Untitled


SUBMITTED BY: acshost

DATE: May 25, 2024, 9:32 a.m.

UPDATED: June 4, 2024, 9:20 p.m.

FORMAT: Text only

SIZE: 34.5 kB

HITS: 1083

  1. {
  2. "Version": "38",
  3. "ReleaseNotes": "Eba! Nova tualização Disponível Versão: 37🎊, Mantenha sempre seu app atualizado, teste todos os modos de conexão de sua operadora.",
  4. "UrlUpdate": "https://bitbin.it/u9Ti0bFh/raw/",
  5. "Sms": "BOTAR LINK DO SMS AQUI",
  6. "EmailFeedback": "",
  7. "UrlContato": "",
  8. "UrlTermos": "",
  9. "CheckUser": "true",
  10. "Udp": [
  11. {
  12. "Porta": "7300;7400;7500;7600"
  13. },
  14. ],
  15. "Servers": [
  16. {
  17. "Name": "Servidor da Galera",
  18. "TYPE": "premium",
  19. "FLAG": "br.png",
  20. "ServerIP": "br13.catalogodacidade.com.br",
  21. "CheckUser": "http://191.252.220.14:5454/checkUser",
  22. "ServerPort": "22",
  23. "SSLPort": "443",
  24. "USER": "",
  25. "PASS": ""
  26. },
  27. {
  28. "Name": "Cursistas - Faculdade",
  29. "TYPE": "premium",
  30. "FLAG": "br.png",
  31. "ServerIP": "br13.catalogodacidade.com.br",
  32. "CheckUser": "http://191.252.220.14:5454/checkUser",
  33. "ServerPort": "22",
  34. "SSLPort": "443",
  35. "USER": "",
  36. "PASS": ""
  37. }
  38. ],
  39. "Networks": [
  40. {
  41. "Name":"BRASIL",
  42. "TYPE":"premium",
  43. "FLAG":"br.png",
  44. "ServerIP":"br.speednet.store",
  45. "CheckUser":"http://45.140.192.17:5454/checkUser",
  46. "ServerPort":"22",
  47. "SSLPort":"443",
  48. "USER":"",
  49. "PASS":""
  50. }
  51. ],
  52. "Networks":[
  53. {
  54. "Name": "VIVO ➜ ROTATE",
  55. "FLAG": "vivo",
  56. "Payload": "[delay_split]ACL / HTTP/1.9[lf]@@@[split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\\\n\\\\n\\\\n \\\\n@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]@@@[delay_split]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Pragma: no-cache[crlf]Cache-Control: no-cache[crlf]ME-CHUPA[crlf][crlf]\\r\\n@@@[delay_split]ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]@@@[delay_split]ACL /Set-Cookie: sessionID=fbafa6258966f49f252b404ab9e5c219; path=/admin; domain=revive.vivointernetgratis.com.br; secure; HttpOnly; SameSite=strict HTTP/1.1][lf]@@@[delay_split]CONNECT http://portalrecarga.vivo.com.br/recarga/home/ HTTP/1.1[lf]@@@[split]\\\\nCONNECT [host_port]@portalrecarga.vivo.com.br/recarga/home/[protocol]\\\\nGET http://sdp.vivo.com.br/ HTTP/1.1\\\\nHost: portalrecarga.vivo.com.br/recarga/home/produto[crlf]X-Forwarded-For: portalrecarga.vivo.com.br/recarga/home/\\\\n\\\\n\\\\n@@@[delay_split] ACL / HTTP/1.1[crlf]Host:[random= 104.18.6.80;104.18.7.80;162.159.138.6;162.159.128.7;104.17.70.206;104.17.71.206;104.17.72.206;104.17.73.206;104.17.74.206;172.64.144.109;104.18.43.147;104.18.7.41][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf] @@@[delay_split]ACL /Set-Cookie: sessionID=fbafa6258966f49f252b404ab9e5c219; path=/admin; domain=revive.vivointernetgratis.com.br; secure; HttpOnly; SameSite=strict HTTP/1.1][lf]@@@[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]",
  57. "SNI": "",
  58. "TlsIP": "",
  59. "ProxyIP": "186.233.118.241",
  60. "ProxyPort": "80",
  61. "Info": "Proxy"
  62. },
  63. {
  64. "Name": "VIVO ➜ PRÉ 01",
  65. "FLAG": "vivo",
  66. "Payload": "[delay_split][lf]ACL / HTTP/1.1 Websocket [lf]Host: [rotate= portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud][crlf][crlf]",
