{"report_id":"5bf5bde5-fe38-464e-92a9-3ad93701e8e1","version":6,"status":"done","tags":[],"date":"2025-11-11T18:46:30Z","url":{"schema":"http","addr":"b2bwork444.top/index/login/index.html?code=1513116","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"b2bwork444.top/index/login/index.html?code=1513116","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"title":"Landing page","dom":{"size":13787,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9452)","md5":"398e81f9b34c589e6f8d0bb6eb002f6d","sha1":"24a017ec8bcab1ce5fa7152cb5ff1f27a0a08006","sha256":"aa684a8362f9e533eef94fa5274b8931251c244fcd4fbcce8137c4c8076883aa","sha512":"2f9a3ee5011430864631b00a0a8a274d749e02aef276dc88fa37bc54087501d6492348639f13a04e7886b5d59027ac3a7e980ac7f517033bf5b27b887b1abdbd","ssdeep":"192:mjwwadlBjGufWJjfQ2FggJ/L8D1KkyhSBWETQHeaQuyKAug9VwIee8dR:KczWb9pkywQH/ewg8dR","tlshash":"c252e724a004952b519380e874f52b5d71dac447cb138e08f7b993a91bffdc7aa36b4e","dom_hash":"domhash5941f86df711907735b28561842e982b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"b2bwork444.top/index/login/index.html?code=1513116","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-16T18:46:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-09T22:13:15.598397Z","alert_count":0,"request_count":3,"received_data":73533,"sent_data":1587,"comment":"","tags":null,"fingerprints":null},{"fqdn":"b2bwork444.top","ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-16","domain_rank":0,"first_seen":"2025-11-05T16:40:58.297627Z","last_seen":"2025-11-05T16:40:58.297627Z","alert_count":21,"request_count":21,"received_data":1323926,"sent_data":10636,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-09T22:15:57.703898Z","alert_count":0,"request_count":2,"received_data":139605,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-09T22:13:15.523411Z","alert_count":0,"request_count":1,"received_data":8950,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"b2bwork444.top/static/jquery.min.js?baoqi520","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-05T13:32:37.263546Z","times_seen":77490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/index/layui/layui.js?baoqi520","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70ed0e8151d23de969de514bfd802a56","sha1":"569e6c1b0ac0b8efaa7dc0015b691334947a9665","sha256":"92c7997b3dce6ab2368b1bdb34ff4b67ac77957898a126c7eba452a8080bec95","sha512":"947eeb19fb055b07a191ec89625941abbdc8b2247b447dbec2e3958ebd3aabc34ac07a79c559e4752bd49bc44db77d500913aab4fae300077556e347d084b1a9","ssdeep":"3072:tVo+F//NOM0SF0Mz0pZN6TPKWjZIpYCrYtJ+8CZrcNBf4XcIiOb9:Xo+FdO3SF0Mz0Z6TfIpPS+8grcNBQcIZ","tlshash":"02543a9d758574b3237360a6406f990eb17b093daa0a8060f166d4fa2dbdc885237f7f","size":291286,"data":"","first_seen":"2023-03-07T12:09:26Z","last_seen":"2026-04-05T13:58:55.948984Z","times_seen":25704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/index/login/index.html?code=1513116","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aeea17c486d7ed6250d2c626e639e783","sha1":"437592e34827efcb1f1662ab280d063d2e1600c3","sha256":"a7d0a72d0b7f4eedf1dab734ce31e96e35481c024df9f08ca4b251db6fc0864d","sha512":"8cd44ad9ef6d80bfa6e4ea7803c548a5c325f61f49d7fa8084d66fed7510309b508355cafafa095360f38e74afa6f3cd250309e2d9b1612ac009183d84693e87","ssdeep":"96:5CJhfXahRnd8cCqaAO+PiFLRxPeaQuyKAug9VLsLA:5yhSBWETQHeaQuyKAug9Vw8","tlshash":"cf911f0cf1449a8251d6517828f7214432eadc838602db00fab5a3682bbedd7b536f8f","size":4405,"data":"","first_seen":"2025-10-13T13:32:40.893956Z","last_seen":"2025-11-11T18:46:34.744296Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/index/login/index.html?code=1513116","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b017afbc4968565f804853d1eadee258","sha1":"df499a3e41571272dc57e304efd0559c643f9c49","sha256":"5e925c859ec0f95ba366c2c823ba5ed36787851b3cbe507503315b149362176a","sha512":"0a24f83d3985d0c6b012cebe6079939126f9567e74211a53860854df8a9ee92ff744ce129a97643ab3ddafca4b4a2bcc39c288511dca5f478e2f3a71546a9114","ssdeep":"","tlshash":"c001feacb16cb59900f2047511bf2794c53f3ca1a510e8b41b67f6919dbee4cab2370c","size":688,"data":"","first_seen":"2025-10-01T07:41:21.580926Z","last_seen":"2025-11-11T18:46:34.745564Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://b2bwork444.