┌───────────────

╔══════════════╗
║   ┣ ➤Channel : @decrypt_files1
║   ┣ ➤ Host => N/A
║   ┣ ➤] Port => 80
║   ┣ ➤ User => Charada
║   ┣ ➤ Password => @Charada02
║   ┣ ➤ ConfigVersion => 197
║   ┣ ➤ ConfigIdentifier => 08D036A6C498E85A51FCA55DE2ACE6F5
║   ┣ ➤ Build date => 1694330885
║   ┣ ➤ Expiration Date => undefined
║   ┣ ➤ Custom Routes =>
║   ┣ ➤ Encluded Routes =>
║   ┣ ➤ Is Compression? => undefined
║   ┣ ➤ Is ConfigLocked? => true
║   ┣ ➤ Is Default Route? => true
║   ┣ ➤ Is Public Key? => false
║   ┣ ➤ Is Tls12? => undefined
║   ┣ ➤ Is Upstream Proxy? => undefined
║   ┣ ➤ Local Port => 1080
║   ┣ ➤ Lock Modes => ["payload","remote_proxy","proxy_auth","sni_host_port","ssh_credential","block_torrent"]
║   ┣ ➤ Lock Modes Hash => 1c64e265ab5647e9144ed69b2ac72a74fe18a3cba60684e79d6c51e640c54a64
║   ┣ ➤ OverWrite Server Data => undefined
║   ┣ ➤ OverWrite Server Proxy Port => undefined
║   ┣ ➤ Overwrite Server Data Type => undefined
║   ┣ ➤ Port => 80
║   ┣ ➤ Remote Proxy Auth? => false
║   ┣ ➤ ShadowSocksUdpForwarding => undefined
║   ┣ ➤ Start SSH? => undefined
║   ┣ ➤ UpStreamProxy => undefined
║   ┣ ➤ Payload => CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: brasil.charadanet.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]
║   ┣ ➤ Proxy => creatorsupport.deezer.com:80
║   ┣ ➤ Tunnel Type => SSH => HTTP Proxy => Custom Payload
║   ┣ ➤ Group: https://t.me/decrypt_file
╚═════════════════════╝



├ 𝗛𝗧𝗧𝗣 𝗜𝗡𝗝𝗘𝗖𝗧𝗢𝗥 𝗗𝗘𝗖𝗥𝗬𝗣𝗧𝗢𝗥
├ 𝗖𝗼𝗱𝗲 𝗯𝘆:  lnk.pw/mzjf
├───────────────
│[۞] Config Version: 198
│[۞] Host IP: 104.16.51.111
│[۞] Username: Timv
│[۞] Password: 1234
│[۞] Port: 80
│[۞] Remote Proxy: 104.16.51.111:80
│[۞] Payload: [split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: x9.nerynet.shop[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]
│[۞] Tunnel Type: proxy_payload_ssh
├───────────────
│[۞] 𝗗𝗲𝗰𝗿𝘆𝗽𝘁 𝗕𝘆: @Nexundecrypt 
└───────────────


[10/7, 8:19 PM] +55 79 9813-0038: GET-TOPSPEED wss://lucassax.conectaju.tech/ HTTP/1.1[crlf]Host: DOMINIOFLARE[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]@TSTOPSPEED[crlf][crlf]
[10/7, 8:19 PM] +55 79 9813-0038: 104.18.7.41

configIdentifier: F39CCD42B26903DDDA40F64B21CB1037
configTimestamp: 1696181207
configVersionCode: 198
customRoutes: 
dnsType: 0
dnsttResolverMode: dns_udp
excludedRoutes: 
host: store.cloudfoxy.site
isConfigLock: true
isDefaultRoute: true
isPublicKey: false
localPort: 1080
lockModes: ["payload","remote_proxy","proxy_auth","sni_host_port","ssh_server","ssh_credential","dnstt_resolver","dnstt_settings"]
lockModesHash: 88773ddec5820c6263f4f8621db3e54c516376842a622e2d2d5b81bc431e1f97
password: fd9452cc
payload: POST / HTTP/1.1[crlf]Host: store.cloudfoxy.site[crlf]Upgrade: websocket[crlf][crlf]
port: 8080
remoteProxy: www.appstore.vivo.com.br:2052
sniHostname: store.cloudfoxy.site
tunnelType: proxy_payload_ssh
user: teste7f5f


