W

SUBMITTED BY: Pachelly

DATE: Jan. 18, 2023, 10:05 a.m.

UPDATED: Jan. 14, 2024, 11:55 p.m.

FORMAT: Text only

SIZE: 74.5 kB

History Raw Download

HITS: 18627

Report
  1. {
  2. "Version": "1.0.16",
  3. "ReleaseNotes": " BOA NOITE,TODAS OPERADORAS FUNCIONANDO✋",
  4. "UrlUpdate": "https://bitbin.it/v2YdalOB/raw/",
  5. "Sms": "",
  6. "EmailFeedback": "",
  7. "UrlContato": "https://",
  8. "UrlTermos": "https://",
  9. "CheckUser": "true",
  10. "UdpPort": "7300;7200;7290;7295;7100;7500;7600;7700;7800;7900",
  11. "Servers": [
  12. {
  13. "Name": "VIP CONECT",
  14. "TYPE": "free",
  15. "FLAG": "br.png",
  16. "ServerIP": "br2.danilobr.tk",
  17. "CheckUser": "http://209.14.69.74:5454/checkUser",
  18. "ServerPort": "22",
  19. "SSLPort": "443",
  20. "USER": "",
  21. "PASS": ""
  22. },
  23. ],
  24. "Networks": [
  25. {
  26. "Name": "TIM 1",
  27. "FLAG": "tim",
  28. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  29. "SNI": "",
  30. "TlsIP": "",
  31. "ProxyIP": "104.19.239.25",
  32. "ProxyPort": "80",
  33. "Info": "Proxy"
  34. },
  35. {
  36. "Name": "TIM 2",
  37. "FLAG": "tim",
  38. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  39. "SNI": "",
  40. "TlsIP": "",
  41. "ProxyIP": "104.16.53.111",
  42. "ProxyPort": "80",
  43. "Info": "Proxy"
  44. },
  45. {
  46. "Name": "TIM 3",
  47. "FLAG": "tim",
  48. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  49. "SNI": "",
  50. "TlsIP": "",
  51. "ProxyIP": "104.16.53.111",
  52. "ProxyPort": "80",
  53. "Info": "Proxy"
  54. },
  55. {
  56. "Name": "TIM EXPIRADO",
  57. "FLAG": "tim",
  58. "Payload": "HTTP/1.1[crlf] [crlf][crlf]鈥?",
  59. "SNI": "",
  60. "TlsIP": "185.143.221.37.",
  61. "ProxyIP": "br2.danilobr.tk",
  62. "ProxyPort": "80",
  63. "Info": "Proxy"
  64. },
  66. {
  67. "Name": "TIM DCT",
  68. "FLAG": "tim",
  69. "Payload": "ACL http://1.1.1.1rotate=www.waze.com;buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;www.myspace.com.br;www.waze.com;1.0.0.5[crlf]",
  70. "SNI": "",
  71. "TlsIP": "",
  72. "ProxyIP": "br4.offs3t.xyz",
  73. "ProxyPort": "80",
  74. "Info": "Proxy"
  75. },
  77. {
  78. "Name": "鈺扳棔MERCADO",
  79. "FLAG": "tim",
  80. "Payload": "PROPPATCH http://mercadolivre.com.br HTTP/2[crlf]Host: http://mercadolivre.com.br[crlf]",
  81. "SNI":"",
  82. "TlsIP": "",
  83. "ProxyIP": "[app_host]",
  84. "ProxyPort": "80",
  85. "Info": "Proxy"
  86. },
  87. {
  88. "Name": "? TIM DIRECT?",
  89. "FLAG": "tim",
  90. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  91. "SNI":"",
  92. "TlsIP": "",
  93. "ProxyIP": "[app_host]",
  94. "ProxyPort": "80",
  95. "Info": "Proxy"
  96. },
  98. {
  99. "Name": "TIM NOVA PAYLOAD",
  100. "FLAG": "tim",
  101. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  102. "SNI": "",
  103. "TlsIP": "",
  104. "ProxyIP": "104.19.239.25",
  105. "ProxyPort": "80",
  106. "Info": "Proxy"
  107. },
  108. {
  109. "Name": "TIM 1",
  110. "FLAG": "tim",
  111. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  112. "SNI": "",
  113. "TlsIP": "",
  114. "ProxyIP": "104.19.239.25",
  115. "ProxyPort": "80",
  116. "Info": "Proxy"
  117. },
  118. {
  119. "Name": "TIM 2",
  120. "FLAG": "tim",
  121. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  122. "SNI": "",
  123. "TlsIP": "",
  124. "ProxyIP": "104.16.53.111",
  125. "ProxyPort": "80",
  126. "Info": "Proxy"
  127. },
  128. {
  129. "Name": "TIM 3",
  130. "FLAG": "tim",
  131. "Payload": "GET / HTTP/1.1[crlf]Host: www.c6bank.app[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  132. "SNI": "",
  133. "TlsIP": "",
  134. "ProxyIP": "104.16.53.111",
  135. "ProxyPort": "80",
  136. "Info": "Proxy"
  137. },
  138. {
  139. "Name": "🔵TIM GOLD 3🔵",
  140. "FLAG": "tim",
  141. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  142. "SNI": "",
  143. "TlsIP": "",
  144. "ProxyIP": "104.19.239.25",
  145. "ProxyPort": "80",
  146. "Info": "Proxy"
  147. },
  148. {
  149. "Name": "🔵TIM GOLD 3🔵",
  150. "FLAG": "tim",
  151. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  152. "SNI": "",
  153. "TlsIP": "",
  154. "ProxyIP": "104.16.53.111",
  155. "ProxyPort": "80",
  156. "Info": "Proxy"
  157. },
  158. {
  159. "Name": "🔵TIM GOLD 3🔵",
  160. "FLAG": "tim",
  161. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  162. "SNI": "",
  163. "TlsIP": "",
  164. "ProxyIP": "104.16.51.111",
  165. "ProxyPort": "80",
  166. "Info": "Proxy"
  167. },
  168. {
  169. "Name": "🔵TIM GOLD 3🔵",
  170. "FLAG": "tim",
  171. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  172. "SNI": "",
  173. "TlsIP": "",
  174. "ProxyIP": "104.18.28.182",
  175. "ProxyPort": "80",
  176. "Info": "Proxy"
  177. },
  178. {
  179. "Name": "🔵TIM GOLD 4🔵",
  180. "FLAG": "tim",
  181. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  182. "SNI": "",
  183. "TlsIP": "",
  184. "ProxyIP": "104.19.239.25",
  185. "ProxyPort": "80",
  186. "Info": "Proxy"
  187. },
  188. {
  189. "Name": "🔵TIM GOLD 4 . 1 🔵",
  190. "FLAG": "tim",
  191. "Payload": "GET / HTTP/1.1\nHost: cardinalcommerce.com\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  192. "SNI": "songbird.cardinalcommerce.com",
  193. "TlsIP": "",
  194. "ProxyIP": "104.19.239.25",
  195. "ProxyPort": "80",
  196. "Info": "Proxy"
  197. },
  198. {
  199. "Name": "🔵TIM GOLD 4 . 2 🔵",
  200. "FLAG": "tim",
  201. "Payload": "GET / HTTP/1.1\nHost: cardinalcommerce.com\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  202. "SNI": "songbird.cardinalcommerce.com",
  203. "TlsIP": "",
  204. "ProxyIP": "198.217.251.250",
  205. "ProxyPort": "80",
  206. "Info": "Proxy"
  207. },
  208. {
  209. "Name": "🔵TIM GOLD 4🔵",
  210. "FLAG": "tim",
  211. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  212. "SNI": "",
  213. "TlsIP": "",
  214. "ProxyIP": "104.16.53.111",
  215. "ProxyPort": "80",
  216. "Info": "Proxy"
  217. },
  218. {
  219. "Name": "🔵TIM GOLD 4🔵",
  220. "FLAG": "tim",
  221. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  222. "SNI": "",
  223. "TlsIP": "",
  224. "ProxyIP": "104.16.51.111",
  225. "ProxyPort": "80",
  226. "Info": "Proxy"
  227. },
  228. {
  229. "Name": "🔵TIM GOLD 4🔵",
  230. "FLAG": "tim",
  231. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  232. "SNI": "",
  233. "TlsIP": "",
  234. "ProxyIP": "104.18.28.182",
  235. "ProxyPort": "80",
  236. "Info": "Proxy"
  237. },
  238. {
  239. "Name": "🔵TIM GOLD 5🔵",
  240. "FLAG": "tim",
  241. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  242. "SNI": "",
  243. "TlsIP": "",
  244. "ProxyIP": "104.19.239.25",
  245. "ProxyPort": "80",
  246. "Info": "Proxy"
  247. },
  248. {
  249. "Name": "🔵TIM GOLD 5🔵",
  250. "FLAG": "tim",
  251. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  252. "SNI": "",
  253. "TlsIP": "",
  254. "ProxyIP": "104.16.53.111",
  255. "ProxyPort": "80",
  256. "Info": "Proxy"
  257. },
  258. {
  259. "Name": "🔵TIM GOLD 5🔵",
  260. "FLAG": "tim",
  261. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  262. "SNI": "",
  263. "TlsIP": "",
  264. "ProxyIP": "104.16.51.111",
  265. "ProxyPort": "80",
  266. "Info": "Proxy"
  267. },
  268. {
  269. "Name": "🔵TIM GOLD 5🔵",
  270. "FLAG": "tim",
  271. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  272. "SNI": "",
  273. "TlsIP": "",
  274. "ProxyIP": "104.18.28.182",
  275. "ProxyPort": "80",
  276. "Info": "Proxy"
  277. },
  278. {
  279. "Name": "🔰VIVO TODOS OS DDD 01🔰",
  280. "FLAG": "vivo",
  281. "Payload": "GET / HTTP/1.1[crlf]Host: d1p8gf8elgdzco.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  282. "SNI": "",
  283. "TlsIP": "",
  284. "ProxyIP": "108.139.166.122",
  285. "ProxyPort": "80",
  286. "Info": "Proxy"
  287. },
  288. {