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Nov 2025 00:03:33 GMT\r\nexpires: Thu, 05 Nov 2026 00:03:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 585757\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-05T13:49:31.241922Z","times_seen":135585,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":142,"dns":1,"connect":28,"send":0,"wait":46,"receive":13,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/index/layui/css/modules/laydate/default/laydate.css?v=5.3.1","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/index/layui/css/modules/laydate/default/laydate.css?v=5.3.1 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 May 2023 18:04:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6465171a-1cc5\"\r\nexpires: Wed, 12 Nov 2025 06:46:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTq2Jd%2FyacEoj54aKh9moX1wB%2BqvyYYDSJ1MjIPYm3WWVj9MqAsSWuyELsDbYa4VI8o4q9DW7CJ5PxSljNt%2Brjx3PKMNNhNQ4Flz60KE\"}]}\r\ncf-ray: 99cff36c8f6c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7365,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7365), with no line terminators","md5":"e9078eef34fe9a44e44bdd55b48fdc55","sha1":"73ef00229810ee179915661786d9b66b7fc2d568","sha256":"ab9dbdf922a26509951347fcfa83704d86afd2df855c827740c23df72fd8ab3f","sha512":"dbf200ca6effc6bee2f7e8f516dafe6b25fa66093f19fff117a8bd87732a3ca0206480319d5f733eb07d18f564cba1dfc6143587cbc5ea1d5d370948d8ab3921","ssdeep":"96:7OyDQi4ijYyC43i7hlVVZ4LyLk5bYsBE2rBOB:7OQQfyPCoiFVqHbrBE2rBA","tlshash":"45e1cc71b1542cd4702bc222b4a87cbfaef8dc02dae3265ce5b8621b85c15b7957d34b","first_seen":"2023-04-11T12:12:51Z","last_seen":"2026-04-05T13:58:55.988682Z","times_seen":25586,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/fonts/fa-solid-900.woff2","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:11.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/assets/css/all.min.css\r\nCookie: lang=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Sun, 10 Aug 2025 12:53:46 GMT\r\npriority: u=4,i=?0\r\netag: \"6898965a-26a0c\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y2hCXDMW8g7ftpeQCWzfQ4%2BnENIduYHPu1CDACen5A3TOeKLB9WoIJF4v1zEUOeNK1YmDpcaTpuZHyRFRMXEg6cvQNoBTZOQH67748HE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99cff371dfa575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-04-05T12:44:41.680584Z","times_seen":21007,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/favicon.ico","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:11.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:11 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Tue, 23 May 2023 00:21:44 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"646c0718-be78\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26iCyyytVap%2FvPTzalI8zP8CSxkbX2fQenxGHyM%2FU3ArNCqcMSgASSTgTyiWJoVW4%2Fyb%2BMG4W1VVkjaUJyoytNV7oTqstyGcK4jCPoBd\"}]}\r\ncf-ray: 99cff3727fae75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48760,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128 with PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced, 24 bits/pixel","md5":"bec538b63c03f3f3f25d2386364c76bd","sha1":"9cfc4534576ed679519469fc44fc30cc9466b0e6","sha256":"9c2a95bc194ddfc8f56c227679a284c5ef447264800d90cee67995fbc199f742","sha512":"2c93db35ef75ca9574884e8a043bf69fb917e07371e8a32ca9d1e6f7e4f8e78243bc374eb5dd8284c09e34ddfca5227821901ca894032f162b15323a0724a9c2","ssdeep":"768:AECRV1Z3QHplQv0AvcB2btvtA7NMTlhJtI+wzrvwF4B/Oo4XgdaY0kGFtoNi:AEA/CyrvBvKMlBI+w/K49ORgda1PjoNi","tlshash":"f823f1a76106857cc92e42717c3b2192b47e7de4c554f8250c6cd72fa4b71ba836533a","first_seen":"2023-08-16T19:37:28Z","last_seen":"2025-12-26T01:27:09.495055Z","times_seen":53,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":556,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/index/login/index.html?code=1513116","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T18:46:08.