  67. "SNI": "",
  68. "TlsIP": "",
  69. "ProxyIP": "186.233.118.241",
  70. "ProxyPort": "80",
  71. "Info": "Proxy"
  72. },
  73. {
  74. "Name": "VIVO ➜ PRÉ 02",
  75. "FLAG": "vivo",
  76. "Payload": "[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  77. "SNI": "",
  78. "TlsIP": "",
  79. "ProxyIP": "186.233.118.241",
  80. "ProxyPort": "80",
  81. "Info": "Proxy"
  82. },
  83. {
  84. "Name": "VIVO ➜ PRÉ 03",
  85. "FLAG": "vivo",
  86. "Payload": "[split]PUT / HTTP/1.1[crlf]Host: [rotate=m.wechat.com;m.whatsapp.net;redirector.gvt1.com][crlf]X-Online-Host: ][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Upgrade: websocket[crlf][crlf]",
  87. "SNI": "",
  88. "TlsIP": "",
  89. "ProxyIP": "186.233.118.241",
  90. "ProxyPort": "80",
  91. "Info": "Proxy"
  92. },
  93. {
  94. "Name": "VIVO ➜ PRÉ 04",
  95. "FLAG": "vivo",
  96. "Payload": "[split]GET / HTTP/1.1[crlf]Host: ced.vivo.ddivulga.com[crlf]Connection: keep-alive[crlf]User-Agent: ua[crlf]Referer: http://a.vivo.ddivulga.com/index-tag.html[crlf][crlf]",
  97. "SNI": "",
  98. "TlsIP": "",
  99. "ProxyIP": "186.233.118.241",
  100. "ProxyPort": "80",
  101. "Info": "Proxy"
  102. },
  103. {
  104. "Name": "VIVO ➜ PRÉ 05",
  105. "FLAG": "vivo",
  106. "Payload": "[split][lf]ACL / HTTP/1.1[crlf]Host: vigia.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]",
  107. "SNI": "",
  108. "TlsIP": "",
  109. "ProxyIP": "186.233.118.241",
  110. "ProxyPort": "80",
  111. "Info": "Proxy"
  112. },
  113. {
  114. "Name": "VIVO ➜ PRÉ 06",
  115. "FLAG": "vivo",
  116. "Payload": "[delay_split][lf]PUT / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]X-Online-Host: [host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  117. "SNI": "",
  118. "TlsIP": "",
  119. "ProxyIP": "186.233.118.241",
  120. "ProxyPort": "80",
  121. "Info": "Proxy"
  122. },
  123. {
  124. "Name": "VIVO ➜ CONTROLE 01",
  125. "FLAG": "vivo",
  126. "Payload": "GET / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  127. "SNI": "",
  128. "TlsIP": "",
  129. "ProxyIP": "104.17.70.206",
  130. "ProxyPort": "80",
  131. "Info": "Proxy"
  132. },
  133. {
  134. "Name": "VIVO ➜ CONTROLE 02",
  135. "FLAG": "vivo",
  136. "Payload": "GET / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  137. "SNI": "",
  138. "TlsIP": "",
  139. "ProxyIP": "104.26.5.32",
  140. "ProxyPort": "80",
  141. "Info": "Proxy"
  142. },
  143. {
  144. "Name": "VIVO ➜ CONTROLE 03",
  145. "FLAG": "vivo",
  146. "Payload": "GET / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  147. "SNI": "",
  148. "TlsIP": "",
  149. "ProxyIP": "104.16.51.111",
  150. "ProxyPort": "80",
  151. "Info": "Proxy"
  152. },
  153. {
  154. "Name": "VIVO ➜ CONTROLE 04",
  155. "FLAG": "vivo",
  156. "Payload": "GET / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  157. "SNI": "",
  158. "TlsIP": "",
  159. "ProxyIP": "104.16.53.111",
  160. "ProxyPort": "80",
  161. "Info": "Proxy"
  162. },
  163. {
  164. "Name": "VIVO ➜ EASY 01",
  165. "FLAG": "vivo",
  166. "Payload": "GET / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Upgrade: websocket[crlf][crlf]\r\n\r\n",
  167. "SNI": "",
  168. "TlsIP": "",
  169. "ProxyIP": "104.18.7.80",
  170. "ProxyPort": "80",
  171. "Info": "Proxy"
  172. },
  173. {
  174. "Name": "VIVO ➜ EASY 02",
  175. "FLAG": "vivo",