  289. "Name": "🔰VIVO TODOS OS DDD 02🔰",
  290. "FLAG": "vivo",
  291. "Payload": "GET / HTTP/1.1[crlf]Host: dpl104ooy7958.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  292. "SNI": "",
  293. "TlsIP": "",
  294. "ProxyIP": "108.139.166.70",
  295. "ProxyPort": "80",
  296. "Info": "Proxy"
  297. },
  298. {
  299. "Name": "🔰VIVO TODOS OS DDD 03🔰",
  300. "FLAG": "vivo",
  301. "Payload": "GET / HTTP/1.1[crlf]Host: d1spa0stbakht3.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  302. "SNI": "",
  303. "TlsIP": "",
  304. "ProxyIP": "108.139.166.109",
  305. "ProxyPort": "80",
  306. "Info": "Proxy"
  307. },
  308. {
  309. "Name": "🔰VIVO TODOS OS DDD 04🔰",
  310. "FLAG": "vivo",
  311. "Payload": "GET / HTTP/1.1[crlf]Host: d1p8gf8elgdzco.cloudfront.net[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  312. "SNI": "vivo.masterrp.online",
  313. "TlsIP": "vivo.masterrp.online",
  314. "ProxyIP": "vivo.masterrp.online",
  315. "ProxyPort": "80",
  316. "Info": "Proxy"
  317. },
  318. {
  319. "Name": "🔰VIVO 01🔰",
  320. "FLAG": "vivo",
  321. "Payload": "GET / HTTP/1.1[crlf]Host: [app-host][crlf]Upgrade: websocket[crlf][crlf]",
  322. "SNI": "",
  323. "TlsIP": "104.16.53.111",
  324. "ProxyIP": "",
  325. "ProxyPort": "80",
  326. "Info": "direct"
  327. },
  328. {
  329. "Name": "🔰VIVO 02🔰",
  330. "FLAG": "vivo",
  331. "Payload": "GET / HTTP/1.1[crlf]Host: [app-host][crlf]Upgrade: websocket[crlf][crlf]",
  332. "SNI": "",
  333. "TlsIP": "104.16.51.111",
  334. "ProxyIP": "",
  335. "ProxyPort": "80",
  336. "Info": "direct"
  337. },
  338. { "Name":"TLS | CF | ADFAST LTDA 00",
  339. "FLAG":"vivo",
  340. "Payload":"GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  341. "SNI":"support.zipcar.com",
  342. "TlsIP":"",
  343. "ProxyIP":"104.16.53.111",
  344. "ProxyPort":"80",
  345. "Info":"Proxy"
  346. },
  347. { "Name":"TLS | CF | NOVA 00",
  348. "FLAG":"vivo",
  349. "Payload":"GET-CONTROL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  350. "SNI":"br2.danilobr.tk",
  351. "TlsIP":"Atendimento.descomplica.com.br",
  352. "ProxyIP":"",
  353. "ProxyPort":"443",
  354. "Info":"Tlsws"
  355. },
  356. {"Name":"TLS | CF | NOVA 01",
  357. "FLAG":"vivo",
  358. "Payload":"BASELINE-CONTROL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  359. "SNI":"br2.danilobr.tk",
  360. "TlsIP":"Atendimento.descomplica.com.br",
  361. "ProxyIP":"",
  362. "ProxyPort":"443",
  363. "Info":"Tlsws"
  364. },
  365. {"Name":"TLS | CF | NOVA 02",
  366. "FLAG":"vivo",
  367. "Payload":"GET-CONTROL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  368. "SNI":"duckduckmoose.zendesk.com",
  369. "TlsIP":"",
  370. "ProxyIP":"104.16.53.111",
  371. "ProxyPort":"80",
  372. "Info":"Proxy"
  373. },
  374. {"Name":"TLS | CF | NOVA 03",
  375. "FLAG":"vivo",
  376. "Payload":"GET-CONTROL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  377. "SNI":"zinio.zendesk.com",
  378. "TlsIP":"",
  379. "ProxyIP":"104.16.53.111",
  380. "ProxyPort":"80",
  381. "Info":"Proxy"
  382. },
  383. {"Name":"TLS | CF | NOVA 04",
  384. "FLAG":"vivo",
  385. "Payload":"GET-CONTROL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  386. "SNI":"help.artifactuprising.com",
  387. "TlsIP":"",
  388. "ProxyIP":"104.16.53.111",
  389. "ProxyPort":"80",
  390. "Info":"Proxy"
  391. },
  392. {"Name":"TLS | CF | NOVA 05",
  393. "FLAG":"vivo",
  394. "Payload":"GET-CONTROL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  395. "SNI":"kindara.zendesk.com",
  396. "TlsIP":"",
  397. "ProxyIP":"104.16.53.111",
  398. "ProxyPort":"80",
  399. "Info":"Proxy"
  400. },
  401. {"Name":"TLS | CF | NOVA 06",
  402. "FLAG":"vivo",
  403. "Payload":"GET-CONTROL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  404. "SNI":"support.cricket.com.au",
  405. "TlsIP":"",
  406. "ProxyIP":"104.16.53.111",
  407. "ProxyPort":"80",
  408. "Info":"Proxy"
  409. },
  410. { "Name":"PROXY | CF | NOVA 00",
  411. "FLAG":"vivo",
  412. "Payload":"GET / [protocol][crlf]Host: br2.danilobr.tk[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  413. "SNI":"help.artifactuprising.com",
  414. "TlsIP":"",
  415. "ProxyIP":"104.16.53.111",
  416. "ProxyPort":"80",
  417. "Info":"Proxy"
  418. },
  419. {
  420. "Name": "PROXY | CF | NOVA 01",
  421. "FLAG": "vivo",
  422. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  423. "SNI": "support.scanbot.io",
  424. "TlsIP": "",
  425. "ProxyIP": "104.16.53.111",
  426. "ProxyPort": "80",
  427. "Info": "Proxy"
  428. },
  429. { "Name":"PROXY | CF | NOVA 02",
  430. "FLAG":"vivo",
  431. "Payload":"GET / [protocol][crlf]Host: br2.danilobr.tk[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  432. "SNI":"",
  433. "TlsIP":"",
  434. "ProxyIP":"104.16.53.111",
  435. "ProxyPort":"80",
  436. "Info":"Proxy"
  437. },
  438. {
  439. "Name": "TLS | CLOUDFIRE | 00",
  440. "FLAG": "vivo",
  441. "Payload": "GET wss://Atendimento.descomplica.com.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  442. "SNI": "Atendimento.descomplica.com.br",
  443. "TlsIP": "Atendimento.descomplica.com.br",
  444. "ProxyIP": "",
  445. "ProxyPort": "443",
  446. "Info": "Tlsws"
  447. },
  448. {
  449. "Name": "TLS | CLOUDFIRE | 01",
  450. "FLAG": "vivo",
  451. "Payload": "GET wss://support.denvog.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  452. "SNI": "support.denvog.com",
  453. "TlsIP": "support.denvog.com",
  454. "ProxyIP": "",
  455. "ProxyPort": "443",
  456. "Info": "Tlsws"
  457. },
  458. {
  459. "Name":"TLS | CLOUDFIRE | 02",
  460. "FLAG":"vivo",
  461. "Payload":"GET wss://legado.vivo.com.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  462. "SNI":"legado.vivo.com.br",
  463. "TlsIP":"104.18.7.80",
  464. "ProxyIP":"",
  465. "ProxyPort":"443",
  466. "Info":"Tlsws"
  467. },
  468. {
  469. "Name":"TLS | CLOUDFIRE | 03",
  470. "FLAG":"vivo",
  471. "Payload":"GET wss://gedoc.vivo.com.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  472. "SNI":"gedoc.vivo.com.br",
  473. "TlsIP":"104.18.7.80",
  474. "ProxyIP":"",
  475. "ProxyPort":"443",
  476. "Info":"Tlsws"
  477. },
  478. {
  479. "Name":"TLS | CLOUDFIRE | 04",
  480. "FLAG":"vivo",
  481. "Payload":"GET wss://gedoc.vivo.com.br/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  482. "SNI":"gedoc.vivo.com.br",
  483. "TlsIP":"104.18.7.80",
  484. "ProxyIP":"",
  485. "ProxyPort":"443",
  486. "Info":"Tlsws"
  487. },
  488. {
  489. "Name": "PROXY | CLOUDFIRE | 01",
  490. "FLAG": "vivo",
  491. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  492. "SNI": "",
  493. "TlsIP": "",
  494. "ProxyIP": "104.18.6.80",
  495. "ProxyPort": "80",
  496. "Info": "Proxy"
  497. },
  498. {
  499. "Name": "PROXY | CLOUDFIRE | 02",
  500. "FLAG": "vivo",
  501. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  502. "SNI": "",
  503. "TlsIP": "",
  504. "ProxyIP": "162.247.241.14",
  505. "ProxyPort": "80",
  506. "Info": "Proxy"
  507. },
  508. {
  509. "Name": "PROXY | CDN | 01",
  510. "FLAG": "vivo",
  511. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  512. "SNI": "",
  513. "TlsIP": "",
  514. "ProxyIP": "live.vivo.com.br",
  515. "ProxyPort": "80",
  516. "Info": "Proxy"
  517. },
  518. {
  519. "Name": "PROXY | CDN | 02",
  520. "FLAG": "vivo",
  521. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  522. "SNI": "",
  523. "TlsIP": "",
  524. "ProxyIP": "recarga.vivo.com.br",
  525. "ProxyPort": "80",
  526. "Info": "Proxy"
  527. },
  528. {
  529. "Name": "PROXY | CDN | 03",
  530. "FLAG": "vivo",
  531. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  532. "SNI": "",
  533. "TlsIP": "",
  534. "ProxyIP": "planosvivointernet.com.br",
  535. "ProxyPort": "80",
  536. "Info": "Proxy"
  537. },
