┌───────────────
╔══════════════╗
║ ┣ ➤Channel : @decrypt_files1
║ ┣ ➤ Host => N/A
║ ┣ ➤] Port => 80
║ ┣ ➤ User => Charada
║ ┣ ➤ Password => @Charada02
║ ┣ ➤ ConfigVersion => 197
║ ┣ ➤ ConfigIdentifier => 08D036A6C498E85A51FCA55DE2ACE6F5
║ ┣ ➤ Build date => 1694330885
║ ┣ ➤ Expiration Date => undefined
║ ┣ ➤ Custom Routes =>
║ ┣ ➤ Encluded Routes =>
║ ┣ ➤ Is Compression? => undefined
║ ┣ ➤ Is ConfigLocked? => true
║ ┣ ➤ Is Default Route? => true
║ ┣ ➤ Is Public Key? => false
║ ┣ ➤ Is Tls12? => undefined
║ ┣ ➤ Is Upstream Proxy? => undefined
║ ┣ ➤ Local Port => 1080
║ ┣ ➤ Lock Modes => ["payload","remote_proxy","proxy_auth","sni_host_port","ssh_credential","block_torrent"]
║ ┣ ➤ Lock Modes Hash => 1c64e265ab5647e9144ed69b2ac72a74fe18a3cba60684e79d6c51e640c54a64
║ ┣ ➤ OverWrite Server Data => undefined
║ ┣ ➤ OverWrite Server Proxy Port => undefined
║ ┣ ➤ Overwrite Server Data Type => undefined
║ ┣ ➤ Port => 80
║ ┣ ➤ Remote Proxy Auth? => false
║ ┣ ➤ ShadowSocksUdpForwarding => undefined
║ ┣ ➤ Start SSH? => undefined
║ ┣ ➤ UpStreamProxy => undefined
║ ┣ ➤ Payload => CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: brasil.charadanet.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]
║ ┣ ➤ Proxy => creatorsupport.deezer.com:80
║ ┣ ➤ Tunnel Type => SSH => HTTP Proxy => Custom Payload
║ ┣ ➤ Group: https://t.me/decrypt_file
╚═════════════════════╝
├ 𝗛𝗧𝗧𝗣 𝗜𝗡𝗝𝗘𝗖𝗧𝗢𝗥 𝗗𝗘𝗖𝗥𝗬𝗣𝗧𝗢𝗥
├ 𝗖𝗼𝗱𝗲 𝗯𝘆: lnk.pw/mzjf
├───────────────
│[۞] Config Version: 198
│[۞] Host IP: 104.16.51.111
│[۞] Username: Timv
│[۞] Password: 1234
│[۞] Port: 80
│[۞] Remote Proxy: 104.16.51.111:80
│[۞] Payload: [split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: x9.nerynet.shop[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]
│[۞] Tunnel Type: proxy_payload_ssh
├───────────────
│[۞] 𝗗𝗲𝗰𝗿𝘆𝗽𝘁 𝗕𝘆: @Nexundecrypt
└───────────────
[10/7, 8:19 PM] +55 79 9813-0038: GET-TOPSPEED wss://lucassax.conectaju.tech/ HTTP/1.1[crlf]Host: DOMINIOFLARE[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]@TSTOPSPEED[crlf][crlf]
[10/7, 8:19 PM] +55 79 9813-0038: 104.18.7.41
configIdentifier: F39CCD42B26903DDDA40F64B21CB1037
configTimestamp: 1696181207
configVersionCode: 198
customRoutes:
dnsType: 0
dnsttResolverMode: dns_udp
excludedRoutes:
host: store.cloudfoxy.site
isConfigLock: true
isDefaultRoute: true
isPublicKey: false
localPort: 1080
lockModes: ["payload","remote_proxy","proxy_auth","sni_host_port","ssh_server","ssh_credential","dnstt_resolver","dnstt_settings"]
lockModesHash: 88773ddec5820c6263f4f8621db3e54c516376842a622e2d2d5b81bc431e1f97
password: fd9452cc
payload: POST / HTTP/1.1[crlf]Host: store.cloudfoxy.site[crlf]Upgrade: websocket[crlf][crlf]
port: 8080
