsws"
  353. },
  354. {
  355. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š[CDN6B] 2",
  356. "FLAG": "tim",
  357. "Payload": "GET wss://cdn.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  358. "SNI": "cdn.c6bank.com.br",
  359. "TlsIP": "cdn.c6bank.com.br",
  360. "ProxyIP": "",
  361. "ProxyPort": "443",
  362. "Info": "Tlsws"
  363. },
  364. {
  365. "Name": "β•°β”ˆ[☞>π—§π—œπ— πŸ”΅πŸ±π—š [DUVIDAS]",
  366. "FLAG": "tim",
  367. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1\nHost: [app_host] \nUpgrade: ws\n\n",
  368. "SNI": "duvidas.ampli.com.br",
  369. "TlsIP": "104.16.53.111",
  370. "ProxyIP": "",
  371. "ProxyPort": "443",
  372. "Info": "Tlsws"
  373. },
  374. {
  375. "Name": "TIM 5G ULTRA",
  376. "FLAG": "tim",
  377. "Payload": "GET wss://workplaceservices.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  378. "SNI": "workplaceservices.surveymonkey.com",
  379. "TlsIP": "104.16.51.111",
  380. "ProxyIP": "",
  381. "ProxyPort": "443",
  382. "Info": "Tlsws"
  383. },
  384. {
  385. "Name": "πŸ”₯TIM TODAS AS REGIOESπŸ”₯",
  386. "FLAG": "tim",
  387. "Payload": "GET wss://terms.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: covid[crlf]Connection: Keep-Alive[crlf][crlf]",
  388. "SNI": "terms.c6bank.com.br",
  389. "TlsIP": "172.64.144.237",
  390. "ProxyIP": "",
  391. "ProxyPort": "443",
  392. "Info": "Tlsws"
  393. },
  394. {
  395. "Name": "πŸ’™TIM CURSO",
  396. "FLAG": "tim",
  397. "Payload": "GET / HTTP/1.1[crlf]Host: [crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  398. "SNI": "cursolivre.ampli.com.br",
  399. "TlsIP": "cursolivre.ampli.com.br",
  400. "ProxyIP": "cursolivre.ampli.com.br",
  401. "ProxyPort": "443",
  402. "Info": "Tlsws"
  403. },
  404. {
  405. "Name": "πŸ’™TIM DDDS",
  406. "FLAG": "tim",
  407. "Payload": "GET wss://chc.wooza.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  408. "SNI": "chc.wooza.com.br",
  409. "TlsIP": "172.64.144.237",
  410. "ProxyIP": "",
  411. "ProxyPort": "443",
  412. "Info": "Tlsws"
  413. },
  414. {
  415. "Name": "β•°β”ˆ[☞>π—§π—œπ—  DIAMANTE",
  416. "FLAG": "tim",
  417. "Payload": "GET wss://smainfo.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  418. "SNI": "smainfo.surveymonkey.com",
  419. "TlsIP": "smainfo.surveymonkey.com",
  420. "ProxyIP": "",
  421. "ProxyPort": "443",
  422. "Info": "Tlsws"
  423. },
  424. {
  425. "Name": "β•°β”ˆ[☞>π—§π—œπ—  ESMERALDA",
  426. "FLAG": "tim",
  427. "Payload": "GET wss://smainfo.surveymonkey.com HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  429. "SNI": "smainfo.surveymonkey.com",
  430. "TlsIP": "104.17.71.206",
  431. "ProxyIP": "",
  432. "ProxyPort": "443",
  433. "Info": "Tlsws"
  434. },
  435. {
  436. "Name": "TIM GERAL-ON",
  437. "FLAG": "tim",
  438. "Payload": "PROPPATCH wss://auth-uat-us.surveymonkey.com HTTP/1.200 [lf]Host: [app_host][lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  439. "SNI": "auth-uat-us.surveymonkey.com",
  440. "TlsIP": "104.18.7.22",
  441. "ProxyIP": "",
  442. "ProxyPort": "443",