[10/7, 5:39 PM] +55 82 8237-3596: [split] [method]SEU DOMINIOGET /? [protocol][crlf]Host: portalrecarga.vivo.com.br/recarga[lf][lf]
[10/7, 5:40 PM] +55 82 8237-3596: PROXY E O IP DA SUA VPS
[10/7, 5:40 PM] +55 82 8237-3596: CHECKOUT / HTTP/1.1[crlf]Host: exterminador1.norvaera.com [crlf]Upgrade: HTTP/2.0, SHTTP/1.3, IRC/6.9, RTA/x11[crlf]@TSTOPS umPEED[crlf][crlf]
[10/7, 5:41 PM] +55 82 8237-3596: TIM MODO AVIÃO COM IP BAIXO SKY NET LCSNETT                                                                                                                                                                                                                                                                                                                           ACL /cdn-cgi/trace HTTP/1.1[lf]Host: mtls.sandbox.c6bank.com.br[lf][lf][split][lf][lf]PCVPN / HTTP/1.1[lf]Host:SEU DOMINIO[lf]Upgrade: websocket[lf][lf]
[10/7, 5:42 PM] +55 82 8237-3596: 172.64.154.143

TIM ONLINE !  ON EM VÁRIOS DDD !


[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: seudominio[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@TSTOPSPEED[crlf][crlf]

PROXY :

 104.18.28.182#104.16.51.111#104.19.240.25#104.18.29.182#104.16.53.111#104.19.239.25#104.19.242.25#104.19.241.93#104.18.26.160#104.19.240.93#104.16.237.16#104.19.243.25#104.18.28.181#104.19.237.25#104.17.64.225#172.64.154.143#104.16.239.166#104.18.33.113#unpkg.com#104.16.18.94#104.16.51.100#104.16.239.0#104.16.239.1#104.16.239.2#104.16.239.3#104.16.239.4