  538. {
  539. "Name": "PROXY | BUG | 00",
  540. "FLAG": "vivo",
  541. "Payload": "GET wss://www.vivo.com.br/para-voce/produtos-e-servicos/smartphones?utm_term=paid-video HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  542. "SNI": "",
  543. "TlsIP": "",
  544. "ProxyIP": "104.18.7.80",
  545. "ProxyPort": "80",
  546. "Info": "Proxy"
  547. },
  548. {
  549. "Name": "PROXY | BUG | 01",
  550. "FLAG": "vivo",
  551. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  552. "SNI": "",
  553. "TlsIP": "",
  554. "ProxyIP": "104.18.7.80",
  555. "ProxyPort": "80",
  556. "Info": "Proxy"
  557. },
  558. {
  559. "Name": "PROXY | BUG | 02",
  560. "FLAG": "vivo",
  561. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf][crlf]",
  562. "SNI": "",
  563. "TlsIP": "",
  564. "ProxyIP": "104.18.7.80",
  565. "ProxyPort": "80",
  566. "Info": "Proxy"
  567. },
  568. {
  569. "Name": "PROXY | BUG | 03",
  570. "FLAG": "vivo",
  571. "Payload": "GET / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf][crlf]",
  572. "SNI": "",
  573. "TlsIP": "",
  574. "ProxyIP": "104.18.7.80",
  575. "ProxyPort": "80",
  576. "Info": "Proxy"
  577. },
  578. {
  579. "Name": "PROXY | EASY | 01",
  580. "FLAG": "vivo",
  581. "Payload": "GET / HTTP/1.0[lf]Host: br2.danilobr.tk[lf]Upgrade: websocket[lf]Connection: Keep-Alive\nUser-Agent: [ua]\nReferer: [lf][lf]",
  582. "SNI": "",
  583. "TlsIP": "",
  584. "ProxyIP": "104.18.7.80",
  585. "ProxyPort": "80",
  586. "Info": "Proxy"
  587. },
  588. {
  589. "Name": "PROXY | EASY | 02",
  590. "FLAG": "vivo",
  591. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  592. "SNI": "",
  593. "TlsIP": "",
  594. "ProxyIP": "104.18.6.80",
  595. "ProxyPort": "80",
  596. "Info": "Proxy"
  597. },
  598. {
  599. "Name": "PROXY | EASY | 03",
  600. "FLAG": "vivo",
  601. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  602. "SNI": "",
  603. "TlsIP": "",
  604. "ProxyIP": "104.17.70.206",
  605. "ProxyPort": "80",
  606. "Info": "Proxy"
  607. },
  608. {
  609. "Name": "PROXY | EASY | 04",
  610. "FLAG": "vivo",
  611. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  612. "SNI": "",
  613. "TlsIP": "",
  614. "ProxyIP": "104.17.71.206",
  615. "ProxyPort": "80",
  616. "Info": "Proxy"
  617. },
  618. {
  619. "Name": "PROXY | EASY | 05",
  620. "FLAG": "vivo",
  621. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  622. "SNI": "",
  623. "TlsIP": "",
  624. "ProxyIP": "104.17.72.206",
  625. "ProxyPort": "80",
  626. "Info": "Proxy"
  627. },
  628. {
  629. "Name": "PROXY | EASY | 06",
  630. "FLAG": "vivo",
  631. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  632. "SNI": "",
  633. "TlsIP": "",
  634. "ProxyIP": "104.17.73.206",
  635. "ProxyPort": "80",
  636. "Info": "Proxy"
  637. },
  638. {
  639. "Name": "PROXY | EASY | 07",
  640. "FLAG": "vivo",
  641. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  642. "SNI": "",
  643. "TlsIP": "",
  644. "ProxyIP": "104.17.74.206",
  645. "ProxyPort": "80",
  646. "Info": "Proxy"
  647. },
  648. {
  649. "Name": "PROXY | EASY | 08",
  650. "FLAG": "vivo",
  651. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  652. "SNI": "",
  653. "TlsIP": "",
  654. "ProxyIP": "172.67.165.43",
  655. "ProxyPort": "80",
  656. "Info": "Proxy"
  657. },
  658. {
  659. "Name": "PROXY | EASY | 09",
  660. "FLAG": "vivo",
  661. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  662. "SNI": "",
  663. "TlsIP": "",
  664. "ProxyIP": "104.16.126.175",
  665. "ProxyPort": "80",
  666. "Info": "Proxy"
  667. },
  668. {
  669. "Name": "PROXY | EASY | 10",
  670. "FLAG": "vivo",
  671. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  672. "SNI": "",
  673. "TlsIP": "",
  674. "ProxyIP": "104.21.11.51",
  675. "ProxyPort": "80",
  676. "Info": "Proxy"
  677. },
  678. {
  679. "Name": "PROXY | EASY | 11",
  680. "FLAG": "vivo",
  681. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  682. "SNI": "",
  683. "TlsIP": "",
  684. "ProxyIP": "172.64.144.109",
  685. "ProxyPort": "80",
  686. "Info": "Proxy"
  687. },
  688. {
  689. "Name": "TIM",
  690. "FLAG": "tim",
  691. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  692. "SNI": "",
  693. "TlsIP": "",
  694. "ProxyIP": "204.14.69.74",
  695. "ProxyPort": "80",
  696. "Info": "Proxy"
  697. },
  698. {
  699. "Name": "DIRECT | REFORM.WS | 01",
  700. "FLAG": "tim",
  701. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  702. "SNI": "",
  703. "TlsIP": "104.16.53.111",
  704. "ProxyIP": "",
  705. "ProxyPort": "80",
  706. "Info": "Direct"
  707. },
  708. {
  709. "Name": "TLS | MODO DCT 00",
  710. "FLAG": "tim",
  711. "Payload": "GET / HTTP/1.1[crlf]Host: c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf]GET- / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf][crlf]",
  712. "SNI": "",
  713. "TlsIP": "",
  714. "ProxyIP": "br2.danilobr.tk",
  715. "ProxyPort": "80",
  716. "Info": "Proxy"
  717. },
  718. {
  719. "Name": "TLS | MODO DCT 01",
  720. "FLAG": "tim",
  721. "Payload": "GET / HTTP/1.1[crlf]Host: c6bank.com.br[crlf][crlf][split][crlf]BASELINE-CONTROL / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf][crlf]",
  722. "SNI": "",
  723. "TlsIP": "",
  724. "ProxyIP": "209.14.69.74",
  725. "ProxyPort": "80",
  726. "Info": "Proxy"
  727. },
  728. {
  729. "Name": "TLS | MODO DCT 02",
  730. "FLAG": "tim",
  731. "Payload": "GET / HTTP/1.1[crlf]Host: support.deezer.com[crlf][crlf][split][crlf]BASELINE-CONTROL / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf][crlf]",
  732. "SNI": "",
  733. "TlsIP": "",
  734. "ProxyIP": "209.14.69.74",
  735. "ProxyPort": "80",
  736. "Info": "Proxy"
  737. },
  739. {
  740. "Name": "TLS | CF | BASELINE 01",
  741. "FLAG": "tim",
  742. "Payload": "BASELINE-CONTROL wss://api.sandbox.c6bank.com.br/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Referer: google.com[crlf][crlf]",
  743. "SNI": "api.sandbox.c6bank.com.br",
  744. "TlsIP": "api.sandbox.c6bank.com.br",
  745. "ProxyIP": "198.217.251.250",
  746. "ProxyPort": "443",
  747. "Info": "Tlsws"
  748. },
  749. {
  750. "Name": "TLS | CF | BASELINE 02",
  751. "FLAG": "tim",
  752. "Payload": "BASELINE-CONTROL wss://cardinalcommerce.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  753. "SNI": "songbird.cardinalcommerce.com",
  754. "TlsIP": "198.217.251.250",
  755. "ProxyIP": "198.217.251.250",
  756. "ProxyPort": "443",
  757. "Info": "Tlsws"
  758. },
  759. {
  760. "Name": "PROXY| DCT | 03",
  761. "FLAG": "tim",
  762. "Payload": "Payload: GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf]BASELINE-CONTROL / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Expect: 100-continue[crlf]_BASELINE-CONTROL wss://mobile.c6bank.app/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  763. "SNI": "",
  764. "TlsIP": "",
  765. "ProxyIP": "209.14.69.74",
  766. "ProxyPort": "80",
  767. "Info": "Proxy"
  768. },
  769. {
  770. "Name": "PROXY| BASELINE | 04",
  771. "FLAG": "tim",
  772. "Payload": "GET / [protocol][crlf]Host: api.sandbox.c6bank.com.br[crlf]ACL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  773. "SNI": "",
  774. "TlsIP": "",
  775. "ProxyIP": "104.19.239.25",
  776. "ProxyPort": "80",
  777. "Info": "Proxy"
  778. },
  779. {
  780. "Name": "PROXY| BASELINE | 05",
  781. "FLAG": "tim",
  782. "Payload": "GET / [protocol][crlf]Host: api.sandbox.c6bank.com.br[crlf]ACL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  783. "SNI": "",
  784. "TlsIP": "",
  785. "ProxyIP": "104.16.53.111",
  786. "ProxyPort": "80",
  787. "Info": "Proxy"
  788. },
  789. {
  790. "Name": "PROXY| BASELINE | 06",
  791. "FLAG": "tim",
