PLANET SSH 02


SUBMITTED BY: Gil

DATE: June 15, 2023, 2:51 a.m.

UPDATED: Feb. 23, 2024, 11:17 p.m.

FORMAT: Text only

SIZE: 30.3 kB

HITS: 6498

  1. {
  2. "Version": "10",
  3. "ReleaseNotes": "VIVO FUNCIONANDO NA \n [VIVO WEBSOCKET SECURITY]",
  4. "UrlUpdate": "https://bitbin.it/qV6C0kpE/raw/",
  5. "Sms": "https://paste.anasor.com/paste.php?raw&id=342381",
  6. "videoUrl": "https://sexy-civilian.000webhostapp.com/YouCut_20230705_062626300.mp4",
  7. "logoonline": "https://telegra.ph/file/b69f9ac15171411ad0d37.png",
  8. "fundoonline": "",
  9. "fundoDoLogOnline": "",
  10. "EmailFeedback": "",
  11. "UrlContato": "https://wa.me/5581996298165?text=Ol%C3%A1%20quero%20seu%20plano%20de%20internet%20ilimitada%20",
  12. "UrlTermos": "",
  13. "CheckUser": "true",
  14. "UdpPort": "7300",
  15. "Servers": [
  16. {
  17. "Name": "SERVIDOR BR 1",
  18. "TYPE": "premium",
  19. "FLAG": "br.png",
  20. "ServerIP": "och1.gatway.shop",
  21. "CheckUser": "http://179.96.107.131:8799/checkUser",
  22. "ServerPort": "22",
  23. "SSLPort": "443",
  24. "USER": "",
  25. "PASS": ""
  26. },
  27. {
  28. "Name": "📡SERVIDOR BR2",
  29. "TYPE": "premium",
  30. "FLAG": "br.png",
  31. "ServerIP": "och2.gatway.shop",
  32. "CheckUser": "http://149.78.186.171:8799/checkUser",
  33. "ServerPort": "22",
  34. "SSLPort": "443",
  35. "USER": "",
  36. "PASS": ""
  37. },
  38. {
  39. "Name": "📡SERVIDOR BR-03",
  40. "TYPE": "premium",
  41. "FLAG": "br.png",
  42. "ServerIP": "och3.gatway.shop",
  43. "CheckUser": "http://179.96.107.138:8799/checkUser",
  44. "ServerPort": "22",
  45. "SSLPort": "443",
  46. "USER": "",
  47. "PASS": ""
  48. }
  49. ],
  50. "Networks": [
  51. {
  52. "Name": "🟣 VIVO WSS BR - 01",
  53. "FLAG": "vivo",
  54. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: mobile.adobe.com[lf]",
  55. "SNI": "",
  56. "TlsIP": "",
  57. "ProxyIP": "179.96.107.131",
  58. "ProxyPort": "80",
  59. "Info": "Proxy"
  60. },
  61. {
  62. "Name": "🟣 VIVO WSS BR - 01",
  63. "FLAG": "vivo",
  64. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: plus.google.com[lf]",
  65. "SNI": "",
  66. "TlsIP": "",
  67. "ProxyIP": "179.96.107.131",
  68. "ProxyPort": "80",
  69. "Info": "Proxy"
  70. },
  71. {
  72. "Name": "🟣 VIVO WSS BR - 01",
  73. "FLAG": "vivo",
  74. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  75. "SNI": "",
  76. "TlsIP": "",
  77. "ProxyIP": "179.96.107.131",
  78. "ProxyPort": "80",
  79. "Info": "Proxy"
  80. },
  81. {
  82. "Name": "🟣VIVO SECURITY BR - 01",
  83. "FLAG": "vivo",
  84. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  85. "SNI": "",
  86. "TlsIP": "",
  87. "ProxyIP": "179.96.107.131",
  88. "ProxyPort": "80",
  89. "Info": "Proxy"
  90. },
  91. {
  92. "Name": "🟣VIVO SECURITY BR - 01",
  93. "FLAG": "vivo",
  94. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: community-dashbird.buzzfeed.com[lf]",
  95. "SNI": "",
  96. "TlsIP": "",
  97. "ProxyIP": "179.96.107.131",
  98. "ProxyPort": "80",
  99. "Info": "Proxy"
  100. },
  101. {
  102. "Name": "🟣VIVO SECURITY BR - 01",
  103. "FLAG": "vivo",
  104. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: plus.google.com[lf]",
  105. "SNI": "",
  106. "TlsIP": "",