  443. "Info": "Tlsws"
  444. },
  445. {
  446. "Name": "πŸ’™TIM CLOUD 2",
  447. "FLAG": "tim",
  448. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: WebSocket[crlf][crlf]",
  449. "SNI": "ajuda.c6bank.com.br",
  450. "TlsIP": "172.64.144.237",
  451. "ProxyIP": "",
  452. "ProxyPort": "80",
  453. "Info": "Proxy"
  454. },
  455. {
  456. "Name": "πŸ’™TIM CLOUD 3",
  457. "FLAG": "tim",
  458. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: WebSocket[crlf][crlf]",
  459. "SNI": "ajuda.c6bank.com.br",
  460. "TlsIP": "172.64.144.237",
  461. "ProxyIP": "",
  462. "ProxyPort": "443",
  463. "Info": "Tlsws"
  464. },
  465. {
  466. "Name": "πŸ’™TIM CLOUD 4",
  467. "FLAG": "tim",
  468. "Payload": "GET wss://assets-sf.c6bank.com.br// HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  469. "SNI": "assets-sf.c6bank.com.br",
  470. "TlsIP": "172.64.144.237",
  471. "ProxyIP": "",
  472. "ProxyPort": "443",
  473. "Info": "Tlsws"
  474. },
  475. {
  476. "Name": "πŸ’™TIM CLOUD 5",
  477. "FLAG": "tim",
  478. "Payload": "GET wss://auth.of.c6bank.com.br// HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  479. "SNI": "auth.of.c6bank.com.br",
  480. "TlsIP": "172.64.144.237",
  481. "ProxyIP": "",
  482. "ProxyPort": "443",
  483. "Info": "Tlsws"
  484. },
  485. {
  486. "Name": "πŸ’™TIM CLOUD 6",
  487. "FLAG": "tim",
  488. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: WebSocket[crlf][crlf]",
  489. "SNI": "ajuda.c6bank.com.br",
  490. "TlsIP": "172.64.144.237",
  491. "ProxyIP": "",
  492. "ProxyPort": "443",
  493. "Info": "Tlsws"
  494. },
  495. {
  496. "Name": "πŸ’™TIM Bugaon",
  497. "FLAG": "tim",
  498. "Payload": "GET wss://workplaceservices.surveymonkey.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  499. "SNI": "workplaceservices.surveymonkey.com",
  500. "TlsIP": "104.16.53.111",
  501. "ProxyIP": "",
  502. "ProxyPort": "443",
  503. "Info": "Tlsws"
  504. },
  505. {
  506. "Name": "πŸ”΅TIM FRONT 1",
  507. "FLAG": "tim",
  508. "Payload": "GET / HTTP/1.1[crlf]Host: d12xdihalkmz3w.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  509. "SNI": "",
  510. "TlsIP": "",
  511. "ProxyIP": "pos.tim.com.br",
  512. "ProxyPort": "80",
  513. "Info": "Proxy"
  514. },
  515. {
  516. "Name": "πŸ”΅TIM FRONT 2",
  517. "FLAG": "tim",
  518. "Payload": "GET / HTTP/1.1[crlf]Host: d12xdihalkmz3w.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua[crlf] Upgrade: websocket[crlf][crlf]",
  519. "SNI": "",
  520. "TlsIP": "",
  521. "ProxyIP": "contratecontrole.tim.com.br",
  522. "ProxyPort": "80",
  523. "Info": "Proxy"
  524. },
  525. {
  526. "Name": "πŸ”΅TIM FRONT 2",
  527. "FLAG": "tim",
  528. "Payload": "GET / HTTP/1.1[crlf]Host: d12xdihalkmz3w.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  529. "SNI": "",
  530. "TlsIP": "",
  531. "ProxyIP": "18.64.174.27",
  532. "ProxyPort": "80",
  533. "Info": "Proxy"
  534. },
  535. {
  536. "Name": "TIM [03]TURBO",
  537. "FLAG": "tim",
  538. "Payload": "GET wss://api.sandbox.c6bank.com.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  539. "SNI": "api.sandbox.c6bank.com.br",