  792. "Payload": "GET / [protocol][crlf]Host: api.sandbox.c6bank.com.br[crlf]ACL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  793. "SNI": "",
  794. "TlsIP": "",
  795. "ProxyIP": "104.16.51.111",
  796. "ProxyPort": "80",
  797. "Info": "Proxy"
  798. },
  799. {
  800. "Name": "PROXY| BASELINE | 07",
  801. "FLAG": "tim",
  802. "Payload": "GET / [protocol][crlf]Host: api.sandbox.c6bank.com.br[crlf]ACL / [protocol][crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  803. "SNI": "",
  804. "TlsIP": "",
  805. "ProxyIP": "104.18.28.182",
  806. "ProxyPort": "80",
  807. "Info": "Proxy"
  808. },
  809. { "Name":"TLS | CF | NOVA 01",
  810. "FLAG":"tim",
  811. "Payload":"GET wss://mobilidade.cloud.caixa.gov.br [protocol][crlf]Host: br2.danilobr.tk[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  812. "SNI":"mobilidade.cloud.caixa.gov.br",
  813. "TlsIP":"162.159.130.62",
  814. "ProxyIP":"162.159.130.62",
  815. "ProxyPort":"443",
  816. "Info":"Tlsws"
  817. },
  818. {
  819. "Name": "TLS | CF | NOVA 02",
  820. "FLAG": "tim",
  821. "Payload": "GET wss://songbird.cardinalcommerce.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  822. "SNI": "songbird.cardinalcommerce.com",
  823. "TlsIP": "198.217.251.250",
  824. "ProxyIP": "198.217.251.250",
  825. "ProxyPort": "",
  826. "Info": "Tlsws"
  827. },
  828. { "Name":"PROXY | CF | NOVA 01",
  829. "FLAG":"tim",
  830. "Payload":"GET / [protocol][crlf]Host: br2.danilobr.tk[crlf]Connection: upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  831. "SNI":"",
  832. "TlsIP":"",
  833. "ProxyIP":"162.159.130.62",
  834. "ProxyPort":"80",
  835. "Info":"Proxy"
  836. },
  837. {
  838. "Name": "PROXY | CF | NOVA 02",
  839. "FLAG": "tim",
  840. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  841. "SNI": "",
  842. "TlsIP": "",
  843. "ProxyIP": "198.217.251.250",
  844. "ProxyPort": "80",
  845. "Info": "Proxy"
  846. },
  847. {
  848. "Name": "TLS | CDN | 01",
  849. "FLAG": "tim",
  850. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  851. "SNI": "lojaonline.tim.com.br",
  852. "TlsIP": "lojaonline.tim.com.br",
  853. "ProxyIP": "",
  854. "ProxyPort": "443",
  855. "Info": "Tlsws"
  856. },
  857. {
  858. "Name": "TLS | CDN | 02",
  859. "FLAG": "tim",
  860. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  861. "SNI": "builder.lift.acquia.com",
  862. "TlsIP": "builder.lift.acquia.com",
  863. "ProxyIP": "",
  864. "ProxyPort": "443",
  865. "Info": "Tlsws"
  866. },
  867. {
  868. "Name": "TLS | CDN | 03",
  869. "FLAG": "tim",
  870. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  871. "SNI": "cdn-prod.securiti.ai",
  872. "TlsIP": "cdn-prod.securiti.ai",
  873. "ProxyIP": "",
  874. "ProxyPort": "443",
  875. "Info": "Tlsws"
  876. },
  877. {
  878. "Name": "TLS | CDN | 04",
  879. "FLAG": "tim",
  880. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  881. "SNI": "ogp.me",
  882. "TlsIP": "ogp.me",
  883. "ProxyIP": "",
  884. "ProxyPort": "443",
  885. "Info": "Tlsws"
  886. },
  887. {
  888. "Name": "TLS | CDN | 05",
  889. "FLAG": "tim",
  890. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  891. "SNI": "assine.pos.tim.com.br",
  892. "TlsIP": "assine.pos.tim.com.br",
  893. "ProxyIP": "",
  894. "ProxyPort": "443",
  895. "Info": "Tlsws"
  896. },
  897. {
  898. "Name": "TLS | CDN | 06",
  899. "FLAG": "tim",
  900. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  901. "SNI": "cdn2.webdamdb.com",
  902. "TlsIP": "cdn2.webdamdb.com",
  903. "ProxyIP": "",
  904. "ProxyPort": "443",
  905. "Info": "Tlsws"
  906. },
  907. {
  908. "Name": "TLS | CDN | 07",
  909. "FLAG": "tim",
  910. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  911. "SNI": "pos.tim.com.br",
  912. "TlsIP": "pos.tim.com.br",
  913. "ProxyIP": "",
  914. "ProxyPort": "443",
  915. "Info": "Tlsws"
  916. },
  917. {
  918. "Name": "TLS | CDN | 08",
  919. "FLAG": "tim",
  920. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  921. "SNI": "",
  922. "TlsIP": "",
  923. "ProxyIP": "99.84.252.128",
  924. "ProxyPort": "80",
  925. "Info": "Proxy"
  926. },
  927. {
  928. "Name": "PROXY | CDN | 01",
  929. "FLAG": "tim",
  930. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  931. "SNI": "",
  932. "TlsIP": "",
  933. "ProxyIP": "seuipdavps",
  934. "ProxyPort": "80",
  935. "Info": "Proxy"
  936. },
  937. {
  938. "Name": "PROXY | CDN | 02",
  939. "FLAG": "tim",
  940. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  941. "SNI": "",
  942. "TlsIP": "",
  943. "ProxyIP": "pos.tim.com.br",
  944. "ProxyPort": "80",
  945. "Info": "Proxy"
  946. },
  947. {
  948. "Name": "PROXY | CDN | 03",
  949. "FLAG": "tim",
  950. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  951. "SNI": "",
  952. "TlsIP": "",
  953. "ProxyIP": "assine.pos.tim.com.br",
  954. "ProxyPort": "80",
  955. "Info": "Proxy"
  956. },
  957. {
  958. "Name": "PROXY | CDN | 04",
  959. "FLAG": "tim",
  960. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  961. "SNI": "",
  962. "TlsIP": "",
  963. "ProxyIP": "99.84.252.105",
  964. "ProxyPort": "80",
  965. "Info": "Proxy"
  966. },
  967. {
  968. "Name": "PROXY | CDN | 05",
  969. "FLAG": "tim",
  970. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  971. "SNI": "",
  972. "TlsIP": "",
  973. "ProxyIP": "18.64.174.27",
  974. "ProxyPort": "80",
  975. "Info": "Proxy"
  976. },
  977. {
  978. "Name": "PROXY | CDN | 05",
  979. "FLAG": "tim",
  980. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  981. "SNI": "",
  982. "TlsIP": "",
  983. "ProxyIP": "65.8.248.59",
  984. "ProxyPort": "80",
  985. "Info": "Proxy"
  986. },
  987. {
  988. "Name": "PROXY | CDN | 06",
  989. "FLAG": "tim",
  990. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  991. "SNI": "",
  992. "TlsIP": "",
  993. "ProxyIP": "13.226.52.28",
  994. "ProxyPort": "80",
  995. "Info": "Proxy"
  996. },
  997. {
  998. "Name": "PROXY | CDN | 07",
  999. "FLAG": "tim",
  1000. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1001. "SNI": "",
  1002. "TlsIP": "",
  1003. "ProxyIP": "8.64.174.115",
  1004. "ProxyPort": "80",
  1005. "Info": "Proxy"
  1006. },
  1007. {
  1008. "Name": "PROXY | CDN | 08",
  1009. "FLAG": "tim",
  1010. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1011. "SNI": "",
  1012. "TlsIP": "",
  1013. "ProxyIP": "18.64.174.27",
  1014. "ProxyPort": "80",
  1015. "Info": "Proxy"
  1016. },
  1017. {
  1018. "Name": "PROXY | CDN | 09",
  1019. "FLAG": "tim",
  1020. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1021. "SNI": "",
  1022. "TlsIP": "",
  1023. "ProxyIP": "18.155.181.48",
  1024. "ProxyPort": "80",
  1025. "Info": "Proxy"
  1026. },
  1027. {
  1028. "Name": "PROXY | CDN | 10",
  1029. "FLAG": "tim",
  1030. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1031. "SNI": "",
  1032. "TlsIP": "",
  1033. "ProxyIP": "108.138.94.106",
  1034. "ProxyPort": "80",
  1035. "Info": "Proxy"
  1036. },
  1037. {
  1038. "Name": "PROXY | CDN | 11",
  1039. "FLAG": "tim",
  1040. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1041. "SNI": "",
  1042. "TlsIP": "",
  1043. "ProxyIP": "13.35.125.64",
  1044. "ProxyPort": "80",
  1045. "Info": "Proxy"
  1046. },
  1047. {
  1048. "Name": "PROXY | CDN | 12",
  1049. "FLAG": "tim",
  1050. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1051. "SNI": "",
  1052. "TlsIP": "",
  1053. "ProxyIP": "108.158.124.45",
  1054. "ProxyPort": "80",
  1055. "Info": "Proxy"
  1056. },
  1057. {
  1058. "Name": "PROXY | CDN | 13",
  1059. "FLAG": "tim",
  1060. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1061. "SNI": "",
  1062. "TlsIP": "",
  1063. "ProxyIP": "108.139.91.220",
  1064. "ProxyPort": "80",
  1065. "Info": "Proxy"
  1066. },
  1067. {
  1068. "Name": "PROXY | CDN | 14",