  107. "ProxyIP": "179.96.107.131",
  108. "ProxyPort": "80",
  109. "Info": "Proxy"
  110. },
  111. {
  112. "Name": "🟣VIVO SECURITY BR - 01",
  113. "FLAG": "vivo",
  114. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: p.adsymptotic.com[lf]",
  115. "SNI": "",
  116. "TlsIP": "",
  117. "ProxyIP": "179.96.107.131",
  118. "ProxyPort": "80",
  119. "Info": "Proxy"
  120. },
  121. {
  122. "Name": "🟣VIVO SECURITY DDD 91 AO 94 BR - 01",
  123. "FLAG": "vivo",
  124. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n",
  125. "SNI": "",
  126. "TlsIP": "",
  127. "ProxyIP": "179.96.107.131",
  128. "ProxyPort": "80",
  129. "Info": "Proxy"
  130. },
  131. {
  132. "Name": "🟣VIVO SECURITY BR - 02",
  133. "FLAG": "vivo",
  134. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  135. "SNI": "",
  136. "TlsIP": "",
  137. "ProxyIP": "149.78.186.171",
  138. "ProxyPort": "80",
  139. "Info": "Proxy"
  140. },
  141. {
  142. "Name": "🟣VIVO SECURITY BR - 02",
  143. "FLAG": "vivo",
  144. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: community-dashbird.buzzfeed.com[lf]",
  145. "SNI": "",
  146. "TlsIP": "",
  147. "ProxyIP": "149.78.186.171",
  148. "ProxyPort": "80",
  149. "Info": "Proxy"
  150. },
  151. {
  152. "Name": "🟣VIVO SECURITY BR - 02",
  153. "FLAG": "vivo",
  154. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: plus.google.com[lf]",
  155. "SNI": "",
  156. "TlsIP": "",
  157. "ProxyIP": "149.78.186.171",
  158. "ProxyPort": "80",
  159. "Info": "Proxy"
  160. },
  161. {
  162. "Name": "🟣VIVO SECURITY BR - 02",
  163. "FLAG": "vivo",
  164. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: p.adsymptotic.com[lf]",
  165. "SNI": "",
  166. "TlsIP": "",
  167. "ProxyIP": "149.78.186.171",
  168. "ProxyPort": "80",
  169. "Info": "Proxy"
  170. },
  171. {
  172. "Name": "🟣VIVO SECURITY DDD 91 AO 94 BR - 02",
  173. "FLAG": "vivo",
  174. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n",
  175. "SNI": "",
  176. "TlsIP": "",
  177. "ProxyIP": "149.78.186.171",
  178. "ProxyPort": "80",
  179. "Info": "Proxy"
  180. },
  181. {
  182. "Name": "🟣VIVO SECURITY BR - 03",
  183. "FLAG": "vivo",
  184. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  185. "SNI": "",
  186. "TlsIP": "",
  187. "ProxyIP": "179.96.107.138",
  188. "ProxyPort": "80",
  189. "Info": "Proxy"
  190. },
  191. {
  192. "Name": "🟣VIVO SECURITY BR - 03",
  193. "FLAG": "vivo",
  194. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: community-dashbird.buzzfeed.com[lf]",
  195. "SNI": "",
  196. "TlsIP": "",
  197. "ProxyIP": "179.96.107.138",
  198. "ProxyPort": "80",
  199. "Info": "Proxy"
  200. },
  201. {
  202. "Name": "🟣VIVO SECURITY BR - 03",
  203. "FLAG": "vivo",
  204. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: plus.google.com[lf]",
  205. "SNI": "",
  206. "TlsIP": "",
  207. "ProxyIP": "179.96.107.138",
  208. "ProxyPort": "80",
  209. "Info": "Proxy"
  210. },
  211. {
  212. "Name": "🟣VIVO SECURITY BR - 03",
  213. "FLAG": "vivo",
  214. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: p.adsymptotic.com[lf]",
  215. "SNI": "",
  216. "TlsIP": "",
  217. "ProxyIP": "179.96.107.138",
  218. "ProxyPort": "80",
  219. "Info": "Proxy"
  220. },
  221. {