  176. "Payload": "GET / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Upgrade: websocket[crlf][crlf]\r\n",
  177. "SNI": "",
  178. "TlsIP": "",
  179. "ProxyIP": "104.17.70.206",
  180. "ProxyPort": "80",
  181. "Info": "Proxy"
  182. },
  183. {
  184. "Name": "VIVO ➜ EASY 03",
  185. "FLAG": "vivo",
  186. "Payload": "GET / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Upgrade: websocket[crlf][crlf]",
  187. "SNI": "",
  188. "TlsIP": "",
  189. "ProxyIP": "assine.vivo.com.br",
  190. "ProxyPort": "80",
  191. "Info": "Proxy"
  192. },
  193. {
  194. "Name": "VIVO ➜ EASY 04",
  195. "FLAG": "vivo",
  196. "Payload": "GET / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Upgrade: websocket[crlf][crlf]",
  197. "SNI": "",
  198. "TlsIP": "",
  199. "ProxyIP": "104.18.7.41",
  200. "ProxyPort": "80",
  201. "Info": "Proxy"
  202. },
  203. {
  204. "Name": "VIVO ➜ WSS 01",
  205. "FLAG": "vivo",
  206. "Payload": "[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]@@@[split][lf]GET / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]@@@[split][lf]ACL / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]",
  207. "SNI": "",
  208. "TlsIP": "",
  209. "ProxyIP": "186.233.118.241",
  210. "ProxyPort": "80",
  211. "Info": "Proxy"
  212. },
  213. {
  214. "Name": "VIVO ➜ WSS 02",
  215. "FLAG": "vivo",
  216. "Payload": "[delay_split][lf]ACL / HTTP/1.1[lf]Host: [rotate= portal.vivo.com.br;portalrecarga.vivo.com.br/recarga/home/;meuplano.tim.com.br;www.vivo.com.br;buzzfeed.com;mobile.adobe.com;1.0.0.5;1.1.1.1;buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5;spotify.com;pagamentonline.emis.co.ao;playwaze.com;wazer.com;soundwaze.com;escolas.playwaze.com;www.wazeunlimited.com;bucs.playwaze.com;ftp.chillwaze.com;unpkg.com;c6bank.com.br;helpypro.stoodi.com.br;atendimento.lojadointer.com.br;creatorsupport.deezer.com:80;itsupport.surveymonkey.com;linefriendshelp.zendesk.com;vivo.interflashplusvpnpro.cloud;m2.interflashplusvpnpro.cloud][crlf][crlf][crlf@@@[split]GET HTTP/1.1[crlf][crlf]Host: Websocket[crlf]@@@[split]GET HTTP/1.1[crlf][crlf]HTTP/2: Ua[crlf]@@@[split]GET HTTP/1.1[crlf][crlf]HTTP/2: [crlf]@@@[split]GET HTTP/1.1[crlf][crlf]QUICK/11: Ua[crlf]@@@[split]GET HTTP/1.1[crlf][crlf]QUIC/11: Ua[crlf]@@@[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf]",
  217. "SNI": "",
  218. "TlsIP": "",
  219. "ProxyIP": "186.233.118.241",
  220. "ProxyPort": "80",
  221. "Info": "Proxy"
  222. },
  223. {
  224. "Name": "TIM ➜ CLOUDFLARE 01",
  225. "FLAG": "tim",
  226. "Payload": "GET / HTTP/1.1[crlf]Host: [host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]@@@[split]ACL / HTTP/1.1[crlf]Host: vivo.com.br[crlf][split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@talkera[crlf][crlf]@@@PATCH /cdn-cgi/trace HTTP/1.1[lf]Host: mtls.sandbox.c6bank.com.br[lf][lf][split][lf][lf]PCVPN / HTTP/1.1[lf]Host: [host][lf]Upgrade: websocket[lf][lf]@@@[split]ACL / HTTP/1.1[crlf]Host: api.cloudflare.com[crlf][split][crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@talkera[crlf][crlf]",
  227. "SNI": "",
  228. "TlsIP": "",
  229. "ProxyIP": "104.19.241.93#104.17.64.225#104.18.99.70#104.16.239.166#104.19.239.25#104.18.28.182#104.16.241.93#141.193.213.20#141.193.213.21#www.beha-amprobe.com#mtls.sandbox.c6bank.com.br#172.67.1.225#trustpilot.com#tinyurl.com#104.16.18.94#unpkg.com#104.16.51.111#104.19.240.93#172.64.154.143#104.16.51.100",