  540. "TlsIP": "api.sandbox.c6bank.com.br",
  541. "ProxyIP": "",
  542. "ProxyPort": "443",
  543. "Info": "Tlsws"
  544. },
  545. {
  546. "Name": " TIM MELHOR FULL",
  547. "FLAG": "tim",
  548. "Payload": "GET wss://api.sandbox.c6bank.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  549. "SNI": "api.sandbox.c6bank.com.br",
  550. "TlsIP": "172.64.154.90",
  551. "ProxyIP": "",
  552. "ProxyPort": "443",
  553. "Info": "Tlsws"
  554. },
  555. {
  556. "Name":"VIVO 01",
  557. "FLAG":"vivo",
  558. "Payload":"GET wss://help.one.com/ HTTP/1.1[crlf]Host: SEUDOMINIO[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  559. "SNI":"help.one.com",
  560. "TlsIP":"support.deezer.com",
  561. "ProxyIP":"104.16.51.111",
  562. "ProxyPort":"443",
  563. "Info":"Tlsws"
  564. },
  565. {
  566. "Name":"VIVO 02",
  567. "FLAG":"vivo",
  568. "Payload":"GET wss:\/\/support.deezer.com HTTP\/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  569. "SNI":"support.deezer.com",
  570. "TlsIP":"support.deezer.com",
  571. "ProxyIP":"",
  572. "ProxyPort":"443",
  573. "Info":"Tlsws"
  574. },
  576. {
  577. "Name":"VIVO 03",
  578. "FLAG":"vivo",
  579. "Payload":"GET wss:\/\/lojaempresas.vivo.com.br HTTP\/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  580. "SNI":"lojaempresas.vivo.com.br",
  581. "TlsIP":"104.16.51.111",
  582. "ProxyIP":"",
  583. "ProxyPort":"443",
  584. "Info":"Tlsws"
  585. },
  587. {
  588. "Name":"VIVO 04",
  589. "FLAG":"vivo",
  590. "Payload":"GET wss:\/\/lojaempresas.vivo.com.br HTTP\/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  591. "SNI":"lojaempresas.vivo.com.br",
  592. "TlsIP":"104.16.51.111",
  593. "ProxyIP":"",
  594. "ProxyPort":"443",
  595. "Info":"Tlsws"
  596. },
  598. {
  599. "Name":"VIVO 05",
  600. "FLAG":"vivo",
  601. "Payload":"GET wss:\/\/vigia.vivo.com.br\/\/ HTTP\/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  602. "SNI":"vigia.vivo.com.br",
  603. "TlsIP":"104.18.7.80",
  604. "ProxyIP":"",
  605. "ProxyPort":"443",
  606. "Info":"Tlsws"
  607. },
  608. {
  609. "Name": "VIVO 06 πŸ“‘",
  610. "FLAG": "vivo",
  611. "Payload": "GET wss://[rotate=workplaceservices.surveymonkey.com;gracegardencounseling.com;bam.nr-data.net;[app_host];vivoid.vivo.com.br;melhorplano.net;vivo360.vivo.com.br;vivorio.com.br;selectra.net.br;gprs.digitel.com.ve;power4fit.com;bolsas.alfaumuarama.edu.br;eventos.alfaumuarama.edu.br;concursos.alfaumuarama.edu.br;legado.vivo.com.br;carrinho-pos-familia.vivo.com.br;unpkg.com;cdnjs.cloudflare.com;portaljud.vivo.com.br;vivoemdia.vivo.com.br;fly218.com;rapehun.com] HTTP/1.1[lf]Host: [app_host][lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  612. "SNI": "",
  613. "TlsIP": "",
  614. "ProxyIP": "104.16.53.111",
  615. "ProxyPort": "80",
  616. "Info": "Proxy"
  617. },
  618. {
  619. "Name": "VIVO 07",
  620. "FLAG": "vivo",
  621. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  622. "SNI": "duvidas.ampli.com.br",
  623. "TlsIP": "104.16.53.111",