  222. "Name": "🟣VIVO SECURITY DDD 91 AO 94 BR - 03",
  223. "FLAG": "vivo",
  224. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n",
  225. "SNI": "",
  226. "TlsIP": "",
  227. "ProxyIP": "179.96.107.138",
  228. "ProxyPort": "80",
  229. "Info": "Proxy"
  230. },
  231. {
  232. "Name": "🟣VIVO SECURITY CA - 04",
  233. "FLAG": "vivo",
  234. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  235. "SNI": "",
  236. "TlsIP": "",
  237. "ProxyIP": "20.151.233.198",
  238. "ProxyPort": "80",
  239. "Info": "Proxy"
  240. },
  241. {
  242. "Name": "🟣VIVO SECURITY CA - 04",
  243. "FLAG": "vivo",
  244. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: community-dashbird.buzzfeed.com[lf]",
  245. "SNI": "",
  246. "TlsIP": "",
  247. "ProxyIP": "20.151.233.198",
  248. "ProxyPort": "80",
  249. "Info": "Proxy"
  250. },
  251. {
  252. "Name": "🟣VIVO SECURITY CA - 04",
  253. "FLAG": "vivo",
  254. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: plus.google.com[lf]",
  255. "SNI": "",
  256. "TlsIP": "",
  257. "ProxyIP": "20.151.233.198",
  258. "ProxyPort": "80",
  259. "Info": "Proxy"
  260. },
  261. {
  262. "Name": "🟣VIVO SECURITY CA - 04",
  263. "FLAG": "vivo",
  264. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: p.adsymptotic.com[lf]",
  265. "SNI": "",
  266. "TlsIP": "",
  267. "ProxyIP": "20.151.233.198",
  268. "ProxyPort": "80",
  269. "Info": "Proxy"
  270. },
  271. {
  272. "Name": "🟣VIVO SECURITY DDD 91 AO 94 BR - 04",
  273. "FLAG": "vivo",
  274. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: xnxx.com\\n\\n\\n \\n",
  275. "SNI": "",
  276. "TlsIP": "",
  277. "ProxyIP": "20.151.233.198",
  278. "ProxyPort": "80",
  279. "Info": "Proxy"
  280. },
  281. {
  282. "Name": "🟣VIVO FRONT 06 ONLINE ",
  283. "FLAG": "vivo",
  284. "Payload": "GET / HTTP/1.1[lf]Host:http://dbw1tbfi8dhtd.cloudfront.net/[crlf]Connection: Upgrade[lf]Upgrade: Websocket[lf][lf]",
  285. "SNI": "",
  286. "TlsIP": "",
  287. "ProxyIP": "cdnssl.clicktale.net",
  288. "ProxyPort": "80",
  289. "Info": "Proxy"
  290. },
  291. {
  292. "Name": "🟣VIVO FRONT 07 ONLINE",
  293. "FLAG": "vivo",
  294. "Payload": "GET / HTTP/1.1[lf]Host:dbw1tbfi8dhtd.cloudfront.net[crlf]Connection: Upgrade[lf]Upgrade: Websocket[lf][lf]",
  295. "SNI": "",
  296. "TlsIP": "",
  297. "ProxyIP": "108.158.122.48",
  298. "ProxyPort": "80",
  299. "Info": "Proxy"
  300. },
  301. {
  302. "Name": "🟣VIVO FRONT DDD 94 ",
  303. "FLAG": "vivo",
  304. "Payload": "GET / HTTP/1.1[lf]Host:dbw1tbfi8dhtd.cloudfront.net[crlf]Connection: Upgrade[lf]Upgrade: Websocket[lf][lf]",
  305. "SNI": "",
  306. "TlsIP": "",
  307. "ProxyIP": "108.139.113.33",
  308. "ProxyPort": "80",
  309. "Info": "Proxy"
  310. },
  311. {
  312. "Name": "🟣VIVO DDD 91 Front",
  313. "FLAG": "vivo",
  314. "Payload": "GET / HTTP/1.1[lf]Host:dbw1tbfi8dhtd.cloudfront.net[crlf]Connection: Upgrade[lf]Upgrade: Websocket[lf][lf]",
  315. "SNI": "",
  316. "TlsIP": "",
  317. "ProxyIP": "108.158.122.48",
  318. "ProxyPort": "80",
  319. "Info": "Proxy"
  320. },
  321. {
  322. "Name": "🔵TIM 38",
  323. "FLAG": "tim",
  324. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: och1.gatway.shop[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  325. "SNI": "",