  1069. "FLAG": "tim",
  1070. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1071. "SNI": "",
  1072. "TlsIP": "",
  1073. "ProxyIP": "13.227.99.93",
  1074. "ProxyPort": "80",
  1075. "Info": "Proxy"
  1076. },
  1077. {
  1078. "Name": "TIM | CLOUDFIRE | 00",
  1079. "FLAG": "tim",
  1080. "Payload": "GET wss://support.deezer.com HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1081. "SNI": "support.deezer.com",
  1082. "TlsIP": "support.deezer.com",
  1083. "ProxyIP": "",
  1084. "ProxyPort": "443",
  1085. "Info": "Tlsws"
  1086. },
  1087. {
  1088. "Name": "TLS | CLOUDFIRE | 01",
  1089. "FLAG": "tim",
  1090. "Payload": "GET wss://www.alura.com.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1091. "SNI": "www.alura.com.br",
  1092. "TlsIP": "172.67.188.168",
  1093. "ProxyIP": "",
  1094. "ProxyPort": "443",
  1095. "Info": "Tlsws"
  1096. },
  1097. {
  1098. "Name": "TLS | CLOUDFIRE | 02",
  1099. "FLAG": "tim",
  1100. "Payload": "GET wss://api-tim.oston.io/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1101. "SNI": "api-tim.oston.io",
  1102. "TlsIP": "104.21.58.67",
  1103. "ProxyIP": "",
  1104. "ProxyPort": "443",
  1105. "Info": "Tlsws"
  1106. },
  1107. {
  1108. "Name": "TLS | CLOUDFIRE | 03",
  1109. "FLAG": "tim",
  1110. "Payload": "GET wss://blog.alura.com.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1111. "SNI": "blog.alura.com.br",
  1112. "TlsIP": "172.67.188.168",
  1113. "ProxyIP": "",
  1114. "ProxyPort": "443",
  1115. "Info": "Tlsws"
  1116. },
  1117. {
  1118. "Name": "TLS | CLOUDFIRE | 04",
  1119. "FLAG": "tim",
  1120. "Payload": "GET wss://bam.nr-data.net/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: mentalista[crlf][crlf]",
  1121. "SNI": "bam.nr-data.net",
  1122. "TlsIP": "bam.nr-data.net",
  1123. "ProxyIP": "bam.nr-data.net",
  1124. "ProxyPort": "443",
  1125. "Info": "Tlsws"
  1126. },
  1127. {
  1128. "Name": "TLS | CLOUDFIRE | 05",
  1129. "FLAG": "tim",
  1130. "Payload": "GET wss://cdn.c6bank.com.br/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1131. "SNI": "cdn.c6bank.com.br",
  1132. "TlsIP": "104.16.236.16",
  1133. "ProxyIP": "",
  1134. "ProxyPort": "443",
  1135. "Info": "Tlsws"
  1136. },
  1137. {
  1138. "Name": "TLS | CLOUDFIRE | 06",
  1139. "FLAG": "tim",
  1140. "Payload": "GET wss://cdn.c6bank.com.br// HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  1141. "SNI": "cdn.c6bank.com.br",
  1142. "TlsIP": "cdn.c6bank.com.br",
  1143. "ProxyIP": "",
  1144. "ProxyPort": "443",
  1145. "Info": "Tlsws"
  1146. },
  1147. {
  1148. "Name": "TLS | CLOUDFIRE | 07",
  1149. "FLAG": "tim",
  1150. "Payload": "GET wss://auth.of.c6bank.com.br// HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  1151. "SNI": "auth.of.c6bank.com.br",
  1152. "TlsIP": "172.64.144.237",
  1153. "ProxyIP": "",
  1154. "ProxyPort": "443",
  1155. "Info": "Tlsws"
  1156. },
  1157. {
  1158. "Name": "TLS | CLOUDFIRE | 08",
  1159. "FLAG": "tim",
  1160. "Payload": "GET wss://assets-sf.c6bank.com.br// HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  1161. "SNI": "assets-sf.c6bank.com.br",
  1162. "TlsIP": "104.16.237.16",
  1163. "ProxyIP": "",
  1164. "ProxyPort": "443",
  1165. "Info": "Tlsws"
  1166. },
  1167. {
  1168. "Name": "TLS | CLOUDFIRE | 09",
  1169. "FLAG": "tim",
  1170. "Payload": "GET wss://image.mail.c6bank.com.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1171. "SNI": "image.mail.c6bank.com.br",
  1172. "TlsIP": "image.mail.c6bank.com.br",
  1173. "ProxyIP": "",
  1174. "ProxyPort": "443",
  1175. "Info": "Tlsws"
  1176. },
  1177. {
  1178. "Name": "TLS | CLOUDFIRE | 10",
  1179. "FLAG": "tim",
  1180. "Payload": "GET wss://image.mail.c6bank.com.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1181. "SNI": "cdn.jsdelivr.net",
  1182. "TlsIP": "cdn.jsdelivr.net",
  1183. "ProxyIP": "",
  1184. "ProxyPort": "443",
  1185. "Info": "Tlsws"
  1186. },
  1187. {
  1188. "Name": "TLS | CLOUDFIRE | 11",
  1189. "FLAG": "tim",
  1190. "Payload": "GET wss://assets-sf.c6bank.com.br// HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  1191. "SNI": "assets-sf.c6bank.com.br",
  1192. "TlsIP": "104.16.237.16",
  1193. "ProxyIP": "",
  1194. "ProxyPort": "443",
  1195. "Info": "Tlsws"
  1196. },
  1197. {
  1198. "Name": "TLS | CLOUDFIRE | 12",
  1199. "FLAG": "tim",
  1200. "Payload": "GET wss://ajuda.c6bank.com.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: WebSocket[crlf][crlf]",
  1201. "SNI": "ajuda.c6bank.com.br",
  1202. "TlsIP": "ajuda.c6bank.com.br",
  1203. "ProxyIP": "",
  1204. "ProxyPort": "443",
  1205. "Info": "Tlsws"
  1206. },
  1207. {
  1208. "Name": "TLS | CLOUDFIRE | 13",
  1209. "FLAG": "tim",
  1210. "Payload": "GET wss://support.deezer.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1211. "SNI": "support.deezer.com",
  1212. "TlsIP": "support.deezer.com",
  1213. "ProxyIP": "",
  1214. "ProxyPort": "443",
  1215. "Info": "Tlsws"
  1216. },
  1217. {
  1218. "Name": "TLS | CLOUDFIRE | 14",
  1219. "FLAG": "tim",
  1220. "Payload": "GET wss://duvidas.ampli.com.br/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]Connection: Keep-Alive[crlf][crlf]",
  1221. "SNI": "duvidas.ampli.com.br",
  1222. "TlsIP": "104.16.53.111",
  1223. "ProxyIP": "",
  1224. "ProxyPort": "443",
  1225. "Info": "Tlsws"
  1226. },
  1227. {
  1228. "Name": "TLS | CLOUDFIRE | 15",
  1229. "FLAG": "tim",
  1230. "Payload": "GET wss://auth-uat-us.surveymonkey.com HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1231. "SNI": "auth-uat-us.surveymonkey.com",
  1232. "TlsIP": "104.18.7.22",
  1233. "ProxyIP": "",
  1234. "ProxyPort": "443",
  1235. "Info": "Tlsws"
  1236. },
  1237. {
  1238. "Name": "TLS | CLOUDFIRE | 16",
  1239. "FLAG": "tim",
  1240. "Payload": "GET wss://workplaceservices.surveymonkey.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  1241. "SNI": "workplaceservices.surveymonkey.com",
  1242. "TlsIP": "104.16.53.111",
  1243. "ProxyIP": "",
  1244. "ProxyPort": "443",
  1245. "Info": "Tlsws"
  1246. },
  1247. {
  1248. "Name": "TLS | CLOUDFIRE | 17",
  1249. "FLAG": "tim",
  1250. "Payload": "GET wss://workplaceservices.surveymonkey.com HTTP/1.1[crlf]Host: seudominio[crlf]Origin: https://www.google.com, http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: WebSocket[crlf]Connection: Keep-Alive, Upgrade[crlf][crlf]",
  1251. "SNI": "workplaceservices.surveymonkey.com",
  1252. "TlsIP": "104.16.51.111",
  1253. "ProxyIP": "",
  1254. "ProxyPort": "443",
  1255. "Info": "Tlsws"
  1256. },
  1257. {
  1258. "Name": "TLS | CLOUDFIRE | 18",
  1259. "FLAG": "tim",
  1260. "Payload": "PROPPATCH wss://auth-uat-us.surveymonkey.com/ HTTP/1.200 [lf]Host: br2.danilobr.tk[lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  1261. "SNI": "auth-uat-us.surveymonkey.com",
  1262. "TlsIP": "104.18.7.22",
  1263. "ProxyIP": "",
  1264. "ProxyPort": "443",
  1265. "Info": "Tlsws"
  1266. },
  1267. {
  1268. "Name": "TLS | CLOUDFIRE | 35",
  1269. "FLAG": "tim",
  1270. "Payload": "GET wss://ecommercebrasil.alura.com.br/ HTTP/1.1[lf]Host: br2.danilobr.tk[lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  1271. "SNI": "ecommercebrasil.alura.com.br",
  1272. "TlsIP": "104.21.84.78",
  1273. "ProxyIP": "",
  1274. "ProxyPort": "443",
  1275. "Info": "Tlsws"
  1276. },
  1277. {
  1278. "Name": "TLS | CLOUDFIRE | 36",
  1279. "FLAG": "tim",
  1280. "Payload": "GET wss://www.alura.com.br/ HTTP/1.1[lf]Host: br2.danilobr.tk[lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  1281. "SNI": "www.alura.com.br",
  1282. "TlsIP": "104.18.40.41",
  1283. "ProxyIP": "",
  1284. "ProxyPort": "443",
  1285. "Info": "Tlsws"
  1286. },
  1287. {
  1288. "Name": "TLS | CLOUDFIRE | 37",
  1289. "FLAG": "tim",