remoteProxy: www.appstore.vivo.com.br:2052
sniHostname: store.cloudfoxy.site
tunnelType: proxy_payload_ssh
user: teste7f5f
[10/7, 5:39 PM] +55 82 8237-3596: [split] [method]SEU DOMINIOGET /? [protocol][crlf]Host: portalrecarga.vivo.com.br/recarga[lf][lf]
[10/7, 5:40 PM] +55 82 8237-3596: PROXY E O IP DA SUA VPS
[10/7, 5:40 PM] +55 82 8237-3596: CHECKOUT / HTTP/1.1[crlf]Host: exterminador1.norvaera.com [crlf]Upgrade: HTTP/2.0, SHTTP/1.3, IRC/6.9, RTA/x11[crlf]@TSTOPS umPEED[crlf][crlf]
[10/7, 5:41 PM] +55 82 8237-3596: TIM MODO AVIÃO COM IP BAIXO SKY NET LCSNETT ACL /cdn-cgi/trace HTTP/1.1[lf]Host: mtls.sandbox.c6bank.com.br[lf][lf][split][lf][lf]PCVPN / HTTP/1.1[lf]Host:SEU DOMINIO[lf]Upgrade: websocket[lf][lf]
[10/7, 5:42 PM] +55 82 8237-3596: 172.64.154.143
TIM ONLINE ! ON EM VÁRIOS DDD !
[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: seudominio[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]
PROXY :
104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4
{
"Version":"2.0.3",
"ReleaseNotes":" Funcionando Normalmente. \nVIVO e TIM\n\nATENÇÃO:\nENTRE COM WIFI OU DADOS MÓVEIS PRA ATUALIZAR SEU APP. \n==\nCOMUNICADO IMPORTANTE:\nÉ EXPRESSAMENTE PROIBIDO USAR O APP PRA BAIXAR TORRENT. \nPOR ISTO ESTAMOS TENDO VÁRIAS QUEDAS. \n\nUpdate:V:2.0.3 --- Data:04\/10",
"Servers":[
{
"Name":"MNJNET - 🇧🇷 -",
"cInfo1":"PREMIUM",
"sInfo":"VIVO - TIM ",
"sFLAG":"br.png",
"ServerIP":"209.14.68.165",
"ServerPort":"8080",
"DomainIP":"mnjnet.netvirtua.tech",
"DomainPort":"8080",
"SubDomainA":"",
"SubDomainB":"",
"SubDomainC":"",
"SlowIP":"",
"SlowPort":"",
"SlowServer":"",
"pKey":"",
"ServerUser":"",
"ServerPass":"",
"UrlChecker":"http:\/\/209.14.68.165:5454\/checkUser"
}
],
"Networks":[
{
"Name":"01-VIVO_🇧🇷_",
"cInfo2":"PROXY",
"pInfo":"portal vivo ",
"pFLAG":"vivo.png",
"Payload":"[delay_split][lf]GET \/ HTTP\/1.1[lf]Host: portal.vivo.com.br[lf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"8080"
},
{
"Name":"02-VIVO_🇧🇷_",
"cInfo2":"PROXY",
"pInfo":"CONNECT",
"pFLAG":"vivo.png",
"Payload":"CONNECT 127.0.0.1:80[instant_split]GET www.veek.com.br HTTP\/1.1[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"8080"
},
{
"Name":"03-VIVO_🇧🇷_",
"cInfo2":"PROXY",
"pInfo":"AMBEVE",
"pFLAG":"vivo.png",
"Payload":"CONNECT 127.0.0.1:80[instant_split]GET portal.vivo.com.br HTTP\/1.1[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"8080"
},
{
"Name":"04-VIVO_🇧🇷_",
"cInfo2":"PROXY",
"pInfo":"YouTube ",
"pFLAG":"vivo.png",
"Payload":"PROPFIND m.youtube.com.br HTTP\/1.1[crlf]Host: m.youtube.com.br[crlf",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"8080"
},
{
"Name":"05-VIVO_🇧🇷_",
"cInfo2":"PROXY",
"pInfo":"Random",
"pFLAG":"vivo.png",