  624. "ProxyIP": "104.16.53.111",
  625. "ProxyPort": "443",
  626. "Info": "Tlsws"
  627. },
  628. {
  629. "Name": "VIVO 08",
  630. "FLAG": "vivo",
  631. "Payload": "GET wss://support.counterpath.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  632. "SNI": "support.counterpath.com",
  633. "TlsIP": "104.16.51.111",
  634. "ProxyIP":"",
  635. "ProxyPort": "443",
  636. "Info":"Tlsws"
  637. },
  638. {
  639. "Name": "VIVO 09",
  640. "FLAG":"vivo",
  641. "Payload": "GET wss://duvidas.ampli.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  642. "SNI":"duvidas.ampli.com.br",
  643. "TlsIP":"duvidas.ampli.com.br",
  644. "ProxyIP":"",
  645. "ProxyPort":"443",
  646. "Info":"Tlsws"
  647. },
  648. {
  649. "Name": "VIVO 10",
  650. "FLAG": "vivo",
  652. "Payload": "GET wss://[rotate=workplaceservices.surveymonkey.com;gracegardencounseling.com;bam.nr-data.net;[app_host];vivoid.vivo.com.br;melhorplano.net;vivo360.vivo.com.br;vivorio.com.br;selectra.net.br;gprs.digitel.com.ve;power4fit.com;bolsas.alfaumuarama.edu.br;eventos.alfaumuarama.edu.br;concursos.alfaumuarama.edu.br;legado.vivo.com.br;carrinho-pos-familia.vivo.com.br;unpkg.com;cdnjs.cloudflare.com;portaljud.vivo.com.br;vivoemdia.vivo.com.br;fly218.com;rapehun.com] HTTP/1.1[lf]Host: [app_host][lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  653. "SNI": "",
  654. "TlsIP": "",
  655. "ProxyIP": "104.16.53.111",
  656. "ProxyPort": "80",
  657. "Info": "Proxy"
  658. },
  659. {
  660. "Name": "VIVO 11",
  661. "FLAG": "tim",
  662. "Payload": "GET wss://support.deezer.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  663. "SNI": "support.deezer.com",
  664. "TlsIP":
  665. "support.deezer.com",
  666. "ProxyIP": "",
  667. "ProxyPort": "443",
  668. "Info": "Tlsws"
  669. },
  670. {
  671. "Name": "VIVO 12",
  672. "FLAG": "vivo",
  673. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  674. "SNI": "[app_host]",
  675. "TlsIP": "104.18.7.80",
  676. "ProxyIP": "",
  677. "ProxyPort": "",
  678. "Info": "Tlsws"
  679. },
  680. {
  681. "Name": "VIVO 13",
  682. "FLAG": "vivo",
  683. "Payload": "GET wss://protecao.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: ws[crlf][crlf]",
  684. "SNI": "protecao.vivo.com.br",
  685. "TlsIP": "104.18.6.80",
  686. "ProxyIP": "",
  687. "ProxyPort": "443",
  688. "Info": "Tlsws"
  689. },
  690. {
  691. "Name": "VIVO 14",
  692. "FLAG": "vivo",
  693. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  694. "SNI": "[app_host]",
  695. "TlsIP": "104.18.7.80",
  696. "ProxyIP": "",
  697. "ProxyPort": "443",
  698. "Info": "Tlsws"
  699. },
  700. {
  701. "Name": "VIVO 15",
  702. "FLAG": "vivo",
  703. "Payload": "GET wss://protecao.vivo.com.br/ HTTP/1.1[lf]Host: [app_host][lf]Proxy-Connection: t.me/cybersshoficial[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  704. "SNI": "protecao.vivo.com.br",
  705. "TlsIP": "104.18.6.80",
  706. "ProxyIP": "",
  707. "ProxyPort": "443",
  708. "Info": "Tlsws"
  709. },
  710. {
  711. "Name": "VIVO 16",
  712. "FLAG": "vivo",
