AS MELHOREES PAYLOADS PARA MODO  SOCKETS SECURITY SSH SCRIPT 🟣

[delay_split]ACL /Set-Cookie: sessionID=fbafa6258966f49f252b404ab9e5c219; path=/admin; domain=revive.vivointernetgratis.com.br; secure; HttpOnly; SameSite=strict HTTP/1.1][lf]

[delay_split]ACL /revive.vivointernetgratis.com.br HTTP/1.1][lf]

[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote 
HTTP/1.1[lf][lf]

[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]

[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote HTTP/1.1[lf][lf]


[delay_split]GET http://m.clarosync.com/ HTTP/1.1 Host: http://m.clarosync.com/
User-Agent: Yes
Connection: close
Proxy-Connection: Keep-Alive
[crlf][crlf][netData][crlf] [crlf][crlf]

[delay_split]GET http://d1n212ccp6ldpw.cloudfront.net HTTP/1.1\n\r\n\r\nCONNECT 127.0.0.1:443HTTP/1.0X-Online-Host: http://download-this-pl.info/124BR/MP.html \r\n\r\n


[delay_split]CONNECT http://i.vivo.ddivulga.com/i/gp/ HTTP/1.1[crlf][split]

[delay_split]CONNECT http://interatividade.vivo.ddivulga.com/produto/ HTTP/1.0[crlf]<font color="black">[split]


[delay_split]CONNECT http://navegue.vivo.ddivulga.com/pacote/ HTTP/1.1[crlf]<font color="yes">[split]


[delay_split]CONNECT http://portalrecarga.vivo.com.br/recarga/home/ HTTP/1.1[lf]


[split]\nCONNECT [host_port]@portalrecarga.vivo.com.br/recarga/home/[protocol]\nGET  http://sdp.vivo.com.br/ HTTP/1.1\nHost: portalrecarga.vivo.com.br/recarga/home/produto[crlf]X-Forwarded-For: portalrecarga.vivo.com.br/recarga/home/\n\n\n

[delay_split]CONNECT [host_port]<font color="yelp"> GET http://portalrecarga.vivo.com.br/recarga/home/187.8.166.33 [protocol][lf][split]CONNECT 187.8.166.33 CONNECT [host_port]149.56.42.236 HTTP/1.1[crlf][crlf]


[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]





        {
            "Name": "TIM 01 (Saldo válido)",
            "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
            "SNI": "",
            "ProxyIP": "104.19.239.25",
            "FLAG": "ic_t.png",
            "Info": "proxyCDN"
        },
        {
            "Name": "TIM 02 (Saldo válido)",
            "Payload": "CONNECT / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]TSTOPSPEED[crlf][crlf]",
            "SNI": "",
            "ProxyIP": "104.16.53.111",
            "FLAG": "ic_t.png",
            "Info": "proxyCDN"
        },
        {
            "Name": "TIM 03 (Saldo válido)",
            "Payload": "CONNECT / HTTP/1.1[crlf]host: atendimento.lojadointer.com.br[crlf][crlf][split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]TSTOPSPEED[crlf][crlf]",
            "SNI": "",
            "ProxyIP": "104.17.64.225",
            "FLAG": "ic_t.png",
            "Info": "proxyCDN"
        },
        {
            "Name": "TIM 04 (Saldo válido)",
            "Payload": "CONNECT / HTTP/1.9[crlf]host: no.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
            "SNI": "",
            "ProxyIP": "104.19.241.93",
            "FLAG": "ic_t.png",
            "Info": "proxyCDN"
        },
        {
            "Name": "TIM 05 (Sem saldo)",
            "Payload": "HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]",
            "SNI": "",
            "ProxyIP": "[app_host]",
            "FLAG": "ic_t.png",
            "Info": "proxyCDN"
        },
        {
            "Name": "TIM 06 (Sem saldo)",
            "Payload": "CONNECT [app_host] [protocol][crlf][crlf]",
            "SNI": "",
            "ProxyIP": "",
            "FLAG": "ic_t.png",
            "Info": "direct"
        },
        {
            "Name": "CLARO 01 (PREZÃO)",
            "Payload": "",
            "SNI": "web.whatsapp.com",
            "ProxyIP": "",
            "FLAG": "ic_c.png",
            "Info": "ssl"
        },
        {
            "Name": "CLARO 02 (FLEX)",
            "Payload": "",
            "SNI": "m.twitter.com.",
            "ProxyIP": "",
            "FLAG": "ic_c.png",
            "Info": "ssl"
        },
        {
            "Name": "CLARO 03 (CONTROLE)",
            "Payload": "",
            "SNI": "m.waze.com.",
            "ProxyIP": "",
            "FLAG": "ic_c.png",
            "Info": "ssl"
        },
        {
            "Name": "CONEXÃO 01 (Fluke 01)",
            "Payload": "GET http://web.whatsapp.com HTTP/1.0[crlf]Host: web.whatsapp.com[crlf]Connection: keep-alive[crlf][crlf]",
            "SNI": "",
            "ProxyIP": "",
            "FLAG": "ic_f.png",
            "Info": "direct"
        },
        {
            "Name": "CONEXÃO 02 (Fluke 02)",
            "Payload": "",
            "SNI": "web.whatsapp.com",
            "ProxyIP": "",
            "FLAG": "ic_f.png",
            "Info": "ssl"
        },