  1290. "Payload": "GET wss://bam.nr-data.net/ HTTP/1.1[lf]Host: br2.danilobr.tk[lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  1291. "SNI": "bam.nr-data.net",
  1292. "TlsIP": "162.247.241.14",
  1293. "ProxyIP": "",
  1294. "ProxyPort": "443",
  1295. "Info": "Tlsws"
  1296. },
  1297. {
  1298. "Name": "TLS | CLOUDFIRE | 38",
  1299. "FLAG": "tim",
  1300. "Payload": "GET wss://static.r4you.co HTTP/1.1nHost: br2.danilobr.tk[lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  1301. "SNI": "static.r4you.co",
  1302. "TlsIP": "104.26.5.175",
  1303. "ProxyIP": "",
  1304. "ProxyPort": "",
  1305. "Info": "Tlsws"
  1306. },
  1307. {
  1308. "Name": "TIM FAST 01",
  1309. "FLAG": "tim",
  1310. "Payload": "GET wss://api.onesignal.com HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1311. "SNI": "api.onesignal.com",
  1312. "TlsIP": "api.onesignal.com",
  1313. "ProxyIP": "",
  1314. "ProxyPort": "",
  1315. "Info": "Tlsws"
  1316. },
  1317. {
  1318. "Name": "TIM FAST 02",
  1319. "FLAG": "tim",
  1320. "Payload": "GET wss://mobile.c6bank.app HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1321. "SNI": "mobile.c6bank.app",
  1322. "TlsIP": "mobile.c6bank.app",
  1323. "ProxyIP": "",
  1324. "ProxyPort": "",
  1325. "Info": "Tlsws"
  1326. },
  1327. {
  1328. "Name": "DIRECT | 01",
  1329. "FLAG": "tim",
  1330. "Payload": "HTTP/ [crlf][crlf]|[crlf]]]",
  1331. "SNI": "",
  1332. "TlsIP": "",
  1333. "ProxyIP": "br2.danilobr.tk",
  1334. "ProxyPort": "80",
  1335. "Info": "Direct"
  1336. },
  1337. {
  1338. "Name": "DIRECT | 02",
  1339. "FLAG": "tim",
  1340. "Payload": "GET wss://mobile.c6bank.app/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1341. "SNI": "",
  1342. "TlsIP": "",
  1343. "ProxyIP": "mobile.c6bank.app",
  1344. "ProxyPort": "80",
  1345. "Info": "Direct"
  1346. },
  1347. {
  1348. "Name": "DIRECT | 03",
  1349. "FLAG": "tim",
  1350. "Payload": "GET wss://api.onesignal.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1351. "SNI": "",
  1352. "TlsIP": "",
  1353. "ProxyIP": "api.onesignal.com",
  1354. "ProxyPort": "80",
  1355. "Info": "Direct"
  1356. },
  1357. {
  1358. "Name": "PROXY| CLOUDFIRE | 00",
  1359. "FLAG": "tim",
  1360. "Payload": "MERGE indexer10.sjc.northshore.akamai.com HTTP/2.0[crlf]Host: r03.spine101.lax01.fab.netarch.akamai.com [crlf]Connection: upgrade, Keep-Alive-Status 101[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)@mateuscmf[crlf]Referer: http://www.google.com[crlf]",
  1361. "SNI": "",
  1362. "TlsIP": "",
  1363. "ProxyIP": "br2.danilobr.tk",
  1364. "ProxyPort": "80",
  1365. "Info": "Proxy"
  1366. },
  1367. {
  1368. "Name": "TLS | DIRECT | 01",
  1369. "FLAG": "claro",
  1370. "Payload": "POST HTTP/1.1[crlf]Host:www.waze.com[crlf][crlf]",
  1371. "SNI": "",
  1372. "TlsIP": "",
  1373. "ProxyIP": "",
  1374. "ProxyPort": "80",
  1375. "Info": "Proxy"
  1376. },
  1377. {
  1378. "Name": "TLS | CDN | 01",
  1379. "FLAG": "claro",
  1380. "Payload": "GET / HTTP/1.1[crlf]Host: suafront[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1381. "SNI": "d1ekrxlws13em5.cloudfront.net",
  1382. "TlsIP": "d1ekrxlws13em5.cloudfront.net",
  1383. "ProxyIP": "",
  1384. "ProxyPort": "443",
  1385. "Info": "Tlsws"
  1386. },
  1387. {
  1388. "Name": "TLS | CDN | 02",
  1389. "FLAG": "claro",
  1390. "Payload": "GET / HTTP/1.1[crlf]Host: suafront[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1391. "SNI": "d2lw319xdy6x9h.cloudfront.net",
  1392. "TlsIP": "d2lw319xdy6x9h.cloudfront.net",
  1393. "ProxyIP": "",
  1394. "ProxyPort": "443",
  1395. "Info": "Tlsws"
  1396. },
  1397. {
  1398. "Name": "TLS | CDN | 03",
  1399. "FLAG": "claro",
  1400. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1401. "SNI": "webportal.nowonlinecloud.clarobrasil.mobi",
  1402. "TlsIP": "webportal.nowonlinecloud.clarobrasil.mobi",
  1403. "ProxyIP": "",
  1404. "ProxyPort": "443",
  1405. "Info": "Tlsws"
  1406. },
  1407. {
  1408. "Name": "PROXY | CDN | 01",
  1409. "FLAG": "claro",
  1410. "Payload": "GET wss://d2ht11k6416ng9.cloudfront.net/ HTTP/1.1[crlf]Host: descomplica.com.br[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1411. "SNI": "",
  1412. "TlsIP": "",
  1413. "ProxyIP": "descomplica.com.br",
  1414. "ProxyPort": "80",
  1415. "Info": "Proxy"
  1416. },
  1417. {
  1418. "Name": "PROXY | CDN | 02",
  1419. "FLAG": "claro",
  1420. "Payload": "GET wss://d2ht11k6416ng9.cloudfront.net HTTP/1.1[crlf]Host: planos3-assine-empresas.clarobrasil.mobi[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1421. "SNI": "",
  1422. "TlsIP": "",
  1423. "ProxyIP": "planos3-assine-empresas.clarobrasil.mobi",
  1424. "ProxyPort": "80",
  1425. "Info": "Proxy"
  1426. },
  1427. {
  1428. "Name": "PROXY | CDN | 03",
  1429. "FLAG": "claro",
  1430. "Payload": "GET wss://d2ht11k6416ng9.cloudfront.net/ HTTP/1.1[crlf]Host: metadatadb.lab.smartcontent.clarobrasil.mobi[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  1431. "SNI": "",
  1432. "TlsIP": "",
  1433. "ProxyIP": "metadatadb.lab.smartcontent.clarobrasil.mobi",
  1434. "ProxyPort": "80",
  1435. "Info": "Proxy"
  1436. },
  1437. {
  1438. "Name": "TLS | CLOUDFIRE | 00",
  1439. "FLAG": "claro",
  1440. "Payload": "GET wss://Atendimento.descomplica.com.br/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection: upgrade[crlf]Upgrade: Websocket[crlf]Upgrade: DarkEnilson[crlf][crlf]",
  1441. "SNI": "Atendimento.descomplica.com.br",
  1442. "TlsIP": "Atendimento.descomplica.com.br",
  1443. "ProxyIP": "",
  1444. "ProxyPort": "443",
  1445. "Info": "Tlsws"
  1446. },
  1447. {
  1448. "Name": "TLS | CLOUDFIRE | 01",
  1449. "FLAG": "claro",
  1450. "Payload": "GET wss://player-api.new.livestream.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1451. "SNI": "player-api.new.livestream.com",
  1452. "TlsIP": "player-api.new.livestream.com",
  1453. "ProxyIP": "",
  1454. "ProxyPort": "443",
  1455. "Info": "Tlsws"
  1456. },
  1457. {
  1458. "Name": "TLS | CLOUDFIRE | 02",
  1459. "FLAG": "claro",
  1460. "Payload": "GET wss://go.launchdarkly.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1461. "SNI": "go.launchdarkly.com",
  1462. "TlsIP": "go.launchdarkly.com",
  1463. "ProxyIP": "",
  1464. "ProxyPort": "443",
  1465. "Info": "Tlsws"
  1466. },
  1467. {
  1468. "Name": "TLS | CLOUDFIRE | 03",
  1469. "FLAG": "claro",
  1470. "Payload": "GET wss://go.launchdarkly.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1471. "SNI": "go.launchdarkly.com",
  1472. "TlsIP": "104.17.72.206",
  1473. "ProxyIP": "",
  1474. "ProxyPort": "443",
  1475. "Info": "Tlsws"
  1476. },
  1477. {
  1478. "Name": "TLS | CLOUDFIRE | 04",
  1479. "FLAG": "claro",
  1480. "Payload": "GET wss://em.launchdarkly.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1481. "SNI": "em.launchdarkly.com",
  1482. "TlsIP": "em.launchdarkly.com",
  1483. "ProxyIP": "",
  1484. "ProxyPort": "443",
  1485. "Info": "Tlsws"
  1486. },
  1487. {
  1488. "Name": "TLS | CLOUDFIRE | 05",
  1489. "FLAG": "claro",
  1490. "Payload": "GET wss://em.launchdarkly.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1491. "SNI": "em.launchdarkly.com",
  1492. "TlsIP": "em.launchdarkly.com",
  1493. "ProxyIP": "",
  1494. "ProxyPort": "443",
  1495. "Info": "Tlsws"
  1496. },
  1497. {
  1498. "Name": "TLS | CLOUDFIRE | 06",
  1499. "FLAG": "claro",
  1500. "Payload": "GET wss://cdnjs.cloudfire.com/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1501. "SNI": "cdnjs.cloudfire.com",
  1502. "TlsIP": "104.21.53.129",
  1503. "ProxyIP": "",
  1504. "ProxyPort": "443",
  1505. "Info": "Tlsws"
  1506. },
  1507. {
  1508. "Name": "PROXY | CLOUDFIRE | 01",
  1509. "FLAG": "claro",