  230. "ProxyPort": "80",
  231. "Info": "Proxy"
  232. },
  233. {
  234. "Name": "TIM ➜ CLOUDFLARE 02",
  235. "FLAG": "tim",
  236. "Payload": "[split]PATCH /cdn-cgi/trace HTTP/1.1[lf]Host: [rotate=mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br][lf][lf][split][lf][lf]PCVPN / HTTP/1.1[lf]Host: [host][lf]Upgrade: websocket[lf][lf]@@@ACL /index.html HTTP/1.1[crlf]Host: [host][crlf]Upgrade: websocket[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]@@@ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  237. "SNI": "",
  238. "TlsIP": "",
  239. "ProxyIP": "104.18.99.70#104.16.239.166#172.64.154.143#104.19.239.25#104.17.64.225#mtls.sandbox.c6bank.com.br#104.16.51.111#pre-onboarding-p.c6bank.app#mtls.sandbox.c6bank.com.br#app.sandbox.c6bank.com.br",
  240. "ProxyPort": "80",
  241. "Info": "Proxy"
  242. },
  243. {
  244. "Name": "TIM ➜ CLOUDFLARE 03",
  245. "FLAG": "tim",
  246. "Payload": "CONNECT / HTTP/1.9[crlf]host: [random=mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]@@@GET wss://[random==mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br]/ HTTP/1.1[crlf]Host: [host][crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive Upgrade[crlf][crlf]@@@GET / HTTP/1.1[crlf]Host: [random=mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [host][crlf]Upgrade: Websocket[crlf][crlf]@@@CONNECT / HTTP/1.1[crlf]Host: [random=mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL // HTTP/1.1[crlf]Host: [host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  247. "SNI": "",
  248. "TlsIP": "",
  249. "ProxyIP": "104.17.64.225#mtls.sandbox.c6bank.com.br#104.18.33.113#104.16.53.111#104.19.241.25#162.159.153.238#104.18.33.113#162.159.152.26#blog.c6bank.com.br#104.18.99.70#104.18.98.70#104.19.240.25#172.64.154.143#104.18.28.182#104.19.239.25#104.19.239.25#104.18.99.70#104.18.33.113#atendimento.lojadointer.com.br",
  250. "ProxyPort": "80",
  251. "Info": "Proxy"
  252. },
  253. {
  254. "Name": "TIM ➜ CLOUDFLARE 04",
  255. "FLAG": "tim",
  256. "Payload": "GET /cdn-cgi/trace HTTP/1.1[crlf]Host: [rotate=no.descomplica.com.br;wtaphf.descomplica.com.br;descomplica.com.br][crlf][crlf][crlf][crlf]PUT- / HTTP/1.1[crlf]Host: [host][crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]@@@CONNECT /cdn-cgi/trace HTTP/1.1[crlf]Host: [rotate=no.descomplica.com.br;wtaphf.descomplica.com.br;descomplica.com.br][crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [host][crlf]User-Agent: Mobile Safari/9 OPR/9 [crlf]Upgrade: websocket[crlf][crlf]@@@CONNECT wss://no.descomplica.com.br/ HTTP/1.1[crlf]Host: appdev.c6bank.com.br[crlf][crlf][split][crlf][crlf]GET-ACL /?/ / HTTP/1.1[crlf]Host: [host]][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Pragma: no-cache[crlf]Cache-Control: DELETE-cache[crlf]PUT- /?/[crlf][crlf]",
  257. "SNI": "",
  258. "TlsIP": "",
  259. "ProxyIP": "104.18.99.70#mtls.sandbox.c6bank.com.br#162.159.153.238#104.18.33.113#162.159.152.26#104.19.241.93#104.19.239.25#162.159.153.238#172.64.154.143#104.18.29.182",
  260. "ProxyPort": "80",
  261. "Info": "Proxy"
  262. },
  263. {
  264. "Name": "TIM ➜ CLOUDFLARE 05",
  265. "FLAG": "tim",