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /index/login/index.html?code=1513116 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 18:46:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdx%2F8fjN7NEZaiIDZ25McnWCCwE3Kj%2BAm5LlMSyOiPZ2WxU%2B9PRLB1soqzWk%2Fo18u9fDvif8gn8VgqYajf8ei5ZupqGdqaaj2jSJzQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: lang=en; Path=/; Max-Age=2592000; Expires=Thu, 11 Dec 2025 18:46:08 GMT\r\ncf-ray: 99cff35de91bb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13013,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8726)","md5":"1d12cfce49931d5a0c6a1f2b5a081ec2","sha1":"e555f631fe86c69510e5d82f78b3caed3d88ac81","sha256":"d67cc09a75706ff2b36fea4e3542d26d0b715a81c781d9d59cc2e87a603f01f4","sha512":"029291ec8af715df0a11a1f26d2aecbaa190c35da7e27d242d3612e8ecf845e57a09c511791f085813792f11d5d21eee37b90fbb2cd37f86302437a08a087d9e","ssdeep":"192:UAXjGufWJjfQj1/DHd5Im+KEyhSBWETQHeaQuyKAug9VwIe28dS:UArWEFHdemREywQH/ews8dS","tlshash":"fd42c924a004946f559380e928e5274971aac443d7138e08bbb9a3791bffdc76a36f4f","first_seen":"2025-11-11T18:46:34.71371Z","last_seen":"2025-11-11T18:46:34.71371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":53,"dns":32,"connect":1,"send":0,"wait":590,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/index/layui/layui.js?baoqi520","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/index/layui/layui.js?baoqi520 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Nov 2025 01:00:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69113915-471d6\"\r\nexpires: Wed, 12 Nov 2025 06:46:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8ccsi4nRai5FxWeu4bmK8iKqFEjqMwfqNQNwNUHrvs%2F7oxTRWVUc6vlSR%2FzCnB7yVZpyrN92WOGXpRhgi0KOx%2FQ147n7B9BI5g3H2IB\"}]}\r\ncf-ray: 99cff3633f1f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291286,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70ed0e8151d23de969de514bfd802a56","sha1":"569e6c1b0ac0b8efaa7dc0015b691334947a9665","sha256":"92c7997b3dce6ab2368b1bdb34ff4b67ac77957898a126c7eba452a8080bec95","sha512":"947eeb19fb055b07a191ec89625941abbdc8b2247b447dbec2e3958ebd3aabc34ac07a79c559e4752bd49bc44db77d500913aab4fae300077556e347d084b1a9","ssdeep":"3072:tVo+F//NOM0SF0Mz0pZN6TPKWjZIpYCrYtJ+8CZrcNBf4XcIiOb9:Xo+FdO3SF0Mz0Z6TfIpPS+8grcNBQcIZ","tlshash":"02543a9d758574b3237360a6406f990eb17b093daa0a8060f166d4fa2dbdc885237f7f","first_seen":"2023-03-07T12:09:26Z","last_seen":"2026-04-05T13:58:55.948984Z","times_seen":25704,"resource_available":true,"data":null}},"time_used":1431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":845,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/fonts/fa-brands-400.woff2","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/assets/css/all.min.css\r\nCookie: lang=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118684\r\nlast-modified: Sun, 10 Aug 2025 12:53:46 GMT\r\npriority: u=4,i=?0\r\netag: \"6898965a-1cf9c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfXd4KV01o0AWQEzXg0YRffrzbF19gENCRGafamwfOfKKQQGul5TP98IuMLf2QNzgxVRc8%2FH2F6ow4y%2FDPsEglSZUD6sSjhl%2FSA6N4%2BK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99cff368df5375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118684,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118684, version 