  326. "TlsIP": "",
  327. "ProxyIP": "104.19.239.25",
  328. "ProxyPort": "80",
  329. "Info": "Proxy"
  330. },
  331. {
  332. "Name": "🔵TIM 33",
  333. "FLAG": "tim",
  334. "Payload": "CONNECT / HTTP/1.1\r\nHost: c6bank.com.br\r\n\r\nOPTIONS / HTTP/1.1\r\nHost: och1.gatway.shop\r\nEsperar: 200-continue\r\nProxy-Connection: Keep-Alive\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Extensions: superspeed\r\nUser-Agent: Mozilla/5.0 (Linux; Android 4.4.2; Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047",
  335. "SNI": "",
  336. "TlsIP": "",
  337. "ProxyIP": "104.19.239.25",
  338. "ProxyPort": "80",
  339. "Info": "Direct"
  340. },
  341. {
  342. "Name": "🔵TIM 1",
  343. "FLAG": "tim",
  344. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host:och1.gatway.shop[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  345. "SNI": "",
  346. "TlsIP": "",
  347. "ProxyIP": "104.18.27.160",
  348. "ProxyPort": "80",
  349. "Info": "Proxy"
  350. },
  351. {
  352. "Name": "🔵TIM 2",
  353. "FLAG": "tim",
  354. "Payload": "GET / HTTP/1.1[lf]Host: mobile.hom.c6bank.app[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: och1.gatway.shop[lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  355. "SNI": "",
  356. "TlsIP": "",
  357. "ProxyIP": "104.19.239.25",
  358. "ProxyPort": "80",
  359. "Info": "Proxy"
  360. },
  361. {
  362. "Name": "🔵TIM 3",
  363. "FLAG": "tim",
  364. "Payload": "GET / HTTP/1.1[lf]Host: mobile.hom.c6bank.app[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: och1.gatway.shop[lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  365. "SNI": "",
  366. "TlsIP": "",
  367. "ProxyIP": "104.18.27.160",
  368. "ProxyPort": "80",
  369. "Info": "Proxy"
  370. },
  371. {
  372. "Name": "🔵TIM 4",
  373. "FLAG": "tim",
  374. "Payload": "GET / HTTP/1.1\\nHost: click.mail.c6bank.com.br\\nExpect: 100-continue\\n\\n[split]\\n\\nACL /?/ HTTP/1.1\\nHost: och1.gatway.shop\\nExpect: 100-continue\\nUpgrade: websocket\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\n\\n",
  375. "SNI": "",
  376. "TlsIP": "",
  377. "ProxyIP": "104.18.27.160",
  378. "ProxyPort": "80",
  379. "Info": "Proxy"
  380. },
  381. {
  382. "Name": "🔵TIM 5",
  383. "FLAG": "tim",
  384. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  385. "SNI": "",
  386. "TlsIP": "",
  387. "ProxyIP": "help.jibjab.com",
  388. "ProxyPort": "80",
  389. "Info": "Proxy"
  390. },
  391. {
  392. "Name": "🔵TIM 6",
  393. "FLAG": "tim",
  394. "Payload": "GET / HTTP/1.1[crlf]Host: landing.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  395. "SNI": "104.19.242.25",
  396. "TlsIP": "",
  397. "ProxyIP": "104.19.242.25",
  398. "ProxyPort": "80",
  399. "Info": "Proxy"
  400. },
  401. {
  402. "Name": "🔵TIM 7",
  403. "FLAG": "tim",
  404. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  405. "SNI": "",
  406. "TlsIP": "",
  407. "ProxyIP": "creatorsupport.deezer.com",
  408. "ProxyPort": "80",
  409. "Info": "Proxy"
  410. },
  411. {
  412. "Name": "🔵TIM 8",
  413. "FLAG": "tim",
  414. "Payload": "GET / HTTP/1.1\\nHost: click.mail.c6bank.com.br\\nExpect: 100-continue\\n\\n[split]\\n\\nACL /?/ HTTP/1.1\\nHost: och1.gatway.shop\\nExpect: 100-continue\\nUpgrade: websocket\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\n\\n",