    {
      "Name": "TIM APP ",
      "FLAG": "tim",
      "Payload": "CONNECT / HTTP/1.9[crlf]host: [rotate=app.sandbox.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
      "Sni": "",
      "TlsIP": "",
      "ProxyIP": "104.18.33.113",
      "ProxyPort": "80",
      "Info": "Proxy"
    },
{
   "Name": "TIM SALDO VÁLIDO💙💙 3",
   "FLAG": "tim",
   "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online [crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
   "SNI": "",
   "TlsIP": "",
   "ProxyIP": "104.18.27.160",
   "ProxyPort": "80",
   "Info": "Proxy"
   },
 {
   "Name": "TIM SALDO VÁLIDO💙💙 4",
   "FLAG": "tim",
   "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online [crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
   "SNI": "",
   "TlsIP": "",
   "ProxyIP": "104.16.51.111",
   "ProxyPort": "80",
   "Info": "Proxy"
   },

{
 "Name": "🟣🔵 *TIM 1* 🔵🟣",
            "FLAG": "vivo",
            "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
            "SNI": "ribeironetvpn.online",
            "TlsIP": "itsupport.surveymonkey.com",
            "ProxyIP": "172.64.154.143",
            "ProxyPort": "443",
            "Info": " Proxy"
        },
 {
            "Name": "TIM SALDO VÁLIDO💙💙13",
            "FLAG": "tim",
            "Payload": "CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
            "SNI": "",
            "TlsIP": "",
            "ProxyIP": "104.19.239.25",
            "ProxyPort": "80",
            "Info": "Proxy"       
         },
        {
            "Name": "TIM SALDO VÁLIDO💙💙14",
            "FLAG": "tim",
            "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host:[app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
            "SNI": "",
            "TlsIP": "",
            "ProxyIP": "172.64.154.143",
            "ProxyPort": "80",
            "Info": "Proxy" 
         },
        {
            "Name": "TIM RAPIDA 01",
            "FLAG": "tim",
            "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
            "SNI": "",
            "TlsIP": "",
            "ProxyIP": "172.64.154.143",
            "ProxyPort": "80",
            "Info": "Proxy"
        },
        {
            "Name": "TIM RAPIDA 02",
            "FLAG": "tim",
            "Payload": "CONNECT / HTTP/1.9[crlf]host: mtls.sandbox.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
            "SNI": "",
            "TlsIP": "",
            "ProxyIP": "172.64.154.143",
            "ProxyPort": "80",
            "Info": "Proxy"
        },

{
      "Name": "TIM  PRE",
      "FLAG": "tim",
      "Payload": "CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [random=ribeironetvpn.online][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
      "SNI": "",
      "TlsIP": "",
      "ProxyIP": "104.19.239.25",
      "ProxyPort": "80",
      "Info": "Proxy"
    },

MasterPay - SSH:
VIVO TIM E CLARO CLOUDFRONT 

TESTEM NOS DDD DE VCS 




sni: recargavivoweb.m4u.com.br
proxy: recargavivoweb.m4u.com.br
porta: 443



Testem e diga se realmente ta on no seu ddd !