  713. "Payload": "GET wss://lojaempresas.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  714. "SNI": "lojaempresas.vivo.com.br",
  715. "TlsIP": "lojaempresas.vivo.com.br",
  716. "ProxyIP": "",
  717. "ProxyPort": "443",
  718. "Info": "Tlsws"
  719. },
  720. {
  721. "Name": "VIVO 17",
  722. "FLAG": "vivo",
  723. "Payload": "GET wss://legado.vivo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  724. "SNI": "legado.vivo.com.br",
  725. "TlsIP": "legado.vivo.com.br",
  726. "ProxyIP": "",
  727. "ProxyPort": "443",
  728. "Info": "Tlsws"
  729. },
  730. {
  731. "Name": "VIVO 18",
  732. "FLAG": "vivo",
  733. "Payload": "GET wss://uk.audiobooks.com HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  734. "SNI": "uk.audiobooks.com",
  735. "TlsIP": "uk.audiobooks.com",
  736. "ProxyIP": "",
  737. "ProxyPort": "443",
  738. "Info": "Tlsws"
  739. },
  740. {
  741. "Name": "VIVO 19",
  742. "FLAG": "vivo",
  743. "Payload": "GET / HTTP/1.1[crlf]Host: d325u42kpn681y.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  744. "SNI": "",
  745. "TlsIP": "",
  746. "ProxyIP": "recarga.vivo.com.br",
  747. "ProxyPort": "80",
  748. "Info": "Proxy"
  749. },
  750. {
  751. "Name": "CLARO [01]",
  752. "FLAG": "claro",
  753. "Payload": "GET wss://Atendimento.descomplica.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  754. "SNI": "Atendimento.descomplica.com.br",
  755. "TlsIP": "Atendimento.descomplica.com.br",
  756. "ProxyIP": "",
  757. "ProxyPort": "443",
  758. "Info": "Tlsws"
  759. },
  760. {
  761. "Name": "CLARO [02]",
  762. "FLAG": "claro",
  763. "Payload": "GET wss://Atendimento.descomplica.com.br/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  764. "SNI": "Atendimento.descomplica.com.br",
  765. "TlsIP": "Atendimento.descomplica.com.br",
  766. "ProxyIP": "",
  767. "ProxyPort": "443",
  768. "Info": "Tlsws"
  769. },
  770. {
  771. "Name": "CLARO [04]",
  772. "FLAG": "claro",
  773. "Payload": "GET http://bonuz.claro.com.br HTTP/1.0[crlf]Host: http://contaonline2.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  774. "SNI": "bonuz.claro.com.br",
  775. "TlsIP": "bonuz.claro.com.br",
  776. "ProxyIP": "[app_host]",
  777. "ProxyPort": "80",
  778. "Info": "Proxy"
  779. },
  780. {
  781. "Name": "CLARO [05]",
  782. "FLAG": "claro",
  783. "Payload": "GET http://m.claro.com.br HTTP/1.0[crlf]Host: [app_host][crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  784. "SNI": "m.claro.com.br",
  785. "TlsIP": "m.claro.com.br",
  786. "ProxyIP": "[app_host]",
  787. "ProxyPort": "80",
  788. "Info": "Direct"
  789. },
  790. {
  791. "Name": "CLARO [06]AV",
  792. "FLAG": "claro",
  793. "Payload": "GET http://ecob.claro.com.br HTTP/1.0[crlf]Host: [app_host][crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  794. "SNI": "ecob.claro.com.br",
  795. "TlsIP": "ecob.claro.com.br",
  796. "ProxyIP": "[app_host]",
  797. "ProxyPort": "80",
  798. "Info": "Direct"
  799. },
  800. {
  801. "Name": "CLARO [07]AV",
  802. "FLAG": "claro",