  415. "SNI": "",
  416. "TlsIP": "",
  417. "ProxyIP": "104.19.242.25",
  418. "ProxyPort": "80",
  419. "Info": "Proxy"
  420. },
  421. {
  422. "Name": "🔵TIM 9 (DIRECT",
  423. "FLAG": "tim",
  424. "Payload": "wss://cdn.alliedtech.com.br HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Upgrade: websocket[crlf][crlf]",
  425. "SNI": "",
  426. "TlsIP": "",
  427. "ProxyIP": "129.159.51.59",
  428. "ProxyPort": "80",
  429. "Info": "Direct"
  430. },
  431. {
  432. "Name": "🔵TIM 10 (DIRECT)",
  433. "FLAG": "tim",
  434. "Payload": "GET / HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36[crlf]Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9[crlf]Accept-Encoding: gzip, deflate, br[crlf]Accept-Language: en-US,en;q=0.9[crlf]Connection: keep-alive[crlf][crlf]",
  435. "SNI": "",
  436. "TlsIP": "",
  437. "ProxyIP": "144.22.143.102",
  438. "ProxyPort": "80",
  439. "Info": "Direct"
  440. },
  441. {
  442. "Name": "🔵TIM 11 (DIRECT)",
  443. "FLAG": "tim",
  444. "Payload": "PROPPATCH / HTTP/1.0[crlf]Host: och1.gatway.shop[crlf]",
  445. "SNI": "",
  446. "TlsIP": "",
  447. "ProxyIP": "144.22.143.102",
  448. "ProxyPort": "80",
  449. "Info": "Direct"
  450. },
  451. {
  452. "Name": "🔵TIM 12 (DIRECT)",
  453. "FLAG": "tim",
  454. "Payload": "GET / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET / HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Upgrade: Websocket[crlf][crlf]",
  455. "SNI": "",
  456. "TlsIP": "",
  457. "ProxyIP": "104.18.28.182",
  458. "ProxyPort": "80",
  459. "Info": "Direct"
  460. },
  461. {
  462. "Name": "🔵TIM 13 (DIRECT)",
  463. "FLAG": "tim",
  464. "Payload": "GET / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET / HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Upgrade: Websocket[crlf][crlf]",
  465. "SNI": "",
  466. "TlsIP": "",
  467. "ProxyIP": "104.16.53.111",
  468. "ProxyPort": "80",
  469. "Info": "Direct"
  470. },
  471. {
  472. "Name": "🔵TIM 14 (DIRECT)",
  473. "FLAG": "tim",
  474. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  475. "SNI": "",
  476. "TlsIP": "",
  477. "ProxyIP": "104.16.51.111",
  478. "ProxyPort": "80",
  479. "Info": "Proxy"
  480. },
  481. {
  482. "Name": "🔵TIM 15 (DIRECT)",
  483. "FLAG": "tim",
  484. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Upgrade: Websocket[crlf][crlf]",
  485. "SNI": "",
  486. "TlsIP": "",
  487. "ProxyIP": "104.19.239.25",
  488. "ProxyPort": "80",
  489. "Info": "Proxy"
  490. },
  491. {
  492. "Name": "🔵TIM 16 (SALDO EXPIRADO)",
  493. "FLAG": "tim",
  494. "Payload": "GET https://workplaceservices.surveymonkey.com HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Upgrade: covid[crlf]Connection: Keep-Alive[crlf][crlf]",
  495. "SNI": "",
  496. "TlsIP": "",
  497. "ProxyIP": "129.159.51.59",
  498. "ProxyPort": "80",
  499. "Info": "Direct"
  500. },
  501. {
  502. "Name": "🔵TIM 17 (SALDO EXPIRADO)",
  503. "FLAG": "tim",
  504. "Payload": "HEAD wss://och1.gatway.shop HTTP/1.1[lf]Host: och1.gatway.shop[crlf]Upgrade: Websocket[crlf][crlf]",
  505. "SNI": "",
  506. "TlsIP": "",
  507. "ProxyIP": "104.16.53.111",
  508. "ProxyPort": "80",