775.1280","md5":"cbcf42b2e9228a8f5bad42717d8a88db","sha1":"31c30351084e2670bbe5c47bd342e11540a68717","sha256":"d7236a19bf23cbb2027280e8f51dc99d6c45976a2ed60de73382b034b18a2b68","sha512":"3872344124caac5d5831dd08ddab3532fe2d0c0991c6ab0939c460c6ca40aab24bff5af5fed19ac40cb7cb13b13e24bd32756d579996024ede587a598538459e","ssdeep":"3072:tDqJfeFhgJI8f3pOO/qjV79EDtUynAuWKeWY2xKokhAmjjCoTnRG:tDq0hII23EOSjPEDWynAXKnYvotwHI","tlshash":"d0c31223c140cbbfd4f3909ee49da97506cb746734a1b2809335b2355e2e9997243eeb","first_seen":"2024-12-19T10:41:23.150574Z","last_seen":"2026-04-05T12:26:14.045646Z","times_seen":11253,"resource_available":false,"data":null}},"time_used":1416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":573,"receive":843,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/fonts/material-icons.woff2","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/fonts/material-icons.woff2 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/assets/css/material-icons.min.css\r\nCookie: lang=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 128352\r\nlast-modified: Sun, 10 Aug 2025 12:53:45 GMT\r\npriority: u=4,i=?0\r\netag: \"68989659-1f560\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjEZJ0At9sL6GSbn0NBWGP65npaQ0prjHYC%2BnkgxnuwTwzyelCA8S6U3iOrffVfqiFoUazea5qHw%2FtW0El4Ql9z3rP6B9Ws158BGAyKr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99cff368ef5575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128352,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-04-05T12:50:22.081091Z","times_seen":49329,"resource_available":false,"data":null}},"time_used":1399,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":566,"receive":833,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u8w4BMUTPHjxsAXC-q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/lato/v25/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://b2bwork444.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Nov 2025 00:13:37 GMT\r\nexpires: Thu, 05 Nov 2026 00:13:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 585153\r\nlast-modified: Mon, 15 Sep 2025 17:09:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24408, version 1.0","md5":"efee2d080d7bebdd2e0aeb2e030813a0","sha1":"f8d38f9f9584e48c2e469877ebd94232265585f1","sha256":"bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0","sha512":"16c55ad46a26e0af340f2b8a89bd98c1ccad5c976b434aafa7d1d8cd5049b40a58c5350fa42029710c9dd8040e7cea05e57979731b941086ca096239169f4f3c","ssdeep":"384:lwfLHrvMt+iWkciwtprblXNenWbFrqBY34OlZDsnNBvlUg0/qxFul2sOgZl06t2b:6bjU6PflXNHFrZJLDsT+gpx59cS6t2b","tlshash":"55b2e06f8ee485008cd9cc61f39bfa6e96d73d9f437d96c2ce8311360e9a199115424f","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-05T12:52:13.849393Z","times_seen":21421,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":111,"dns":3,"connect":14,"send":0,"wait":35,"receive":10,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://b2bwork444.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 11 Nov 2025 18:46:10 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 78268\r\ncf-ray: 99cff3692afa3181-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"613fa20b-131bc\"\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 370778\r\nexpires: Sun, 01 Nov 2026 18:46:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vSa5mExLVpO3Hslg8X2udvWgVGJ85GzlaIkJ9NME8JMG4%2FMVcfuzwbrO%2BFJywEpJ1sRPqPFgzAwRzLnQoHfZc%2FBw7kEavnz%2FPRv7XlzXvwXqPk5pRgiPZLpfgoB4BSRdLakEAGoL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78268,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-05T12:40:39.491262Z","times_seen":39799,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/css/all.min.css","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/css/all.min.css HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 10 Aug 