  803. "Payload": "GET http://bonuz.claro.com.br HTTP/1.0[crlf]Host: [app_host][crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  804. "SNI": "bonuz.claro.com.br",
  805. "TlsIP": "bonuz.claro.com.br",
  806. "ProxyIP": "[app_host]",
  807. "ProxyPort": "80",
  808. "Info": "Direct"
  809. },
  810. {
  811. "Name": "CLARO [08]AV",
  812. "FLAG": "claro",
  813. "Payload": "GET http://chat.mundiale.claro.com.br HTTP/1.0[crlf]Host: http://chat.mundiale.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  814. "TlsIP": "chat.mundiale.claro.com.br",
  815. "ProxyIP": "[app_host]",
  816. "ProxyPort": "80",
  817. "Info": "Direct"
  818. },
  819. {
  820. "Name": "CLARO [09]",
  821. "FLAG": "claro",
  822. "Payload": "GET wss://claro.appsclub.com.br HTTP/1.1\nHost: [app_host]\nUpgrade: WebSocket\n\n",
  823. "SNI": "claro.appsclub.com.br",
  824. "TlsIP": "claro.appsclub.com.br",
  825. "ProxyIP": "",
  826. "ProxyPort": "",
  827. "Info": "Tlsws"
  828. },
  829. {
  830. "Name": "CLARO [10]πŸš€",
  831. "FLAG": "claro",
  832. "Payload": "GET wss://em.launchdarkly.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  833. "SNI": "em.launchdarkly.com",
  834. "TlsIP": "em.launchdarkly.com",
  835. "ProxyIP": "",
  836. "ProxyPort": "443",
  837. "Info": "Tlsws"
  838. },
  839. {
  840. "Name": "CLARO [11]πŸš€",
  841. "FLAG": "claro",
  842. "Payload": "GET wss://go.launchdarkly.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  843. "SNI": "go.launchdarkly.com",
  844. "TlsIP": "104.17.72.206",
  845. "ProxyIP": "",
  846. "ProxyPort": "443",
  847. "Info": "Tlsws"
  848. },
  849. {
  850. "Name": "CLARO [12]πŸš€",
  851. "FLAG": "claro",
  852. "Payload": "GET wss://go.launchdarkly.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  853. "SNI": "go.launchdarkly.com",
  854. "TlsIP": "go.launchdarkly.com",
  855. "ProxyIP": "go.launchdarkly.com",
  856. "ProxyPort": "443",
  857. "Info": "Tlsws"
  858. },
  859. {
  860. "Name": "CLARO [03]",
  861. "FLAG": "claro",
  862. "Payload": "GET wss://Atendimento.descomplica.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  863. "SNI": "Atendimento.descomplica.com.br",
  864. "TlsIP": "Atendimento.descomplica.com.br",
  865. "ProxyIP": "",
  866. "ProxyPort": "443",
  867. "Info": "Tlsws"
  868. },
  869. {
  870. "Name": "OI [01]",
  871. "FLAG": "oi",
  872. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  873. "SNI": "www.hbogo.com.br",
  874. "TlsIP": "104.16.53.91",
  875. "ProxyIP": "",
  876. "ProxyPort": "",
  877. "Info": "Tlsws"
  878. },
  879. {
  880. "Name": "OI [02]",
  881. "FLAG": "oi",
  882. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  883. "SNI": "www.hbogo.com.br",
  884. "TlsIP": "www.hbogo.com.br",
  885. "ProxyIP": "",
  886. "ProxyPort": "",
  887. "Info": "Tlsws"
  888. },
  889. {
  890. "Name": "OI [03]",
  891. "FLAG": "oi",
  892. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  893. "SNI": "www.hbogo.com.br",
  894. "TlsIP": "www.hbogo.com.br",
  895. "ProxyIP": "",
  896. "ProxyPort": "",
  897. "Info": "Tlsws"
  898. },