  509. "Info": "Proxy"
  510. },
  511. {
  512. "Name": "🔵TIM 18",
  513. "FLAG": "tim",
  514. "Payload": "GET / HTTP/1.1\\r\\nHost: helpypro.stoodi.com.br\\r\\nExpect: 100-continue\\r\\n\\r\\n[split]\\r\\n\\r\\nPUT / HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nExpect: 100-continue\\r\\nUpgrade: websocket\\r\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\r\\n\\r\\n",
  515. "SNI": "",
  516. "TlsIP": "helpypro.stoodi.com.br",
  517. "ProxyIP": "helpypro.stoodi.com.br",
  518. "ProxyPort": "80",
  519. "Info": "Proxy"
  520. },
  521. {
  522. "Name": "🔵TIM 19",
  523. "FLAG": "tim",
  524. "Payload": "GET / HTTP/1.1\\r\\nHost: helpypro.stoodi.com.br\\r\\n\\r\\n[split]\\r\\n\\r\\nGET- / HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nUpgrade: ws\\r\\nUser-Agent: yes\\r\\n\\r\\n",
  525. "SNI": "",
  526. "TlsIP": "",
  527. "ProxyIP": "104.16.51.111",
  528. "ProxyPort": "80",
  529. "Info": "Proxy"
  530. },
  531. {
  532. "Name": "🔵TIM 20",
  533. "FLAG": "tim",
  534. "Payload": "GET / HTTP/1.1\\r\\nHost: api.sandbox.c6bank.com.br\\r\\nExpect: 100-continue\\r\\n\\r\\n[split]\\r\\n\\r\\nPUT /?/ HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nExpect: 100-continue\\r\\nUpgrade: websocket\\r\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\r\\n\\r\\n",
  535. "SNI": "",
  536. "TlsIP": "",
  537. "ProxyIP": "104.19.239.25",
  538. "ProxyPort": "80",
  539. "Info": "Proxy"
  540. },
  541. {
  542. "Name": "🔵TIM 21",
  543. "FLAG": "tim",
  544. "Payload": "GET / HTTP/1.1\\r\\nHost: api.sandbox.c6bank.com.br\\r\\nExpect: 100-continue\\r\\n\\r\\n[split]\\r\\n\\r\\nACL- /?/ HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nExpect: 100-continue\\r\\nUpgrade: websocket\\r\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\r\\n\\r\\n",
  545. "SNI": "",
  546. "TlsIP": "",
  547. "ProxyIP": "104.18.28.182",
  548. "ProxyPort": "80",
  549. "Info": "Proxy"
  550. },
  551. {
  552. "Name": "🔵TIM 22",
  553. "FLAG": "tim",
  554. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][crlf][split][crlf][crlf]PUT /?/ HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  555. "SNI": "",
  556. "TlsIP": "104.18.225.52",
  557. "ProxyIP": "helpypro.stoodi.com.br",
  558. "ProxyPort": "80",
  559. "Info": "Proxy"
  560. },
  561. {
  562. "Name": "🔵TIM 23",
  563. "FLAG": "tim",
  564. "Payload": "GET / HTTP/1.1\\r\\nHost: landing.stoodi.com.br\\r\\n\\r\\n[split]\\r\\n\\r\\nGET / HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nUpgrade: ws\\r\\nUser-Agent: yes\\r\\n\\r\\n",
  565. "SNI": "",
  566. "TlsIP": "",
  567. "ProxyIP": "104.16.51.111",
  568. "ProxyPort": "80",
  569. "Info": "Proxy"
  570. },
  571. {
  572. "Name": "🔵TIM 24",
  573. "FLAG": "tim",
  574. "Payload": "GET / HTTP/1.1\\r\\nHost: helpypro.stoodi.com.br\\r\\n\\r\\n[split]\\r\\n\\r\\nGET / HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nUpgrade: ws\\r\\nUser-Agent: yes\\r\\n\\r\\n",
  575. "SNI": "",
  576. "TlsIP": "",
  577. "ProxyIP": "104.16.51.111",
  578. "ProxyPort": "80",
  579. "Info": "Proxy"
  580. },
  581. {
  582. "Name": "🔵TIM 25",
  583. "FLAG": "tim",
  584. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT / HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  585. "SNI": "",
