--------
GET http://[rotate=download.cdn.oly-
ap.blackberry.com;v.whatsapp.net;axisnet.com;www.axisworld.co.id;www.axisworld.co.i
d;axisnet.co.id;app.axisworld.co.id;123.xl.axis.co.id;help.yondermusic.com;lm.faceb
ook.com;www.okezone.com;www.cdn.whatsapp.net;facebook.net;line.never.jp;stickershop
.line.naver.jp;axisnet.co.jp;axisnet.biz;axisnet.biz.is.hacked.jp;inet.grub.whatsap
p.com;123.xl.co.id/min_balance7;123.xl.co.id/min_balance8]/ HTTP/1.1[crlf]Host:
[rotate=download.cdn.oly-
ap.blackberry.com;v.whatsapp.net;axisnet.com;www.axisworld.co.id;www.axisworld.co.i
d;axisnet.co.id;app.axisworld.co.id;123.xl.axis.co.id;help.yondermusic.com;lm.faceb
ook.com;www.okezone.com;www.cdn.whatsapp.net;facebook.net;line.never.jp;stickershop
.line.naver.jp;axisnet.co.jp;axisnet.biz;axisnet.biz.is.hacked.jp;inet.grub.whatsap
p.com;123.xl.co.id/min_balance7;123.xl.co.id/min_balance8][crlf]Connection: Keep-
Alive[crlf][cr][crlf][instant_split][raw][crlf]Content-Length:
9999999999999999999999[crlf][netData][realData][cr][lf][crlf][host_port][port]
[immutable][host][ssh][method][auth][ua][protocol][split][delay_split][crlf]
Pilot Unlimited HI
Proxy 10.8.3.8:8080
----------
XL
CONNECT [host_port][crlf][crlf][instant_split]GET http://123.xl.co.id/min_balance8
HTTP/1.1[crlf]Host: prima.123.xl.co.id[crlf]User-Agent:<h1><font
color="#1E90FF">GEBANG KIIDIW</font></h1> </font><font color="#FF1493">[ua][crlf]
[crlf]GET / HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance8[crlf]Connection:
close[crlf][crlf][crlf]Connection-Speed: High-4GLTE[crlf]Connection-Download:
5mb/s[crlf]Content-Length:
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
999999999999999999999999999999999999999999999999999999999999999999999999999999999[c
rlf]Host: mobile.speed.4glte\r\n\</h1>\r\n\r\n POST / HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance8[crlf]Connection: close[crlf][crlf][crlf]Connection-Speed:
High-4GLTE[crlf]Connection-Download: 5mb/s[crlf]Content-Length:
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
999999999999999999999999999999999999999999999999999999999999999[crlf]Host:
mobile.speed.4glte\r\n\</h1>\r\n\r\n GET / HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance8[crlf]Connection: close[crlf][crlf][crlf]Connection-Speed:
High-4GLTE[crlf]Connection-Download: 5mb/s[crlf]Content-Length:
99999999999999999999999999999999999999999999999999999999999999999999999999999999999
99999999999999999999999999999999999999999999999999999999999999[crlf]Host:
mobile.speed.4glte\r\n\</h1>\r\n\r\n
--------
[raw][crlf]
[instant_split]GET http://xl.naver.jp/;wechat.net/ HTTP/1.1[crlf]Host:
xl.nave.jp;wechat.net[crlf]X-Online-Host: xl.naver.jp;wechat.net[crlf]Comnectiom:
Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]
----------
proxy
139.59.109.103:80
bug WA
----------
139.59.109.103:80
---------
------
CONNECT [host_port] [protocol][crlf]Host: line.me[crlf]X-Online-Host:
line.me[crlf]Connection: Keep-Alive[crlf][crlf]
----------
CONNECT [host_port] [split]GET https://my.xl.co.id/ EHTTP/1.1 400 OK[lf]HTTPHost:
123.xl.co.id[lf]HTTPConnection: Keep-Alive[lf][lf][raw][lf][instant_split]GET
http://line.naver.jp/ HTTP/1.1[lf]Host: line.naver.jp[lf]Connection: close[lf]Keep-
Alive[lf]User-Agent: [ua][lf][lf]Content-Length: 999999999[lf][lf] GET HTTP/1.1 200
OK[crlf]Host: 123.xl.co.id/min_balance8[crlf]X-Online-Host:
123.xl.co.id/min_balance7[crlf]X-Forward-Host:
123.xl.co.id/min_balance7[crlf]Proxy-Connection: Close[crlf][crlf]User-Agent: [ua]
[crlf][crlf]
tri
208.72.148.86:8080
CONNECT [host_port] [protocol][crlf][delay_split]GET / HTTP/1.1[CRLF]Host:
line.me[CRLF]Connection: close[CRLF]Accept-Encoding: gzip[CRLF]Accept-Charset: ISO-