  266. "Payload": "CONNECT / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]@TSTOPSPEED[crlf][crlf]@@@GET / HTTP/1.1\\\\nHost: api.sandbox.c6bank.com.br\\\\nExpect: 100-continue\\\\n\\\\n[split]\\\\n\\\\nACL /?/ HTTP/1.1\\\\nHost: [host]\\\\nExpect: 100-continue\\\\nUpgrade: websocket\\\\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\\\\n\\\\n@@@PUT / HTTP/1.1[crlf]Host: jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [host][crlf]Upgrade: Websocket[crlf]Referer: SSHT[crlf][crlf]@@@ACL / HTTP/1.1[crlf]Host: [rotate=pre-onboarding-p.c6bank.app;google.c6bank.com.br;auth.of.c6bank.com.br;support.deezer.com;blog.c6bank.com.br;view.mail.c6bank.com.br;cloud.mail.c6bank.com.br;cdn.c6bank.com.br;api.sandbox.c6bank.com.br;click.mail.c6bank.com.br;mobile.c6bank.app;boleto.c6bank.com.br;investment.c6bank.com.br;assets.c6bank.app;terms.c6bank.com.br;app.sandbox.c6bank.com.br;image.mail.c6bank.com.br;image.mail.c6bank.com.br;cms-assets-p.c6bank.com.br;ajuda.c6bank.com.br;c6bank.com.br;api.of.c6bank.com.br;chequev.c6bank.app;appdev.c6bank.app;mobile.hom.c6bank.app;dev-terms.c6bank.com.br;ativos-sf.c6bank.com.br;mail.c6bank.com.br;mobilidade.cloud.caixa.gov.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [host][crlf]Upgrade: Websocket[crlf][crlf][crlf]",
  267. "SNI": "",
  268. "TlsIP": "",
  269. "ProxyIP": "ayuda.universalplus.com#104.16.51.111#104.16.53.111#172.64.154.143#mtls.sandbox.c6bank.com.br#162.159.153.238#104.18.33.113#162.159.152.26#blog.c6bank.com.br#104.18.99.70#104.18.98.70#104.19.240.25#104.18.28.182#104.19.239.25",
  270. "ProxyPort": "80",
  271. "Info": "Proxy"
  272. },
  273. {
  274. "Name": "TIM ➜ CLOUDFLARE 06",
  275. "FLAG": "tim",
  276. "Payload": "ACL / HTTP/1.3[crlf]Host: [rotate=mtls.sandbox.c6bank.com.br;www.c6bank.com.br;celular.c6bank.app;app.sandbox.c6bank.com.br;pre-onboarding-p.c6bank.app;mobile.hom.c6bank.app;creatorsupport.deezer.com;ubisoft.c6bank.com.br;live.vivo.com.br][crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  277. "SNI": "",
  278. "TlsIP": "",
  279. "ProxyIP": "172.64.153.178#104.18.28.182#104.18.34.78#104.19.239.25#104.19.242.25#104.16.51.111#104.19.241.93#104.19.240.93#162.159.152.26#162.159.153.238#13.33.252.3#104.18.99.70#104.18.98.70#172.64.154.143#104.17.64.225#74.119.118.149#172.64.152.140#172.65.251.78#104.16.239.166#104.18.33.113#www.pruftechnik.com#www.oiplace.com.br#www.usclaro.com#www.beha-amprobe.com#104.16.53.111#104.26.5.32#172.64.149.191#104.18.38.65#atendimento.lojadointer.com.br#znayp2saezuftgygo-mercadolibre.siteintercept.qualtrics.com#static.addtoany.com#www.teamworkonline.com#investnews.com.br",
  280. "ProxyPort": "80",
  281. "Info": "Proxy"
  282. },
  283. {
  284. "Name": "TIM ➜ CLOUDFLARE 07",
  285. "FLAG": "tim",
  286. "Payload": "PATCH /cdn-cgi/trace HTTP/1.1[lf]Host: mtls.sandbox.c6bank.com.br[lf][lf][split][lf][lf]PCVPN / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: websocket[lf][lf]",
  287. "SNI": "",
  288. "TlsIP": "",
  289. "ProxyIP": "104.17.64.225#104.16.239.166#104.18.33.113#104.19.241.93#104.18.28.182#104.19.239.25#104.18.99.70#172.67.188.168#104.18.29.182#104.19.240.93#tinyurl.com#unpkg.com#static.addtoany.com#www.teamworkonline.com#substack.com#fee.org#tender.cash",
  290. "ProxyPort": "80",
  291. "Info": "Proxy"
  292. },
  293. {
  294. "Name": "TIM ➜ CLOUDFLARE 08",
  295. "FLAG": "tim",
  296. "Payload": "ACL /index.html HTTP/1.1[crlf]Host: live.vivo.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  297. "SNI": "",
  298. "TlsIP": "",
  299. "ProxyIP": "investnews.com.br",