  586. "TlsIP": "helpypro.stoodi.com.br",
  587. "ProxyIP": "helpypro.stoodi.com.br",
  588. "ProxyPort": "80",
  589. "Info": "Proxy"
  590. },
  591. {
  592. "Name": "🔵TIM 34",
  593. "FLAG": "tim",
  594. "Payload": "CONNECT / HTTP/1.1\r\nHost: c6bank.com.br\r\n\r\nOPTIONS / HTTP/1.1\r\nHost: och1.gatway.shop\r\nEsperar: 200-continue\r\nProxy-Connection: Keep-Alive\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Extensions: superspeed\r\nUser-Agent: Mozilla/5.0 (Linux; Android 4.4.2; Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047",
  595. "SNI": "",
  596. "TlsIP": "",
  597. "ProxyIP": "104.18.27.160",
  598. "ProxyPort": "80",
  599. "Info": "Direct"
  600. },
  601. {
  602. "Name": "🔵TIM 35",
  603. "FLAG": "tim",
  604. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  605. "SNI": "",
  606. "TlsIP": "",
  607. "ProxyIP": "104.16.18.94",
  608. "ProxyPort": "80",
  609. "Info": "Direct"
  610. },
  611. {
  612. "Name": "🔵TIM 36",
  613. "FLAG": "tim",
  614. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  615. "SNI": "",
  616. "TlsIP": "",
  617. "ProxyIP": "[app_host]",
  618. "ProxyPort": "80",
  619. "Info": "Proxy"
  620. },
  621. {
  622. "Name": "🔵TIM 37",
  623. "FLAG": "tim",
  624. "Payload": "MERGE p.adsymptotic.com HTTP/2.0[crlf]Host: p.adsymptotic.com [crlf]Connection: update, Keep-Alive-Status 101[crlf]Update: HTTP/2.0[crlf]User- Agente: Googlebot/2.1 (+http://www.google.com/bot.html)@Laranjo01[crlf]Referente: http://www.google.com[crlf]",
  625. "SNI": "",
  626. "TlsIP": "",
  627. "ProxyIP": "[app_host]",
  628. "ProxyPort": "80",
  629. "Info": "Direct"
  630. },
  631. {
  632. "Name": "🔵TIM 26",
  633. "FLAG": "tim",
  634. "Payload": "GET / HTTP/1.1\\r\\nHost: api.sandbox.c6bank.com.br\\r\\nExpect: 100-continue\\r\\n\\r\\n[split]\\r\\n\\r\\nPUT /?/ HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nExpect: 100-continue\\r\\nUpgrade: websocket\\r\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\r\\n\\r\\n",
  635. "SNI": "",
  636. "TlsIP": "",
  637. "ProxyIP": "104.19.239.25",
  638. "ProxyPort": "80",
  639. "Info": "Proxy"
  640. },
  641. {
  642. "Name": "🔵TIM 27",
  643. "FLAG": "tim",
  644. "Payload": "GET / HTTP/1.1\\r\\nHost: landing.stoodi.com.br\\r\\nExpect: 100-continue\\r\\n\\r\\n[split]\\r\\n\\r\\nPUT / HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nExpect: 100-continue\\r\\nUpgrade: websocket\\r\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\r\\n\\r\\n",
  645. "SNI": "",
  646. "TlsIP": "",
  647. "ProxyIP": "helpypro.stoodi.com.br",
  648. "ProxyPort": "80",
  649. "Info": "Proxy"
  650. },
  651. {
  652. "Name": "🔵TIM 28",
  653. "FLAG": "tim",
  654. "Payload": "GET / HTTP/1.1\\r\\nHost: landing.stoodi.com.br\\r\\nExpect: 100-continue\\r\\n\\r\\n[split]\\r\\n\\r\\nPUT / HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nExpect: 100-continue\\r\\nUpgrade: websocket\\r\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\r\\n\\r\\n",
  655. "SNI": "",
  656. "TlsIP": "",
  657. "ProxyIP": "104.16.53.111",
  658. "ProxyPort": "80",
  659. "Info": "Proxy"
  660. },
  661. {
  662. "Name": "🔵TIM 29",
  663. "FLAG": "tim",
