First, we'll need to download and install the free version of Proxifier (you can do this here). Important – you need the standard version, not Portable.

After that, we buy a subscription to the service 911.re and download their client. You can download it on the website, or follow the direct link here. Password for the archive - 911.re

Unpack the archive to a folder on the desktop:

f50fcbc7017def3fce370.png



Run the client file, we see the authorization window. Enter your data, click "Login":

c378de618fd47b4075cad.png



After authorization, we see the main window of the program 911:

fd4d1e708267b5207c25d.png



Go to the settings tab (the most extreme one on the right side):

1722201490780a711eaa6.png



Setting all parameters as shown in the screenshot.

Next, go to the Program tab, click on the "+ " icon.»:

10c7241aa47e085d840dd.png



And select the Linken Sphere icon.

After that, you can go to the Proxy list tab and select the proxy parameters you need.

b7d957d9c223056f5d01e.png



In order to select "socks", you need to click on it 2 times with the left mouse button. I advise you to look for the sock with the lowest "ping" value after selecting the parameters you need.

After selecting the sock you need, you will open a proxy Server. In it, you should click "Continue Evaluation".

After all of the above, you can proceed to setting up the Sphere itself.

First you need to run the Linken Sphere program via a shortcut on the desktop

1d82de8a2507c3530a29f.png



After logging in, we are taken to the main screen of sessions. As an example, you can see the sessions I created here.

In order to create a new session, you need to click on the " + " icon - setup new session.

efb898dcd843d2940266f.png



This is the session settings window. Let's analyze it in a little more detail.

After inventing and entering a session name in the "NEW Session name" window, the first thing you always do is click "Check proxy / geo". If you set up the 911 program using my method, then your sock is already on and ready to go. After clicking on "proxy/geo check", you will see something like this:

1635ee565ba8b602fa7ab.png



Now let's look at what happened:
1. You have set the "Language different" parameter where the FR parameter is set. This parameter is responsible for emulating the language that is set in your session. It is installed under the country of your "socks".
2. You have set the time and time zone in accordance with the socks you selected.
3. You have set up a geo-location in accordance with your " sock»

Let's move on to setting up CH for your computer.

If you use logs from Stiller in your work, then you will have the system file in the folder with your log. On different stealers, the name of this file is different, but the essence is the same.

We will look at the configuration using the example of logs from the AzoRult Stiller, as It is the most popular one.

40b83b778f06efc71b157.png



There are several files that we are interested in configuring for CH. The first one is the ip file:

77254b07ff2ac7a48d477.png



As many of you have already guessed, this is the ip address of our victim - we will select our "socks" for it.
The two main rules are:
1. Your chosen socks must be as close to the CH as possible.
2. It should not be included in the black lists.

How do I find out from the ip address where our CH is coming from? To do this, we need to go to the site Free IP Address Lookup & Proxy Detection Test | IP Address Details | Proxy IP Check

a1881a79de3ba044ed83a.png



In the ip address lookup window, enter the desired ip address and press enter.

e25f63ecb61879d2561a7.png



In this window, we get the name of the City/Of the state/The provider of our CH and already under this data we select our "sock". We try to match it to the city. If it didn't work out for the city, then for the region. If everything is really bad and CH is from somewhere in the ass of the world, then choose the provider - "ISP".

Next, we are interested in the system file.

367bed4c7c8e777d8e893.png



It contains a lot of information about the CH computer, but we only need a few parameters:

1. The OS Version - in our case, it is Windows 10.

2. Screen Resolution-as we see 1920x1080.

3. To All this, all that remains is to find out the browser that is installed in our СР.

To do this, we need to go to the browser/Cookies folder:

219e2555fd2d0a736882d.png



Here we see files with cookies from different browsers you may have one, for example, Opera. If there are several - we look at the largest one in size-and we will use it to configure it for СР.

After we know:

1. The OS Version (in my case, it's Win 10)

2. The name of the browser that KH most often uses (in my case, it's Vivaldi)

We need to find the User-agent for our OS and our browser. To do this, we will need google.com, in which we write something like this request:

e6e896b77171f7d5d1b98.png



We follow the link to the "developers" site, while trying to choose the newest version of the browser - this is clear from the numbers - the higher the numbers, the newer the version.

b41eb0ce30c7030db208b.png



This is our user-agent. Copy it and go back to the Linken Sphere program:

380659c69dc82f887bd37.png



Click on the "Manage" button, then the "Add new" button, then paste our copied user agent into a new line, click save

388d456c3d3c114c1a012.png



Select the desired user agent from the list.

Set the screen resolution under СР (from the system file), click Emulate screen resolution

af9f51cba058ce3dacbd3.png



Next, click on the Icon with the inscription "WEBGL", we see this window:

7c179ed6c85d22036e1fc.png



In this window, select the parameter "WebGL 2" from the list and click on the "generate from user agent" button, click "save".

This completes the configuration for CH and, in the main window of the program, from the bottom right, we can click "save".

3fe7a5d45ca247c0c46bb.png



After that, a browser window will open and the site will open in it whoer.net, where we will see the result of our configuration for CH, namely the OS version and browser version:

1281a413ccdb529dab3e1.png



After that, we will only need to import the cookies of our "CH" and you can start working - to do this, press the keyboard shortcut Ctrl+Alt+X.

Select our session from the list by the name that we gave it in the beginning and click on the folder icon:

0fb672b137e9073ffe326.png



Select the file with our cookies in file Explorer and click open:

1f3a45096281f3a59eb7d.png



In this window, click "import":

ad4b5e4e2b85916559db8.png



After that, we will receive a message like this, which tells us about the success of importing cookies and we can start working:

982061cac14ae3d11609b.png



In this window, select our session (in my case it is Untlitied) and click on it.

17e025b6afd0f4b8a0fcb.png



This completes the setup of the Linken Sphere program with the service 911.re finished.
 
Top Bottom