  1510. "Payload": "GET http://www.claro.com.br HTTP/1.0[crlf]Host: http://www.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  1511. "SNI": "",
  1512. "TlsIP": "",
  1513. "ProxyIP": "209.14.69.74",
  1514. "ProxyPort": "80",
  1515. "Info": "Proxy"
  1516. },
  1517. {
  1518. "Name": "PROXY | CLOUDFIRE | 02",
  1519. "FLAG": "claro",
  1520. "Payload": "GET http://bonuz.claro.com.br HTTP/1.0[crlf]Host: http://contaonline2.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  1521. "SNI": "",
  1522. "TlsIP": "",
  1523. "ProxyIP": "209.14.69.74",
  1524. "ProxyPort": "80",
  1525. "Info": "Proxy"
  1526. },
  1527. {
  1528. "Name": "PROXY | CDN | 00",
  1529. "FLAG": "oi",
  1530. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1531. "SNI": "",
  1532. "TlsIP": "",
  1533. "ProxyIP": "hbomax.onelink.me",
  1534. "ProxyPort": "80",
  1535. "Info": "Proxy"
  1536. },
  1537. {
  1538. "Name": "PROXY | CDN | 01",
  1539. "FLAG": "oi",
  1540. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  1541. "SNI": "",
  1542. "TlsIP": "",
  1543. "ProxyIP": "play.hbomax.com",
  1544. "ProxyPort": "80",
  1545. "Info": "Proxy"
  1546. },
  1547. {
  1548. "Name": "PROXY | 01",
  1549. "FLAG": "oi",
  1550. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1551. "SNI": "",
  1552. "TlsIP": "",
  1553. "ProxyIP": "104.16.56.6",
  1554. "ProxyPort": "80",
  1555. "Info": "Proxy"
  1556. },
  1557. {
  1558. "Name": "PROXY | 02",
  1559. "FLAG": "oi",
  1560. "Payload": "GET wss://mobilidade.cloud.caixa.gov.br [protocol][crlf]Host: br2.danilobr.tk[crlf]X-Forwarded-For: seudominio[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  1561. "SNI": "",
  1562. "TlsIP": "",
  1563. "ProxyIP": "104.16.56.6",
  1564. "ProxyPort": "80",
  1565. "Info": "Proxy"
  1566. },
  1567. {
  1568. "Name": "PROXY | 03",
  1569. "FLAG": "oi",
  1570. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1571. "SNI": "",
  1572. "TlsIP": "",
  1573. "ProxyIP": "104.16.51.111",
  1574. "ProxyPort": "80",
  1575. "Info": "Proxy"
  1576. },
  1577. {
  1578. "Name": "PROXY | 04",
  1579. "FLAG": "oi",
  1580. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1581. "SNI": "",
  1582. "TlsIP": "",
  1583. "ProxyIP": "104.22.54.181",
  1584. "ProxyPort": "80",
  1585. "Info": "Proxy"
  1586. },
  1587. {
  1588. "Name": "PROXY | 05",
  1589. "FLAG": "oi",
  1590. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1591. "SNI": "",
  1592. "TlsIP": "",
  1593. "ProxyIP": "104.22.55.181",
  1594. "ProxyPort": "80",
  1595. "Info": "Proxy"
  1596. },
  1597. {
  1598. "Name": "PROXY | 06",
  1599. "FLAG": "oi",
  1600. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1601. "SNI": "",
  1602. "TlsIP": "",
  1603. "ProxyIP": "104.21.28.210",
  1604. "ProxyPort": "80",
  1605. "Info": "Proxy"
  1606. },
  1607. {
  1608. "Name": "PROXY | 07",
  1609. "FLAG": "oi",
  1610. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1611. "SNI": "",
  1612. "TlsIP": "",
  1613. "ProxyIP": "104.22.54.91",
  1614. "ProxyPort": "80",
  1615. "Info": "Proxy"
  1616. },
  1617. {
  1618. "Name": "PROXY | 08",
  1619. "FLAG": "oi",
  1620. "Payload": "GET /? HTTP/1.1 [crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1621. "SNI": "",
  1622. "TlsIP": "",
  1623. "ProxyIP": "104.22.55.91",
  1624. "ProxyPort": "80",
  1625. "Info": "Proxy"
  1626. },
  1627. {
  1628. "Name": "PROXY | 09",
  1629. "FLAG": "oi",
  1630. "Payload": "GET / HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1631. "SNI": "",
  1632. "TlsIP": "",
  1633. "ProxyIP": "104.16.53.91",
  1634. "ProxyPort": "80",
  1635. "Info": "Proxy"
  1636. },
  1637. {
  1638. "Name": "TLS | 01",
  1639. "FLAG": "oi",
  1640. "Payload": "GET ssl://mobilidade.cloud.caixa.gov.br HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Connection[crlf]Upgrade: websocket[crlf]Upgrade: WebSocket[crlf][crlf]Connection: Upgrade[crlf]",
  1641. "SNI": "mobilidade.cloud.caixa.gov.br",
  1642. "TlsIP": "mobilidade.cloud.caixa.gov.br",
  1643. "ProxyIP": "",
  1644. "ProxyPort": "443",
  1645. "Info": "Tlsws"
  1646. },
  1647. {
  1648. "Name": "TLS | 02",
  1649. "FLAG": "oi",
  1650. "Payload": "GET wss://www.hbogo.com.br/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1651. "SNI": "www.hbogo.com.br",
  1652. "TlsIP": "www.hbogo.com.br",
  1653. "ProxyIP": "",
  1654. "ProxyPort": "443",
  1655. "Info": "Tlsws"
  1656. },
  1657. {
  1658. "Name": "TLS | 03",
  1659. "FLAG": "oi",
  1660. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1nHost: br2.danilobr.tk[crlf]Upgrade: ws[crlf][crlf]",
  1661. "SNI": "www.hbogo.com.br",
  1662. "TlsIP": "104.16.53.91",
  1663. "ProxyIP": "",
  1664. "ProxyPort": "443",
  1665. "Info": "Tlsws"
  1666. },
  1667. {
  1668. "Name": "TLS | 04",
  1669. "FLAG": "oi",
  1670. "Payload": "GET wss://bam.nr-data.net/ HTTP/1.1[crlf]Host: br2.danilobr.tk[crlf]Upgrade: websocket[crlf][crlf]",
  1671. "SNI": "bam.nr-data.net",
  1672. "TlsIP": "bam.nr-data.net",
  1673. "ProxyIP": "",
  1674. "ProxyPort": "443",
  1675. "Info": "Tlsws"
  1676. },
  1677. {
  1678. "Name":"? VIVO TLS 01 ??",
  1679. "FLAG":"vivo",
  1680. "Payload":"TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1681. "SNI":"[app_host]",
  1682. "TlsIP":"104.16.51.111",
  1683. "ProxyIP":"",
  1684. "ProxyPort":"443",
  1685. "Info":"Tlsws"
  1686. },
  1687. {
  1688. "Name":"? VIVO TLS 02 ??",
  1689. "FLAG":"vivo",
  1690. "Payload":"TRUE-CONTROL / [protocol][crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  1691. "SNI":"[app_host]",
  1692. "TlsIP":"104.16.53.111",
  1693. "ProxyIP":"",
  1694. "ProxyPort":"443",
  1695. "Info":"Tlsws"
  1696. },
  1697. {
  1698. "Name": "? VIVO PROXY 01 ??",
  1699. "FLAG": "vivo",
  1700. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1701. "SNI": "",
  1702. "TlsIP": "",
  1703. "ProxyIP": "104.16.51.111",
  1704. "ProxyPort": "80",
  1705. "Info": "Proxy"
  1706. },
  1707. {
  1708. "Name": "? VIVO PROXY 02 ??",
  1709. "FLAG": "vivo",
  1710. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1711. "SNI": "",
  1712. "TlsIP": "",
  1713. "ProxyIP": "104.16.53.111",
  1714. "ProxyPort": "80",
  1715. "Info": "Proxy"
  1716. },
  1717. {
  1718. "Name": "? VIVO PROXY 03 ??",
  1719. "FLAG": "vivo",
  1720. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1721. "SNI": "",
  1722. "TlsIP": "",
  1723. "ProxyIP": "104.18.7.80",
  1724. "ProxyPort": "80",
  1725. "Info": "Proxy"
  1726. },
  1727. {
  1728. "Name": "? VIVO PROXY 04 ??",
  1729. "FLAG": "vivo",
  1730. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1731. "SNI": "",
  1732. "TlsIP": "",
  1733. "ProxyIP": "172.64.144.109",
  1734. "ProxyPort": "80",
  1735. "Info": "Proxy"
  1736. },
  1737. {
  1738. "Name": "? VIVO PROXY 05 ??",
  1739. "FLAG": "vivo",
  1740. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1741. "SNI": "",
  1742. "TlsIP": "",
  1743. "ProxyIP": "104.18.7.41",
  1744. "ProxyPort": "80",
  1745. "Info": "Proxy"
  1746. },
  1747. {
  1748. "Name": "VIVO FRONT 1 TODOS DDD'S",
  1749. "FLAG": "vivo",
  1750. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  1751. "SNI": "",
  1752. "TlsIP": "13.227.126.42",
  1753. "ProxyIP": "13.227.126.42",
  1754. "ProxyPort": "80",
  1755. "Info": "Proxy"
  1756. },
  1757. {
  1758. "Name": "??VIVO FRONT 2 TODOS DDD'S",
  1759. "FLAG": "vivo",
  1760. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  1761. "SNI": "",
  1762. "TlsIP": "13.227.126.60",
  1763. "ProxyIP": "13.227.126.60",
  1764. "ProxyPort": "80",
  1765. "Info": "Proxy"
  1766. },
  1767. {
  1768. "Name": "??VIVO FRONT 3 TODOS DDD'S",
  1769. "FLAG": "vivo",
  1770. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  1771. "SNI": "",
  1772. "TlsIP": "13.227.126.74",