  300. "ProxyPort": "80",
  301. "Info": "Proxy"
  302. },
  303. {
  304. "Name": "TIM ➜ DIRECT 01",
  305. "FLAG": "tim",
  306. "Payload": "[protocol] \\\\\\\\n\\\\\\\\n/@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj  Keep-Alive[crlf]User-Agent: [ua][crlf]@@@MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]@@@HTTP/1.1[crlf] [crlf][crlf]•@@@http/ \\\\\\\\n\\\\\\\\n°@@@HTTP/ [crlf][crlf]|[crlf]@@@HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]",
  307. "SNI": "",
  308. "TlsIP": "",
  309. "ProxyIP": "186.233.118.241",
  310. "ProxyPort": "80",
  311. "Info": "Direct"
  312. },
  313. {
  314. "Name": "TIM ➜ DIRECT 02",
  315. "FLAG": "tim",
  316. "Payload": "ACL / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Connection: Upgrade[crlf]Upgrade: WebSocket[crlf][crlf]",
  317. "SNI": "",
  318. "TlsIP": "",
  319. "ProxyIP": "104.16.239.166",
  320. "ProxyPort": "80",
  321. "Info": "Proxy"
  322. },
  323. {
  324. "Name": "TIM ➜ DIRECT 03",
  325. "FLAG": "tim",
  326. "Payload": "ACL / HTTP/1.1[crlf]Host: connectnetvpn.com.br[crlf]Connection: Upgrade[crlf]Upgrade: WebSocket[crlf][crlf]",
  327. "SNI": "",
  328. "TlsIP": "",
  329. "ProxyIP": "104.18.28.182",
  330. "ProxyPort": "80",
  331. "Info": "Proxy"
  332. },
  333. {
  334. "Name": "TIM ➜ DIRECT 04",
  335. "FLAG": "tim",
  336. "Payload": "\\\\n\\\\r[split][raw][crlf] POLL HTTP/1.0\\\\n\\\\n[host_port][ua][auth][crlf]POLL@@@CONNECT tibr-sdgw.datami.net:22 [protocol][crlf][crlf]@@@MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: r03.spine101.lax01.fab.netarch.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@sshtproject[crlf]Referer: http://www.google.com[crlf]",
  337. "SNI": "",
  338. "TlsIP": "",
  339. "ProxyIP": "186.233.118.241",
  340. "ProxyPort": "80",
  341. "Info": "Direct"
  342. },
  343. {
  344. "Name": "TIM ➜ DIRECT 05",
  345. "FLAG": "tim",
  346. "Payload": "HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.1[lf] 200 OK\\n\\\\n\\\\nHost: [rotate=www.tidalhifi.com;www.storm.canny.io;www.ujgwa.163.com.fail;www.reimaginetomorrow-qa.disney.com;www.nxtdev.monster.de;www.netflixawards.com;www.minecraft.canny.io;www.minecraft.msgfocus.com;www.www.qq.com.store;bacon.tv4play-stage.se;www.amazonprinting.com;www.arhapsodyinbloom.com;themes.us-west-2.amazonappstream.com;tango-logistics.com;stg.samsungxr.com;soundcloud.dev;shop.cmore.se;samsung-top.com;render.worldofwarcraft.com;prizebox.nicovideo.jp;ownit-config.stage.files.bbci.co.uk;uber.com;amazon.com;aliyunportal.com;google.com;akamai.net][lf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=yhjq23.360.com.fail;alt4.aspmx.l.google.com;www.xhtsw.163.com.fail;www.storm.canny.io;www.reimaginetomorrow-qa.disney.com;www.minecraft.msgfocus.com;www.netflixawards.com;x115gzbrpk.execute-api.us-east-1.amazonaws.com;google.traiteurjongen.com;aspmx.l.google.com.4xfun.com;aspmx.l.google.com.469.it. 20secondenhandenwassen.nl;aspmx.l.google.com.469.it;alt2.aspmx.l.google.com.0088.tv;alt1.aspmx.l.google.com.123sexshop.be;alt2.aspmx.l.google.com.sac-surveyors.org;alt2.aspmx.l.google.com.meta-meta.com;slcch03bl9.execute-api.us-east-1.amazonaws.com][lf]",
  347. "SNI": "",
  348. "TlsIP": "",
  349. "ProxyIP": "186.233.118.241",
  350. "ProxyPort": "80",
  351. "Info": "Direct"
  352. },
  353. {
  354. "Name": "TIM ➜ DIRECT 06",
  355. "FLAG": "tim",