2025 12:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68989657-12066\"\r\nexpires: Wed, 12 Nov 2025 06:46:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84PVTFTu1dGiORKohnCtwFL012Oo8h4i39xNGkEmnvD4IvG9wCUmOSUcqSpkV4Rqd3ss75iFgY1sEFlP1g5XenY3fert8cK8kpT%2FGlSu\"}]}\r\ncf-ray: 99cff3632f1875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49899)","md5":"1d7fceccba905e4937cd70879e60e95a","sha1":"0e9ce08f4e4c1b730cb105f27bbd42776523f66b","sha256":"6bf5969aef754374608f58fb0b9dedd59c8ee8835d53513b3cde209f8e1e8ea3","sha512":"1b7ef4e8eb4bef4268795e86be1acf5b47a6b32a39cefebb7f9ed6ba8d4260775a180aa0c68be38b348e8fc75a7164a93aeefdbaf4e3a692df7b4bff7ba2aa20","ssdeep":"1536:/bM1MvMaMfMRQZm0grfT/QypZhzZHpmjA6912:SlgrLXzZJM1912","tlshash":"f5730f12ad84019bb4568d7f3895bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2025-04-24T14:36:29.755052Z","last_seen":"2026-04-03T12:21:19.773879Z","times_seen":40,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/css/material-icons.min.css","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/css/material-icons.min.css HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 10 Aug 2025 12:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68989657-cca\"\r\nexpires: Wed, 12 Nov 2025 06:46:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BA6olt26FdF%2FDIX7CeOvZq%2B8BodWJ008YhZ12cgQ4wKGdhV8kb0LvmKspimehBDWSrbj7Ge8TRAFybfUiOWFLxKCKh%2BEdzl2cdI2F3Rb\"}]}\r\ncf-ray: 99cff3632f1975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2920)","md5":"b810281558d42db49936daf4a36f8761","sha1":"03bd6821236aabc2b73679644cf096640fbe941a","sha256":"58bfd784b4e064a7ee7644752d78d8fd62d1c2b738e5df249f92e791d8654aaa","sha512":"31e0c275a2be16fb6708459712e01ebeaff8b175b6ecdee02d8c81adb6a3ecbc40920312573cc8df4933813343354bc27aef889df62d372612266a262d0c0c6b","ssdeep":"","tlshash":"9b616a159979258b90628c93758d3f212902523fd8578cffcd174a2e9ce34bb235af1d","first_seen":"2025-09-02T08:44:35.230774Z","last_seen":"2025-12-26T01:27:09.48677Z","times_seen":18,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/img/en.png","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/img/en.png HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 May 2023 18:04:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6465171a-d9d\"\r\nexpires: Thu, 11 Dec 2025 18:46:09 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QypGBPZr823zGDf6ZeecAhbr1BAMqRoiFBrD9mE1XSGqRyY%2BP7uc9qAWX%2F0q3%2FDPzwY3KISZHzVEVjS7HqEnO0yRbPBv39WumXZlbC9\"}]}\r\ncf-ray: 99cff3633f1b75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit/color RGBA, non-interlaced","md5":"34c29adfd45d8462fb762e5a728d8a78","sha1":"dcc29a0b0b81898e18fcb0959b51b69720704da5","sha256":"5f88b6237043c0a5aaa2113ab92ade0f646a78f2b94ac21ea2ed14878c070170","sha512":"55873ead57f7cb1c93cc40c6cb20f84a8fc9ace1ad52205d5223a998334ab381a710fdbe74dfdf3159aa207a490b58fcc7ea18b88c212deb1e6e9c7e11ed738d","ssdeep":"","tlshash":"20717c1d3e24b88f87f6ad74864a022886b61bd91c261533a327e03cf58d09ab20539c","first_seen":"2023-05-08T21:03:54Z","last_seen":"2025-12-26T01:27:09.493186Z","times_seen":49,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/img/xby.png?1232s","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/img/xby.png?1232s HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 20:56:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e2db80-17b8\"\r\nexpires: Thu, 11 Dec 2025 18:46:09 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMlX9g%2FL1iZb%2FWxbPYCkYDkLEi3ept6Vt24PaU9raL2LPk49thyCC1U7kY1DC5BH90nueNOuvfQZT8HvYD5WMDICbE7zlujtC1XAdQVl\"}]}\r\ncf-ray: 