  1773. "ProxyIP": "13.227.126.74",
  1774. "ProxyPort": "80",
  1775. "Info": "Proxy"
  1776. },
  1777. {
  1778. "Name": "??VIVO FRONT 4 TODOS DDD'S",
  1779. "FLAG": "vivo",
  1780. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  1781. "SNI": "",
  1782. "TlsIP": "13.227.126.90",
  1783. "ProxyIP": "13.227.126.90",
  1784. "ProxyPort": "80",
  1785. "Info": "Proxy"
  1786. },
  1787. {
  1788. "Name": "??VIVO FRONT 5 TODOS DDD'S",
  1789. "FLAG": "vivo",
  1790. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  1791. "SNI": "",
  1792. "TlsIP": "13.227.126.94",
  1793. "ProxyIP": "13.227.126.94",
  1794. "ProxyPort": "80",
  1795. "Info": "Proxy"
  1796. },
  1797. {
  1798. "Name": "??VIVO FRONT 6 TODOS DDD'S",
  1799. "FLAG": "vivo",
  1800. "Payload": "GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]",
  1801. "SNI": "",
  1802. "TlsIP": "13.227.126.94",
  1803. "ProxyIP": "13.227.126.94",
  1804. "ProxyPort": "80",
  1805. "Info": "Proxy"
  1806. },
  1807. {
  1808. "Name": "? TIM PROXY 01 ??",
  1809. "FLAG": "tim",
  1810. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  1811. "SNI": "209.14.69.74",
  1812. "TlsIP": "209.14.69.74",
  1813. "ProxyIP": "209.14.69.74",
  1814. "ProxyPort": "80",
  1815. "Info": "Proxy"
  1816. },
  1817. {
  1818. "Name": "? TIM PROXY 02 ??",
  1819. "FLAG": "tim",
  1820. "Payload": "HTTP/1.1[crlf] [crlf][crlf]?",
  1821. "SNI": "",
  1822. "TlsIP": "",
  1823. "ProxyIP": "209.14.69.74",
  1824. "ProxyPort": "80",
  1825. "Info": "Proxy"
  1826. },
  1827. {
  1828. "Name": "? TIM PROXY 03 ??",
  1829. "FLAG": "tim",
  1830. "Payload": "BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: saas.c6bank.app[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1831. "SNI": "saas.c6bank.app",
  1832. "TlsIP": "104.19.240.25",
  1833. "ProxyIP": "104.19.240.25",
  1834. "ProxyPort": "80",
  1835. "Info": "Proxy"
  1836. },
  1837. {
  1838. "Name": "? TIM PROXY 04 ??",
  1839. "FLAG": "tim",
  1840. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  1841. "SNI": "",
  1842. "TlsIP": "",
  1843. "ProxyIP": "104.16.51.111",
  1844. "ProxyPort": "80",
  1845. "Info": "Proxy"
  1846. },
  1847. {
  1848. "Name": "? TIM PROXY 05 ??",
  1849. "FLAG": "tim",
  1850. "Payload": "BASELINE-CONTROL wss://[app_host] HTTP/1.1[crlf]Host: pre-onboarding-p.c6bank.app[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
  1851. "SNI": "pre-onboarding-p.c6bank.app",
  1852. "TlsIP": "pre-onboarding-p.c6bank.app",
  1853. "ProxyIP": "pre-onboarding-p.c6bank.app",
  1854. "ProxyPort": "80",
  1855. "Info": "Proxy"
  1856. },
  1857. {
  1858. "Name": "? OI TLSWS 01 ??",
  1859. "FLAG": "oi",
  1860. "Payload": "BASELINE-CONTROL wss://preferences.hotjar.com/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Atlas[crlf]Connection: Keep-Alive[crlf][crlf]",
  1861. "SNI": "preferences.hotjar.com",
  1862. "TlsIP": "104.16.110.133",
  1863. "ProxyIP": "",
  1864. "ProxyPort": "443",
  1865. "Info": "Tlsws"
  1866. },
  1867. {
  1868. "Name": "馃敟 TIM [FRONT] 007 馃數",
  1869. "FLAG": "tim",
  1870. "Payload": "Payload: GET / HTTP/1.1[lf]Host: d2ht11k6416ng9.cloudfront.net[lf]Proxy-Connection: Keep-Alive[lf]User-Agent: [ua][lf]Connection: upgrade[lf]Upgrade: websocket[lf]Sec-Websocket-Extensions: superspeed[lf][lf]",
  1871. "SNI": "",
  1872. "TlsIP": "",
  1873. "ProxyIP": "108.158.124.45:80",
  1874. "ProxyPort": "80",
  1875. "Info": "Proxy"
  1876. },
  1877. {
  1878. "Name":"馃敟 TIM 02",
  1879. "FLAG":"tim",
  1880. "Payload":"GET / HTTP/1.1[crlf]Host: d2ht11k6416ng9.cloudfront.net.cloudfront.net[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  1881. "SNI":"",
  1882. "TlsIP":"",
  1883. "ProxyIP":"13.227.99.93",
  1884. "ProxyPort":"80",
  1885. "Info":"Proxy"
  1886. },
  1887. {
  1888. "Name": "馃數TIM GOLD 3馃數",
  1889. "FLAG": "tim",
  1890. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1891. "SNI": "",
  1892. "TlsIP": "",
  1893. "ProxyIP": "104.19.239.25",
  1894. "ProxyPort": "80",
  1895. "Info": "Proxy"
  1896. },
  1897. {
  1898. "Name": "馃數TIM GOLD 3馃數",
  1899. "FLAG": "tim",
  1900. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1901. "SNI": "",
  1902. "TlsIP": "",
  1903. "ProxyIP": "104.16.53.111",
  1904. "ProxyPort": "80",
  1905. "Info": "Proxy"
  1906. },
  1907. {
  1908. "Name": "馃數TIM GOLD 3馃數",
  1909. "FLAG": "tim",
  1910. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1911. "SNI": "",
  1912. "TlsIP": "",
  1913. "ProxyIP": "104.16.51.111",
  1914. "ProxyPort": "80",
  1915. "Info": "Proxy"
  1916. },
  1917. {
  1918. "Name": "馃數TIM GOLD 3馃數",
  1919. "FLAG": "tim",
  1920. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1921. "SNI": "",
  1922. "TlsIP": "",
  1923. "ProxyIP": "104.18.28.182",
  1924. "ProxyPort": "80",
  1925. "Info": "Proxy"
  1926. },
  1927. {
  1928. "Name": "馃數TIM GOLD 4馃數",
  1929. "FLAG": "tim",
  1930. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1931. "SNI": "",
  1932. "TlsIP": "",
  1933. "ProxyIP": "104.19.239.25",
  1934. "ProxyPort": "80",
  1935. "Info": "Proxy"
  1936. },
  1937. {
  1938. "Name": "馃數TIM GOLD 4 . 1 馃數",
  1939. "FLAG": "tim",
  1940. "Payload": "GET / HTTP/1.1\nHost: cardinalcommerce.com\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1941. "SNI": "songbird.cardinalcommerce.com",
  1942. "TlsIP": "",
  1943. "ProxyIP": "104.19.239.25",
  1944. "ProxyPort": "80",
  1945. "Info": "Proxy"
  1946. },
  1947. {
  1948. "Name": "馃數TIM GOLD 4 . 2 馃數",
  1949. "FLAG": "tim",
  1950. "Payload": "GET / HTTP/1.1\nHost: cardinalcommerce.com\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1951. "SNI": "songbird.cardinalcommerce.com",
  1952. "TlsIP": "",
  1953. "ProxyIP": "198.217.251.250",
  1954. "ProxyPort": "80",
  1955. "Info": "Proxy"
  1956. },
  1957. {
  1958. "Name": "馃數TIM GOLD 4馃數",
  1959. "FLAG": "tim",
  1960. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1961. "SNI": "",
  1962. "TlsIP": "",
  1963. "ProxyIP": "104.16.53.111",
  1964. "ProxyPort": "80",
  1965. "Info": "Proxy"
  1966. },
  1967. {
  1968. "Name": "馃數TIM GOLD 4馃數",
  1969. "FLAG": "tim",
  1970. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1971. "SNI": "",
  1972. "TlsIP": "",
  1973. "ProxyIP": "104.16.51.111",
  1974. "ProxyPort": "80",
  1975. "Info": "Proxy"
  1976. },
  1977. {
  1978. "Name": "馃數TIM GOLD 4馃數",
  1979. "FLAG": "tim",
  1980. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1981. "SNI": "",
  1982. "TlsIP": "",
  1983. "ProxyIP": "104.18.28.182",
  1984. "ProxyPort": "80",
  1985. "Info": "Proxy"
  1986. },
  1987. {
  1988. "Name": "馃數TIM GOLD 5馃數",
  1989. "FLAG": "tim",
  1990. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  1991. "SNI": "",
  1992. "TlsIP": "",
  1993. "ProxyIP": "104.19.239.25",
  1994. "ProxyPort": "80",
  1995. "Info": "Proxy"
  1996. },
  1997. {
  1998. "Name": "馃數TIM GOLD 5馃數",
  1999. "FLAG": "tim",
  2000. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  2001. "SNI": "",
  2002. "TlsIP": "",
  2003. "ProxyIP": "104.16.53.111",
  2004. "ProxyPort": "80",
  2005. "Info": "Proxy"
  2006. },
  2007. {
  2008. "Name": "馃數TIM GOLD 5馃數",
  2009. "FLAG": "tim",
  2010. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  2011. "SNI": "",
  2012. "TlsIP": "",
  2013. "ProxyIP": "104.16.51.111",
  2014. "ProxyPort": "80",
  2015. "Info": "Proxy"
  2016. },
  2017. {
  2018. "Name": "馃數TIM GOLD 5馃數",
  2019. "FLAG": "tim",
  2020. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: www.dg748.site\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  2021. "SNI": "",
  2022. "TlsIP": "",
  2023. "ProxyIP": "104.18.28.182",
  2024. "ProxyPort": "80",
  2025. "Info": "Proxy"
  2026. }
  2027. ]
  2028. }}}}}}
comments powered by Disqus