  356. "Payload": "[rotate=ACL;GET;PATCH;HEAD] wss://[rotate=connectnetvpn.com.br]/ HTTP/1.0[crlf]Host: [rotate=web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;m.waze.com;m.twitter.com;twitter.com;c.whatsapp.net;media.whatsapp.net;web.whatsapp.com;m.waze.com;web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;m.waze.com;m.twitter.com;twitter.com;web.whatsapp.com;media.whatsapp.net;c.whatsapp.net;musicaclaro.com.br][crlf]Upgrade: Websocket[crlf]Proxy-Connection: Keep-Alive; Upgrade[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]tl[crlf][crlf]",
  357. "SNI": "",
  358. "TlsIP": "",
  359. "ProxyIP": "104.16.239.166",
  360. "ProxyPort": "80",
  361. "Info": "Proxy"
  362. },
  363. {
  364. "Name": "TIM ➜ DIRECT 07",
  365. "FLAG": "tim",
  366. "Payload": "[split][delay_split]ACL / /\\\\n@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\\\\\n\\\\\\\\n\\\\\\\\n \\\\\\\\n@@@MOVE / HTTP/1.1[crlf]Host: @shaka_news[crlf]Upgrade: websocket[crlf][crlf]@@@ACL HTTP/1.1[lf]Host: google.es[lf]@@@PUT / Cache-Control: private: Web-security[crlf]@@@ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]@@@ACL / HTTP/1.1[crlf][crlf]@@@PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]@@@HTTP/1.1[lf]HTTP/ [lf]Host: ff.garena.com[lf]\\n[15/03, 17:00]@@@HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;sshtproject.com-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\\\\\n\\\\\\\\n\\\\\\\\n \\\\\\\\n@@@HTTP/1.1[lf]Host: [rotate=foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com][lf]Upgrade: Websocket[lf][split][lf]@@@HTTP/1.1 200[crlf]Host: vimeo.com[crlf][crlf][netData][crlf]@mip [crlf][crlf]http://uber.com/ HTTP/1.1 200[crlf]mip[crlf][crlf] [crlf][crlf]http://udemy.com/ HTTP/1.1 200[crlf]Host@mip[crlf][crlf] [crlf][crlf] http://aliyuncs.com/ HTTP/1.1 200[crlf]Host fastly.net/[crlf][crlf][netData][crlf] [crlf][crlf] http://pornhub.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf] http://google.com/ HTTP/1.1[cr][lf] [crlf][crlf][netData][cr][lf] [crlf][crlf]CONNECT mip:22@http://youtube.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf]",
  367. "SNI": "",
  368. "TlsIP": "",
  369. "ProxyIP": "186.233.118.241",
  370. "ProxyPort": "80",
  371. "Info": "Proxy"
  372. },
  373. {
  374. "Name": "TIM ➜ DIRECT 08",
  375. "FLAG": "tim",
  376. "Payload": "HTTP/1.1 200[crlf]Host: vimeo.com[crlf][crlf][netData][crlf]@mip [crlf][crlf]http://uber.com/ HTTP/1.1 200[crlf]mip[crlf][crlf] [crlf][crlf]http://udemy.com/ HTTP/1.1 200[crlf]Host@mip[crlf][crlf] [crlf][crlf] http://aliyuncs.com/ HTTP/1.1 200[crlf]Host fastly.net/[crlf][crlf][netData][crlf] [crlf][crlf] http://pornhub.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf] http://google.com/ HTTP/1.1[cr][lf] [crlf][crlf][netData][cr][lf] [crlf][crlf]CONNECT mip:22@http://youtube.com/ HTTP/1.1[crlf] [crlf][crlf][netData][crlf] [crlf][crlf]",
  377. "SNI": "",
  378. "TlsIP": "",
  379. "ProxyIP": "186.233.118.241",
  380. "ProxyPort": "80",
  381. "Info": "Proxy"
  382. },
  383. {
  384. "Name": "TIM ➜ PROXY SOCKS 01",
  385. "FLAG": "tim",
  386. "Payload": "HTTP/ 1[lf]Host: portalrecarga.vivo.com.br;Tim.com.br;xvideos.com;blaze-1.com;glink.net.br-CDN-GEThttp://ACL-CDN-VIVO.COM.BR;GOOGLE.COM\\\\\\\\n\\\\\\\\n\\\\\\\\n \\\\\\\\n",
  387. "SNI": "[app_host]",
  388. "TlsIP": "[app_host]",
  389. "ProxyIP": "[app_host]",