  664. "Payload": "GET / HTTP/1.1\\r\\nHost: cms-assets-p.c6bank.com.br\\r\\nExpect: 100-continue\\r\\n\\r\\n[split]\\r\\n\\r\\nACL /?/ HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nExpect: 100-continue\\r\\nUpgrade: websocket\\r\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\r\\n\\r\\n",
  665. "SNI": "",
  666. "TlsIP": "",
  667. "ProxyIP": "104.19.239.25",
  668. "ProxyPort": "80",
  669. "Info": "Proxy"
  670. },
  671. {
  672. "Name": "🔵TIM 30",
  673. "FLAG": "tim",
  674. "Payload": "GET / HTTP/1.1\\r\\nHost: appdev.c6bank.app\\r\\nExpect: 100-continue\\r\\n\\r\\n[split]\\r\\n\\r\\nPUT / HTTP/1.1\\r\\nHost: och1.gatway.shop\\r\\nExpect: 100-continue\\r\\nUpgrade: websocket\\r\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\r\\n\\r\\n",
  675. "SNI": "",
  676. "TlsIP": "",
  677. "ProxyIP": "appdev.c6bank.app",
  678. "ProxyPort": "80",
  679. "Info": "Proxy"
  680. },
  681. {
  682. "Name": "🔵TIM 31",
  683. "FLAG": "tim",
  684. "Payload": "CONNECT / HTTP/1.1\r\nHost: mail.taipei2025.com\r\n\r\nOPTIONS / HTTP/1.1\r\nHost: och1.gatway.shop\r\nEsperar: 200-continue\r\nProxy-Connection: Keep-Alive\r\nKeep-Alive: timeout=5, max=1000\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Extensions: superspeed\r\nÚltima modificação: sexta-feira, 17 de março de 2022 04:32:39 GMT\r\nServidor: Qnax\r\nUser-Agent: Mozilla/5.0 (Linux; Android 4.4.2; Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047",
  685. "SNI": "",
  686. "TlsIP": "",
  687. "ProxyIP": "104.16.19.94",
  688. "ProxyPort": "80",
  689. "Info": "Direct"
  690. },
  691. {
  692. "Name": "🔵TIM 32",
  693. "FLAG": "tim",
  694. "Payload": "GET / HTTP/1.1\r\nHost: mobile.hom.c6bank.app\r\n\r\nGET / HTTP/1.1\r\nHost: och1.gatway.shop\r\nUpgrade: websocket\r\nUser-Agent: sim",
  695. "SNI": "",
  696. "TlsIP": "",
  697. "ProxyIP": "104.16.51.111",
  698. "ProxyPort": "80",
  699. "Info": "Direct"
  700. },
  701. {
  702. "Name": "🟡OI 3",
  703. "FLAG": "oi",
  704. "Payload": "GET / HTTP/1.1[crlf]Host: SUA_FRONT_AQUI[crlf]Connection:Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  705. "SNI": "hbomax.onelink.me",
  706. "TlsIP": "hbomax.onelink.me",
  707. "ProxyIP": "hbomax.onelink.me",
  708. "ProxyPort": "80",
  709. "Info": "Proxy"
  710. },
  711. {
  712. "Name": "🟡OI 4",
  713. "FLAG": "oi",
  714. "Payload": "GET / HTTP/1.1[crlf]Host: SUA_FRONT_AQUI[crlf]Connection:Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  715. "SNI": "play.hbomax.com",
  716. "TlsIP": "play.hbomax.com",
  717. "ProxyIP": "play.hbomax.com",
  718. "ProxyPort": "80",
  719. "Info": "Proxy"
  720. },
  721. {
  722. "Name": "🟡OI 1",
  723. "FLAG": "oi",
  724. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host: och1.gatway.shop[split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  725. "SNI": "",
  726. "TlsIP": "",
  727. "ProxyIP": "104.16.53.111",
  728. "ProxyPort": "",
  729. "Info": "Proxy"
  730. },
  731. {
  732. "Name": "🟡OI 2",
  733. "FLAG": "oi",
  734. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: och1.gatway.shop[crlf]Upgrade: Websocket[crlf][crlf]",
  735. "SNI": "",
  736. "TlsIP": "",
  737. "ProxyIP": "104.19.239.25",
  738. "ProxyPort": "80",
  739. "Info": "Proxy"
  740. }
  741. ]
  742. }

comments powered by Disqus