99cff3633f1d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c87339e49a92c5d45fc82932445a5669","sha1":"88e0508f67f40aa46504f94b45edea6be4bbd4e9","sha256":"347297cc8e0734bdad3bc6b29428d9b0a1b2dd91ad0b7812fbceefb4d36a38db","sha512":"211e32f512a7ada608a570c24a24c952dab51acd697b4849e15b5a02981779410350ef7ad17be6abc50554465df58c399fa38094669e9ec48ffff3c50e139bbb","ssdeep":"96:1cvr6Qd7S5Y2XkmJnPgbCYqIQ1FyAoOwaX7sSX6Cwiw+sBGipiJvFpE/HYifktY3:Upd2nPgbpDOwSwSXBwtBfkvzE/BMeESF","tlshash":"48c19eb839c49148819ab51b3c0de29c248f433617fd9b90f1927331d3f9285e8ba64c","first_seen":"2025-10-13T13:32:40.878957Z","last_seen":"2025-12-12T18:01:17.490759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/fonts/fa-brands-400.woff2","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/assets/css/all.min.css\r\nCookie: lang=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118684\r\nlast-modified: Sun, 10 Aug 2025 12:53:46 GMT\r\npriority: u=4,i=?0\r\netag: \"6898965a-1cf9c\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Fo91Xr4Ki3FqT5a4Hxw%2FFkBN1BMSGZihuIDSvN%2FcWPhISgs%2Bz48HDHnxY4aPePJIux44jK7PGLZEq%2BEUl4wiTUPuyJwQBkAUfgqttwM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99cff368ff5675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118684,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118684, version 775.1280","md5":"cbcf42b2e9228a8f5bad42717d8a88db","sha1":"31c30351084e2670bbe5c47bd342e11540a68717","sha256":"d7236a19bf23cbb2027280e8f51dc99d6c45976a2ed60de73382b034b18a2b68","sha512":"3872344124caac5d5831dd08ddab3532fe2d0c0991c6ab0939c460c6ca40aab24bff5af5fed19ac40cb7cb13b13e24bd32756d579996024ede587a598538459e","ssdeep":"3072:tDqJfeFhgJI8f3pOO/qjV79EDtUynAuWKeWY2xKokhAmjjCoTnRG:tDq0hII23EOSjPEDWynAXKnYvotwHI","tlshash":"d0c31223c140cbbfd4f3909ee49da97506cb746734a1b2809335b2355e2e9997243eeb","first_seen":"2024-12-19T10:41:23.150574Z","last_seen":"2026-04-05T12:26:14.045646Z","times_seen":11253,"resource_available":false,"data":null}},"time_used":1400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":560,"receive":840,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/fonts/fa-solid-900.woff2","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/assets/css/all.min.css\r\nCookie: lang=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\nlast-modified: Sun, 10 Aug 2025 12:53:46 GMT\r\npriority: u=4,i=?0\r\netag: \"6898965a-26a0c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oySpV1AOgwaAc3ak3yk4MuyfPhAOkbJvDKlK3tEhq5tpnE4WF3JsjHdqyyRw3tdk9liiRLjOuWYIHoB%2B8Tp3Wezv6Pqfpi7GC6w066yM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99cff3699f5d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-04-05T12:44:41.680584Z","times_seen":21007,"resource_available":false,"data":null}},"time_used":1415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":571,"receive":844,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/index/layui/css/modules/layer/default/layer.css?v=3.5.1","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/index/layui/css/modules/layer/default/layer.css?v=3.5.1 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 May 2023 18:04:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6465171a-37bf\"\r\nexpires: Wed, 12 Nov 2025 06:46:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sx0CDq37oOYy5LOw5RU0w%2Fu5HImOzWeG0WgizRRg86Z56to%2BuYws035SkS2VMckZBERRmhrMUgGb34RBz%2FpZ8b5Vs8NWNq1Xdo8FSf4h\"}]}\r\ncf-ray: 99cff36c9f6d75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14271,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14271), with no line terminators","md5":"c234eb06d5f32055092294e78957f17d","sha1":"f15ee0bcb9694f32f5e1d524f2653aa0dd043402","sha256":"5cdf3edb27b0c9f8e48918c486e9ae65a9e5beab806b64c4a7bc5bac53c0f540","sha512":"3f06b51116d7f8026d81c7eb6a3c4d871462d09fe0a5b8cc8b7feaf20cbc88b0b6a545f0ec7cbc17566a9ff609405f58fad6eddfb3a8b3f6d530ede8fa3fad5c","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXi0nMLPD2OtLzAyPHL/LztJDzyv2OQ7KGx1j9d2/nWUU:1ELr2Otzrzzt42OQ7KGx1j8WUq4S3cU","tlshash":"f75242e144911299b0278721d6dc7eba32f88d43e5630caef2573c1f874c6dba2b6647","first_seen":"2023-03-10T11:40:20Z","last_seen":"2026-04-05T13:53:22.770442Z","times_seen":41828,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/index/layui/css/modules/code.css?v=2","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/index/layui/css/modules/code.css?v=2 