  390. "ProxyPort": "8080",
  391. "Info": "Direct"
  392. },
  393. {
  394. "Name": "TIM ➜ PROXY SOCKS 02",
  395. "FLAG": "tim",
  396. "Payload": "HTTP/ 1[lf]Host:  access.cloudflare.com;aim.cloudflare.com;admin.sqlite.cloudflare.com;blog.cloudflare.com;c4.speed.cloudflare.com;google.com\\\\\\\\n\\\\\\\\n//PATCH HTTP://L-CDN-VIVO.COM.BR;GOOGLE.COM/DNS 1.1.1.1 - 8.8.8.8 - 1.0.0.1- GLINK.NET.BR-m.youtube.com;facebook.com;bitbin.com@LINK4G\\\\\\\\n\\\\\\\\n\\\\\\\\n \\\\\\\\n@@@HTTP/1.1[lf]HTTP/ [lf]Host: [rotate=www.flickr.com;foxnews.com;www.uc.com;tv.com;netfix.com;palcomp3.com;m.operamini.com;m.olx.com.br;www.sky.com;www.waze.com;ff.garena.com;www.hooq.tv;www.terra.com;salesrock.virginmobile.mx;www.yahoo.com;imgur.com;get.adobe.com;youtube.com;google.com;instagram.com;microsoft.com;akamai.net;1.cloudfront.net;www.dropbox.com][lf]@@@HTTP/1.0 [lf]Host: music.yandex.com[crlf]",
  397. "SNI": "[app_host]",
  398. "TlsIP": "[app_host]",
  399. "ProxyIP": "[app_host]",
  400. "ProxyPort": "8080",
  401. "Info": "Proxy"
  402. },
  403. {
  404. "Name": "CLARO ➜ PLANOS 01",
  405. "FLAG": "claro",
  406. "Payload": "",
  407. "SNI": "dns.web.whatsapp.com",
  408. "TlsIP": "186.233.118.241",
  409. "ProxyIP": "",
  410. "ProxyPort": "443",
  411. "Info": "Ssl"
  412. },
  413. {
  414. "Name": "CLARO ➜ PLANOS 02",
  415. "FLAG": "claro",
  416. "Payload": "",
  417. "SNI": "m.waze.com",
  418. "TlsIP": "186.233.118.241",
  419. "ProxyIP": "",
  420. "ProxyPort": "443",
  421. "Info": "Ssl"
  422. },
  423. {
  424. "Name": "CLARO ➜ PLANOS 03",
  425. "FLAG": "claro",
  426. "Payload": "",
  427. "SNI": "musicaclaro.com.br",
  428. "TlsIP": "186.233.118.241",
  429. "ProxyIP": "",
  430. "ProxyPort": "443",
  431. "Info": "Ssl"
  432. },
  433. {
  434. "Name": "CLARO ➜ PLANOS 04",
  435. "FLAG": "claro",
  436. "Payload": "",
  437. "SNI": "m.twitter.com",
  438. "TlsIP": "186.233.118.241",
  439. "ProxyIP": "",
  440. "ProxyPort": "443",
  441. "Info": "Ssl"
  442. },
  443. {
  444. "Name": "CLARO ➜ PLANOS 05",
  445. "FLAG": "claro",
  446. "Payload": "",
  447. "SNI": "web.whatsapp.com",
  448. "TlsIP": "186.233.118.241",
  449. "ProxyIP": "",
  450. "ProxyPort": "443",
  451. "Info": "Ssl"
  452. },
  453. {
  454. "Name": "CLARO ➜ PLANOS 06",
  455. "FLAG": "claro",
  456. "Payload": "",
  457. "SNI": "c.whatsapp.net",
  458. "TlsIP": "186.233.118.241",
  459. "ProxyIP": "",
  460. "ProxyPort": "443",
  461. "Info": "Ssl"
  462. },
  463. {
  464. "Name": "CLARO ➜ PLANOS 07",
  465. "FLAG": "claro",
  466. "Payload": "",
  467. "SNI": "media.whatsapp.net",
  468. "TlsIP": "186.233.118.241",
  469. "ProxyIP": "",
  470. "ProxyPort": "443",
  471. "Info": "Ssl"
  472. },
  473. {
  474. "Name": "CLARO ➜ PLANOS 08",
  475. "FLAG": "claro",
  476. "Payload": "",
  477. "SNI": "whatsapp.com",
  478. "TlsIP": "186.233.118.241",
  479. "ProxyIP": "",
  480. "ProxyPort": "443",
  481. "Info": "Ssl"
  482. },
  483. {
  484. "Name": "CLARO ➜ PLANOS 09",
  485. "FLAG": "claro",
  486. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=dns.web.whatsapp.com;web.whatsapp.com;waze.com][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  487. "SNI": "",
  488. "TlsIP": "[app_host]",
  489. "ProxyIP": "[app_host]",
  490. "ProxyPort": "80",
  491. "Info": "Proxy"
  492. }
  493. ]
  494. }

comments powered by Disqus