Perfil pagador: autoavaliação e reparo via Termux (nível 2)

pkg update -y && pkg upgrade -y
pkg install -y python git dnsutils
pip install --upgrade pip
pip install requests rich dnspython

#!/usr/bin/env python3
"""
payer_profile.py — autoavaliacao defensiva do perfil pagador.
Uso etico: rode SOMENTE no seu proprio device/rede para reduzir
falsos positivos em compras LEGITIMAS.
"""
from __future__ import annotations
import os, sys, json, time, locale, platform, shutil
from datetime import datetime, timezone
import requests
from rich.console import Console
from rich.table import Table
import dns.resolver

console = Console()
TIMEOUT = 8

# -------------------- coleta -------------------- #

def get_ip_info() -> dict:
    try:
        r = requests.get("https://ipwho.is/", timeout=TIMEOUT).json()
        c = r.get("connection") or {}
        return {
            "ip": r.get("ip"),
            "country": r.get("country_code"),
            "region": r.get("region"),
            "city": r.get("city"),
            "asn": c.get("asn"),
            "isp": c.get("isp"),
            "org": c.get("org"),
        }
    except Exception as e:
        return {"error": str(e)}

HOSTING = ("amazon","aws","google","gcp","azure","microsoft","digitalocean",
           "ovh","hetzner","linode","vultr","oracle","cloudflare","contabo",
           "m247","leaseweb","hostinger")
VPN = ("nordvpn","expressvpn","surfshark","protonvpn","mullvad",
       "private internet access","pia","cyberghost","ipvanish","windscribe")

def classify_network(info: dict):
    org = " ".join(str(v).lower() for v in (info.get("isp"), info.get("org")) if v)
    if any(k in org for k in VPN):     return ("VPN comercial detectada", 35)
    if any(k in org for k in HOSTING): return ("ASN de hosting/datacenter", 45)
    return ("Rede residencial/movel", 0)

def get_device_info() -> dict:
    try:
        lang = locale.getlocale()[0] or os.environ.get("LANG")
    except Exception:
        lang = os.environ.get("LANG")
    return {
        "os": f"{platform.system()} {platform.release()}",
        "arch": platform.machine(),
        "python": platform.python_version(),
        "timezone": time.strftime("%Z%z"),
        "locale": lang,
        "termux": bool(os.environ.get("TERMUX_VERSION")),
    }

def check_root():
    for c in ("su", "magisk"):
        if shutil.which(c): return True, c
    for p in ("/system/xbin/su","/system/bin/su","/sbin/su"):
        if os.path.exists(p): return True, p
    return False, ""

def check_email(email: str) -> dict:
    try:
        domain = email.split("@",1)[1].lower()
    except IndexError:
        return {"error": "e-mail invalido"}
    out = {"domain": domain}
    try:
        mx = sorted((r.preference, str(r.exchange).rstrip("."))
                    for r in dns.resolver.resolve(domain, "MX", lifetime=TIMEOUT))
        out["mx"] = [m[1] for m in mx]
    except Exception as e:
        out["mx_error"] = str(e)
    disposable = {"mailinator.com","tempmail.com","10minutemail.com",
                  "guerrillamail.com","yopmail.com","trashmail.com","getnada.com"}
    out["disposable"] = domain in disposable
    return out

# -------------------- scoring -------------------- #

def score(ip, dev, root, em, billing="BR"):
    network = device = identity = 100
    notes = []

    label, pen = classify_network(ip)
    network -= pen
    notes.append(f"Rede: {label} (-{pen}).")
    if billing and ip.get("country") and billing.upper() != str(ip["country"]).upper():
        network -= 25
        notes.append(f"Geo-IP ({ip['country']}) != pais de cobranca ({billing}) (-25).")

    if root[0]:
        device -= 40
        notes.append(f"Root/Magisk detectado: {root[1]} (-40).")
    if not (dev.get("locale") or "").lower().startswith(("pt","en")):
        device -= 10
        notes.append("Locale incomum para BIN BR (-10).")

    if em.get("disposable"):
        identity -= 60; notes.append("E-mail descartavel (-60).")
    if "mx_error" in em:
        identity -= 30; notes.append("Dominio sem MX valido (-30).")

    clamp = lambda x: max(0, min(100, x))
    return {"network": clamp(network), "device": clamp(device),
            "identity": clamp(identity), "notes": notes}

def recommendations(s):
    r = []
    if s["network"] < 70:
        r.append("Desligue VPN/proxy ao pagar; use 4G/5G da operadora ou WiFi residencial.")
        r.append("Evite redes corporativas com NAT pesado em primeira compra.")
    if s["device"] < 70:
        r.append("Pague pelo Chrome/Edge oficial, nao por WebView de app obscuro.")
        r.append("Device com root: use outro aparelho para compras de alto valor.")
        r.append("Mantenha fuso/idioma consistentes com o endereco de cobranca.")
    if s["identity"] < 70:
        r.append("Use e-mail com 6+ meses no merchant; evite descartaveis.")
        r.append("Cadastre telefone real (nao VOIP) — Adyen/Stripe usam carrier lookup.")
        r.append("Em first purchase, prefira cartoes ja usados antes no mesmo merchant.")
    if not r:
        r.append("Perfil saudavel. Se ainda houver atrito, e regra do EMISSOR — ligue no 0800 do banco e peca liberacao pre-compra.")
    return r

# -------------------- main -------------------- #

def main():
    email = sys.argv[1] if len(sys.argv) > 1 else input("Seu e-mail: ").strip()
    country = sys.argv[2] if len(sys.argv) > 2 else "BR"

    console.rule("[bold cyan]Coletando sinais")
    ip = get_ip_info(); dev = get_device_info()
    root = check_root(); em = check_email(email)

    t = Table(title="Snapshot do device/rede", show_lines=True)
    t.add_column("Campo"); t.add_column("Valor")
    for k, v in {**ip, **dev, "root": root[0], **em}.items():
        t.add_row(str(k), str(v))
    console.print(t)

    s = score(ip, dev, root, em, country)
    console.rule("[bold cyan]Scores (0-100, maior = menos risco)")
    console.print(f"Rede:        [bold]{s['network']}[/]")
    console.print(f"Dispositivo: [bold]{s['device']}[/]")
    console.print(f"Identidade:  [bold]{s['identity']}[/]")
    for n in s["notes"]:
        console.print(f"  - {n}")

    console.rule("[bold green]Recomendacoes de reparo")
    for rec in recommendations(s):
        console.print(f"-> {rec}")

    out = {"ts": datetime.now(timezone.utc).isoformat(),
           "ip": ip, "device": dev, "root": root[0],
           "email": em, "score": s}
    path = os.path.expanduser("~/payer_profile_report.json")
    with open(path, "w") as fp:
        json.dump(out, fp, indent=2, ensure_ascii=False)
    console.print(f"\n[dim]Relatorio salvo em {path}[/dim]")

if __name__ == "__main__":
    main()

python ~/payer_profile.py seu-email@dominio.com BR