{
      "Name": "VIVO-TIM-CLARO",
      "FLAG": "vivo",
      "Payload": "GET ws://d31wdt0autrhy8.cloudfront.net/ HTTP/1.1[lf]Host: recargavivoweb.m4u.com.br[lf]Connection: Upgrade[lf]Upgrade: websocket[lf][lf]",
      "SNI": "recargavivoweb.m4u.com.br",
      "TlsIP": "recargavivoweb.m4u.com.br",
      "ProxyIP": "",
      "ProxyPort": "443",
      "Info": "Tlsws"
      },

Foram encontrados 4 Quatro domínios 
Hospedados No Mesmo Servidor Da Web.

recargavivoweb.m4u.com.br 
(52.67.196.73).

Claro Front
claro-recarga.m4u.com.br

Tim Front!..
plataforma-recarga.m4u.com.br

Universal Vivo Front
recargavivoweb.m4u.com.br

vivo-recarga.m4u.com.br

"m4u.com.br"

M4u Serviços Telecom.

TIM SALDO VALIDO  CLOUDFLARE PRO

PROXY: 104.19.239.25 
PROXY: 104.18.99.70
PROXY: 104.18.33.113
PROXY: atendimento.lojadointer.com.br 
SNI PRA HOST DA PAYLOAD 

mtls.sandbox.c6bank.com.br 

www.c6bank.com.br

celular.c6bank.app 

app.sandbox.c6bank.com.br

pre-onboarding-p.c6bank.app

 mobile.hom.c6bank.app

creatorsupport.deezer.com

ubisoft.c6bank.com.br

Porta : 80

{
            "Name": "🔵TIM DO BRASIL🔵",
            "FLAG": "tim",
            "Payload": "CONNECT / HTTP/1.9[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
            "SNI": "",
            "TlsIP": "",
            "ProxyIP": "104.16.239.166",
            "ProxyPort": "80",
            "Info": "Proxy"
        },

✅Payloads Novas🟣VIVO SECURITY🟣
Testem nos seus ddds e regiões 👍✅✔️

[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]

[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]

[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]

[split][lf]ACL / HTTP/1.1[crlf]Host: microsoft.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]

[split][lf]PUT / HTTP/1.1[crlf]Host: amazonaws.com[crlf]Upgrade: Keep-Alive[crlf]Connection: Upgrade[crlf][crlf]

PAYLOADS RÁPIDAS VIVO WEBSOCKET SECURITY💜

[split]GET HTTP/1.1[crlf][crlf]Host: Websocket[crlf]

[split]GET HTTP/1.1[crlf][crlf]HTTP/2: Ua[crlf]

[split]GET HTTP/1.1[crlf][crlf]HTTP/2: [crlf]

[split]GET HTTP/1.1[crlf][crlf]QUICK/11: Ua[crlf]

[split]GET HTTP/1.1[crlf][crlf]QUIC/11: Ua[crlf]

[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf]

TIM EXPIRADO 


ACL HTTP/ \nhost: www.google.com[lf]


Testem ai galera! Informe o ddd.

vivo Websocket CloudFlare 

GET / HTTP/1.1[crlf]Host: seucloudfire [crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]

proxy: unpkg.com
porta: 80

Testem nos ddds de vocês.

VIVO SECURITY ROTATE : DTUNNEL

PAYLOND :

[split][delay_split]ACL / /\n#[split]GET HTTP/1.1[crlf][crlf]Host: Websocket[crlf]#[split]GET HTTP/1.1[crlf][crlf]HTTP/2: Ua[crlf]#[split]GET HTTP/1.1[crlf][crlf]HTTP/2: [crlf]#[split]GET HTTP/1.1[crlf][crlf]QUICK/11: Ua[crlf]#[split]GET HTTP/1.1[crlf][crlf]QUIC/11: Ua[crlf]#[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf]

PROXY : IP DA VPS 


@masterpayssh


Testem nos ddds de vocês conexão rápida.