  899. {
  900. "Name": "OI [04]",
  901. "FLAG": "oi",
  902. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  903. "SNI": "www.hbogo.com.br",
  904. "TlsIP": "104.16.53.91",
  905. "ProxyIP": "",
  906. "ProxyPort": "",
  907. "Info": "Tlsws"
  908. },
  909. {
  910. "Name": "OI [05]",
  911. "FLAG": "oi",
  912. "Payload": "GET sni://www.hbogo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  913. "SNI": "www.hbogo.com.br",
  914. "TlsIP": "104.16.51.91",
  915. "ProxyIP": "",
  916. "ProxyPort": "",
  917. "Info": "Tlsws"
  918. },
  919. {
  920. "Name": "OI [06]TESTE",
  921. "FLAG": "oi",
  922. "Payload": "GET ws://www.tcomp.net.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade:ws[crlf][crlf]",
  923. "SNI": "GET ws://www.hbogo.com.br",
  924. "TlsIP": "104.16.55.91",
  925. "ProxyIP": "",
  926. "ProxyPort": "",
  927. "Info": "Tlsws"
  928. },
  929. {
  930. "Name": " OI [07]",
  931. "FLAG": "oi",
  932. "Payload": "GET sni://www.hbogo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  933. "SNI": "www.hbogo.com.br",
  934. "TlsIP": "104.16.55.91",
  935. "ProxyIP": "",
  936. "ProxyPort": "443",
  937. "Info": "Tlsws"
  938. },
  939. {
  940. "Name": "OI [08]",
  941. "FLAG": "oi",
  942. "Payload": "GET wss://sso.hotjar.com HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  943. "SNI": "sso.hotjar.com",
  944. "TlsIP": "104.18.244.88",
  945. "ProxyIP": "",
  946. "ProxyPort": "443",
  947. "Info": "Tlsws"
  948. },
  949. {
  950. "Name": "OI [09]",
  951. "FLAG": "oi",
  952. "Payload": "GET wss://sso.hotjar.com HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  953. "SNI": "sso.hotjar.com",
  954. "TlsIP": "104.16.96.94",
  955. "ProxyIP": "",
  956. "ProxyPort": "443",
  957. "Info": "Tlsws"
  958. },
  959. {
  960. "Name": "OI [10]",
  961. "FLAG": "oi",
  962. "Payload": "GET wss://help-staging.hotjar.com HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  963. "SNI": "help-staging.hotjar.com",
  964. "TlsIP": "104.21.89.212",
  965. "ProxyIP": "",
  966. "ProxyPort": "443",
  967. "Info": "Tlsws"
  968. },
  969. {
  970. "Name": "OI [11]",
  971. "FLAG": "oi",
  972. "Payload": "GET wss://help-staging.hotjar.com HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  973. "SNI": "help-staging.hotjar.com",
  974. "TlsIP": "172.67.147.91",
  975. "ProxyIP": "",
  976. "ProxyPort": "443",
  977. "Info": "Tlsws"
  978. },
  979. {
  980. "Name": "OI [12]",
  981. "FLAG": "oi",
  982. "Payload": "GET wss://help.hotjar.com HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  983. "SNI": "help.hotjar.com",
  984. "TlsIP": "172.67.33.185",
  985. "ProxyIP": "",
  986. "ProxyPort": "443",
  987. "Info": "Tlsws"
  988. },
  989. {
  990. "Name": "OI [13]",
  991. "FLAG": "oi",
  992. "Payload": "GET wss://help.hotjar.com HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  993. "SNI": "help.hotjar.com",
  994. "TlsIP": "162.159.135.42",
  995. "ProxyIP": "",
  996. "ProxyPort": "443",
  997. "Info": "Tlsws"
  998. }
  999. ]
  1000. }
comments powered by Disqus