"Payload":"[delay_split] ACL \/ HTTP\/1.1[crlf]Host:[random=vivoproxy.gdmnet.pro][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"8080"
},
{
"Name":"06-VIVO (🇧🇷)",
"cInfo2":"PROXY",
"pInfo":"SECURITY",
"pFLAG":"vivo.png",
"Payload":"ACL HTTP\/ \\nhost: www.google.com[lf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"8080"
},
{
"Name":"07-VIVO-🇧🇷-",
"cInfo2":"PROXY",
"pInfo":"Recarga Vivo",
"pFLAG":"vivo.png",
"Payload":"[split][lf]ACL \/ HTTP\/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"8080"
},
{
"Name":"08-VIVO(🇧🇷)",
"cInfo2":"PROXY",
"pInfo":"PLUS GOOGLE",
"pFLAG":"vivo.png",
"Payload":"ACL HTTP\/1.1 Host: plus.google.com \\r\\n \\r\\n",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"8080"
},
{
"Name":"01-TIM(🇧🇷)",
"cInfo2":"DIRECT",
"pInfo":"SALDO VÁLIDO",
"pFLAG":"tim.png",
"Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"104.16.239.166",
"ProxyPort":"80"
},
{
"Name":"02.TIM(🇧🇷)",
"cInfo2":"DIRECT",
"pInfo":"SD.VALIDO",
"pFLAG":"tim.png",
"Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"104.17.64.225",
"ProxyPort":"80"
},
{
"Name":"03.TIM(🇧🇷)",
"cInfo2":"DIRECT",
"pInfo":"SALDO VÁLIDO",
"pFLAG":"tim.png",
"Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"104.18.33.113",
"ProxyPort":"80"
},
{
"Name":"04-TIM(🇧🇷)",
"cInfo2":"DIRECT",
"pInfo":"SALDO VALIDO",
"pFLAG":"tim.png",
"Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"172.64.154.143",
"ProxyPort":"80"
},
{
"Name":"05-TIM(🇧🇷)",
"cInfo2":"DIRECT",
"pInfo":"SALDO VÁLIDO",
"pFLAG":"tim.png",
"Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"104.17.64.225",
"ProxyPort":"80"
},
{
"Name":"06-TIM(🇧🇷)",
"cInfo2":"DIRECT",
"pInfo":"SALDO VALIDO",
"pFLAG":"tim.png",
"Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"104.17.64.225",
"ProxyPort":"80"
},
{
"Name":"07 TIM.BR 🇯🇵",
"cInfo2":"PROXY",
"pInfo":"SALDO.EXPIRADO",
"pFLAG":"tim.png",
"Payload":"UNLOCK www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP\/1.0 \nHost: www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP\/1.0\\n \\n",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"80"
},
{
"Name":"08 TIM.BR 🇯🇵",
"cInfo2":"PROXY",
"pInfo":"SALD.EXPIRADO",
"pFLAG":"tim.png",
"Payload":"UPDATE HTTP\/1.200\nHost: aol.com\/Connection: Keep-AliveContent- GET https:\/\/translate.google.com.br\/?hl=pt-BR\/ HTTP ?Connection: Keep-Alive: 23.97.96.93\/ ¿ HTTP\/1.1\/api\/v1\/user\/registerAnonymous[lf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"80"
},
{
"Name":"09 TIM.BR 🇯🇵",
"cInfo2":"PROXY",
"pInfo":"SALDO EXPIRADO",
"pFLAG":"tim.png",
"Payload":"ACL HTTP\/ \\nhost: www.google.com[lf]",
"SNI":"",
"SSLPort":"",
"ProxyHost":"209.14.68.165",
"ProxyPort":"80"
}
]
}