{
   "Version":"2.0.3",
   "ReleaseNotes":" Funcionando Normalmente. \nVIVO e TIM\n\nATENÇÃO:\nENTRE COM WIFI OU DADOS MÓVEIS PRA ATUALIZAR SEU APP. \n==\nCOMUNICADO IMPORTANTE:\nÉ EXPRESSAMENTE PROIBIDO USAR O APP PRA BAIXAR TORRENT. \nPOR ISTO ESTAMOS TENDO VÁRIAS QUEDAS. \n\nUpdate:V:2.0.3 ---        Data:04\/10",
   "Servers":[
      {
         "Name":"MNJNET - 🇧🇷 -",
         "cInfo1":"PREMIUM",
         "sInfo":"VIVO - TIM ",
         "sFLAG":"br.png",
         "ServerIP":"209.14.68.165",
         "ServerPort":"8080",
         "DomainIP":"mnjnet.netvirtua.tech",
         "DomainPort":"8080",
         "SubDomainA":"",
         "SubDomainB":"",
         "SubDomainC":"",
         "SlowIP":"",
         "SlowPort":"",
         "SlowServer":"",
         "pKey":"",
         "ServerUser":"",
         "ServerPass":"",
         "UrlChecker":"http:\/\/209.14.68.165:5454\/checkUser"
      }
   ],
   "Networks":[
      {
         "Name":"01-VIVO_🇧🇷_",
         "cInfo2":"PROXY",
         "pInfo":"portal vivo ",
         "pFLAG":"vivo.png",
         "Payload":"[delay_split][lf]GET \/ HTTP\/1.1[lf]Host: portal.vivo.com.br[lf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"8080"
      },
      {
         "Name":"02-VIVO_🇧🇷_",
         "cInfo2":"PROXY",
         "pInfo":"CONNECT",
         "pFLAG":"vivo.png",
         "Payload":"CONNECT 127.0.0.1:80[instant_split]GET www.veek.com.br HTTP\/1.1[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"8080"
      },
      {
         "Name":"03-VIVO_🇧🇷_",
         "cInfo2":"PROXY",
         "pInfo":"AMBEVE",
         "pFLAG":"vivo.png",
         "Payload":"CONNECT 127.0.0.1:80[instant_split]GET portal.vivo.com.br HTTP\/1.1[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"8080"
      },
      {
         "Name":"04-VIVO_🇧🇷_",
         "cInfo2":"PROXY",
         "pInfo":"YouTube ",
         "pFLAG":"vivo.png",
         "Payload":"PROPFIND m.youtube.com.br HTTP\/1.1[crlf]Host: m.youtube.com.br[crlf",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"8080"
      },
      {
         "Name":"05-VIVO_🇧🇷_",
         "cInfo2":"PROXY",
         "pInfo":"Random",
         "pFLAG":"vivo.png",
         "Payload":"[delay_split] ACL \/ HTTP\/1.1[crlf]Host:[random=vivoproxy.gdmnet.pro][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"8080"
      },
      {
         "Name":"06-VIVO (🇧🇷)",
         "cInfo2":"PROXY",
         "pInfo":"SECURITY",
         "pFLAG":"vivo.png",
         "Payload":"ACL HTTP\/ \\nhost: www.google.com[lf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"8080"
      },
      {
         "Name":"07-VIVO-🇧🇷-",
         "cInfo2":"PROXY",
         "pInfo":"Recarga Vivo",
         "pFLAG":"vivo.png",
         "Payload":"[split][lf]ACL \/ HTTP\/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"8080"
      },
      {
         "Name":"08-VIVO(🇧🇷)",
         "cInfo2":"PROXY",
         "pInfo":"PLUS GOOGLE",
         "pFLAG":"vivo.png",
         "Payload":"ACL HTTP\/1.1 Host: plus.google.com \\r\\n \\r\\n",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"8080"
      },
      {
         "Name":"01-TIM(🇧🇷)",
         "cInfo2":"DIRECT",
         "pInfo":"SALDO VÁLIDO",
         "pFLAG":"tim.png",
         "Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"104.16.239.166",
         "ProxyPort":"80"
      },
      {
         "Name":"02.TIM(🇧🇷)",
         "cInfo2":"DIRECT",
         "pInfo":"SD.VALIDO",
         "pFLAG":"tim.png",
         "Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"104.17.64.225",
         "ProxyPort":"80"
      },
      {
         "Name":"03.TIM(🇧🇷)",
         "cInfo2":"DIRECT",
         "pInfo":"SALDO VÁLIDO",
         "pFLAG":"tim.png",
         "Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"104.18.33.113",
         "ProxyPort":"80"
      },
      {
         "Name":"04-TIM(🇧🇷)",
         "cInfo2":"DIRECT",
         "pInfo":"SALDO VALIDO",
         "pFLAG":"tim.png",
         "Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"172.64.154.143",
         "ProxyPort":"80"
      },
      {
         "Name":"05-TIM(🇧🇷)",
         "cInfo2":"DIRECT",
         "pInfo":"SALDO VÁLIDO",
         "pFLAG":"tim.png",
         "Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"104.17.64.225",
         "ProxyPort":"80"
      },
      {
         "Name":"06-TIM(🇧🇷)",
         "cInfo2":"DIRECT",
         "pInfo":"SALDO VALIDO",
         "pFLAG":"tim.png",
         "Payload":"ACL \/ HTTP\/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][split]ACL \/ HTTP\/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL \/ HTTP\/1.1[crlf]Host: mnjnet.netvirtua.tech[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot\/2.1 (+http:\/\/www.google.com\/bot.html)[crlf]@@Kurtcobain02[crlf][crlf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"104.17.64.225",
         "ProxyPort":"80"
      },
      {
         "Name":"07 TIM.BR 🇯🇵",
         "cInfo2":"PROXY",
         "pInfo":"SALDO.EXPIRADO",
         "pFLAG":"tim.png",
         "Payload":"UNLOCK www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP\/1.0 \nHost: www.whatsapp.net;m.facebook.com;www.instagram.com;www.twitter.com;c.whatsapp.net HTTP\/1.0\\n \\n",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"80"
      },
      {
         "Name":"08 TIM.BR 🇯🇵",
         "cInfo2":"PROXY",
         "pInfo":"SALD.EXPIRADO",
         "pFLAG":"tim.png",
         "Payload":"UPDATE HTTP\/1.200\nHost: aol.com\/Connection: Keep-AliveContent- GET https:\/\/translate.google.com.br\/?hl=pt-BR\/ HTTP ?Connection: Keep-Alive: 23.97.96.93\/ ¿ HTTP\/1.1\/api\/v1\/user\/registerAnonymous[lf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"80"
      },
      {
         "Name":"09 TIM.BR 🇯🇵",
         "cInfo2":"PROXY",
         "pInfo":"SALDO EXPIRADO",
         "pFLAG":"tim.png",
         "Payload":"ACL HTTP\/ \\nhost: www.google.com[lf]",
         "SNI":"",
         "SSLPort":"",
         "ProxyHost":"209.14.68.165",
         "ProxyPort":"80"
      }
   ]
}