8859-1,UTF-8;q=0.7,*;q=0.7[CRLF]Cache-Control: no-cache[CRLF]Accept-Language:
de,en;q=0.7,en-us;q=0.3[CRLF]Referer: http://web-sniffer.net/[CRLF]GET /
HTTP/1.1[CRLF]Host: naver.com[CRLF]Connection: close[CRLF]Accept-Encoding:
gzip[CRLF]Accept-Charset: ISO-8859-1,UTF-8;q=0.7,*;q=0.7[CRLF]Cache-Control: no-
cache[CRLF]Accept-Language: de,en;q=0.7,en-us;q=0.3[CRLF]Referer: http://web-
sniffer.net/[CRLF]GET / HTTP/1.1[CRLF]Host: naver.jp[CRLF]Connection:
close[CRLF]Accept-Encoding: gzip[CRLF]Accept-Charset: ISO-8859-1,UTF-
8;q=0.7,*;q=0.7[CRLF]Cache-Control: no-cache[CRLF]Accept-Language: de,en;q=0.7,en-
us;q=0.3[CRLF]Referer: http://web-sniffer.net/[CRLF]GET / HTTP/1.1[CRLF]Host:
naver.net[CRLF]Connection: close[CRLF]Accept-Encoding: gzip[CRLF]Accept-Charset:
ISO-8859-1,UTF-8;q=0.7,*;q=0.7[CRLF]Cache-Control: no-cache[CRLF]Accept-Language:
de,en;q=0.7,en-us;q=0.3[CRLF]Referer: http://web-sniffer.net/[CRLF]GET /
HTTP/1.1[CRLF]Host: navercorp.com[CRLF]Connection: close[CRLF]Accept-Encoding:
gzip[CRLF]Accept-Charset: ISO-8859-1,UTF-8;q=0.7,*;q=0.7[CRLF]Cache-Control: no-
cache[CRLF]Accept-Language: de,en;q=0.7,en-us;q=0.3[CRLF]Referer: http://web-
sniffer.net/[CRLF]GET / HTTP/1.1[CRLF]Host: wechat.com[CRLF]Connection:
close[CRLF]Accept-Encoding: gzip[CRLF]Accept-Charset: ISO-8859-1,UTF-
8;q=0.7,*;q=0.7[CRLF]Cache-Control: no-cache[CRLF]Accept-Language: de,en;q=0.7,en-
us;q=0.3[CRLF]Referer: http://web-sniffer.net/[CRLF]GET / HTTP/1.1[CRLF]Host:
wx.qq.com[CRLF]Connection: close[CRLF]Accept-Encoding: gzip[CRLF]Accept-Charset:
ISO-8859-1,UTF-8;q=0.7,*;q=0.7[CRLF]Cache-Control: no-cache[CRLF]Accept-Language:
de,en;q=0.7,en-us;q=0.3[CRLF]Referer: http://web-sniffer.net/[CRLF]Content-Length:
Average[crlf]D/L: Max[crlf]Speed: Max[crlf]Connection: Keep-Alive[crlf]User-Agent:
[ua][crlf][crlf]
------------------
[netData][crlf]Host: line.naver.jp[split][lf][lf]HTTP/1.1[crlf]POST
line.naver.jp/HTTP/1.1[crlf]DELETE v.whatsapp.net/HTTP/1.1[crlf]HEAD
123.xl.co.id/min_balance7/HTTP/1.1[crlf]PUT
app.axisworld.co.id/HTTP/1.1[crlf]OPTIONS MY.XLAXIATA.COM[crlf][cr][crlf][split]
[raw][crlf]User-Agent: [ua][crlf]Connection Speed: High-4GLTE[crlf][crlf]Content-
Length: 9999999999999999999[crlf][crlf]
------
CONNECT [cr]xsgv.mxtn.me:443 123.xl.co.id/min_balance7/ [protocol][crlf]Host:
[host_port][crlf][crlf][split]POST http://download.cdn.oly-eu.blackberry.com/
HTTP/1.1[crlf]GET line.naver.jp/HTTP/1.1[crlf]PUT
cc.whatsapp.net/HTTP/1.1[crlf]PATCH
123.xl.co.id/min_balance8/HTTP/1.1[crlf]Connection: Keep-Alive[crlf]User-agent
header sent: Mozilla/5.0 (Linux; U; Android 6.0.1; en-US; ASUS_Z00UD Build/MMB29P)
AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.3.0.950 U3/0.8.0
Mobile Safari/534.30[crlf]Content-Length: 999999999999999999[crlf][crlf]
-------
Pilot edan
POST http://[rotate=download.cdn.oly-
ap.blackberry.com;line.never.jp;123.xl.co.id/min_balance7;download.cdn.oly-
na.blackberry.com;dl-
obs.official.line.naver.jp;ems.elevenia.co.id;www.javanemrooz.com;axisnet.id;www.fa
cebook.com/www.youtube.com;bbm.blackberry.co.id;www.facebook.com;139.59.219.249;lin
e.me;m.blibli.com;123.xl.co.id/net;www.emc.com/en-
sg;104.86.111.88;www.jetprivilege.com;maxis.com.my;m.youtube.com]/
HTTP/1.1[crlf]Host: [rotate=download.cdn.oly-
ap.blackberry.com;line.never.jp;123.xl.co.id/min_balance7;download.cdn.oly-
na.blackberry.com;dl-
obs.official.line.naver.jp;ems.elevenia.co.id;www.javanemrooz.com;axisnet.id;www.fa
cebook.com/www.youtube.com;bbm.blackberry.co.id;www.facebook.com;139.59.219.249;lin
e.me;m.blibli.com;123.xl.co.id/net;www.emc.com/en-
sg;104.86.111.88;www.jetprivilege.com;maxis.com.my;m.youtube.com][crlf]Connection:
Keep-Alive[crlf][cr][crlf][split][raw][crlf][crlf]