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 May 2023 18:04:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6465171a-527\"\r\nexpires: Wed, 12 Nov 2025 06:46:10 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qyQbwY6y6s%2BxVWyrfLxVSK0R81HhWlfJPWqogzM%2BocI1t8t80wU2%2BkpNw6%2BT%2BI55ITsOrjdSn0C%2FLFD3ZN5lXyec4YEHJcbHFq29zpOz\"}]}\r\ncf-ray: 99cff36c9f6f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1319,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1319), with no line terminators","md5":"986d0d70b033a195fc1bd1527b06993b","sha1":"69ea79bb09bddd3b988db70ef8b10be9ed0f0065","sha256":"3f27194c2e479212781a76f993b778d724ac9838e780b19472c0357cd3081431","sha512":"a3d1ffa0ba90c8ed8f1330c456760ad7098b683756f1f5d2aae6ec89502c0fe1ff6287e7b1180b9df8f50d517118b610566e9315de055d4780a230488eda10e0","ssdeep":"","tlshash":"d721493aa3852118354bf21574fcbcbca03cb1d6a5ea0eaaff416797c944c51083674f","first_seen":"2023-04-11T12:12:51Z","last_seen":"2026-04-05T13:58:55.931002Z","times_seen":25652,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/css/style.css","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 10 Aug 2025 12:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68989657-231f\"\r\nexpires: Wed, 12 Nov 2025 06:46:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wo8o6PzAvfIU8BPkZkNfNumzPd64RNIg5OOYG4ClMCU0X%2BME8ve0SdTkzkFY%2FWMIv6eV59O73ayZdgZEGvs01uwC%2BXtU5o75rEqJ2Y0o\"}]}\r\ncf-ray: 99cff3631f1775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8991,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"ceb03698befd92d579221720d9d65a36","sha1":"56f4651108abdffd48193fd65d5a0e9b7eae5800","sha256":"920d6f6b966ad589da097f76fa5936a6940d7f210f91a0a59b3d993b9caf72c4","sha512":"1b21c3eef5df7f12d21c0c1300d93aeb65eff50dc186f30823e447859329a6f4325cc262c9accc4bbac61cda098bbc1db1a0c792e4df4f4fa75f2bf4d9fa2bd8","ssdeep":"192:/OxFjxwawxWFQCjZXsoLf9fWQ9TS9hJ3mZG708POlfKAXQ9+P8mCAXwMwUTjwmwE:/Mkh8FvleX4TRCAgfTV/8","tlshash":"1402f0475a131168b827d16c3bf6975923296407990addbc7acd2448cfce2fd61a3bcc","first_seen":"2025-09-02T08:44:35.227866Z","last_seen":"2025-12-26T01:27:09.495929Z","times_seen":18,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10462\r\ncf-ray: 99cff3635f99712a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"613fa20b-28de\"\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 375105\r\nexpires: Sun, 01 Nov 2026 18:46:09 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=weNExLcanLMz4DZvpKN3ZHX%2FC3Vq3q4y05TYTjjgEsnm%2BI8HHBQ73pIIFvr8YafeLKbzL%2BosXbfZOjU0yTHRPQc4UItrJwvMtEX2nDR4aoBIfQAIij%2FapaHbKMJ3uFkVyFI7L9E%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59305,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-04-05T12:38:15.233296Z","times_seen":33993,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":23,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/img/cn.png","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/img/cn.png HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 May 2023 18:04:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6465171a-118d\"\r\nexpires: Thu, 11 Dec 2025 18:46:09 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxDGer%2Fzpl2E9YX722ASPSY4nJFB8nE5e%2BhLO0qXZLAkzxyv7LmAbMfqJwOmlNxuvS8C1iP7s8XlKw4%2B3Mn5qASwIr1kjoLz6XMn6ayP\"}]}\r\ncf-ray: 99cff3633f1e75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit/color RGBA, non-interlaced","md5":"87a823ade04c5b21ec1dfec0d36b3ddc","sha1":"7ed6b3ca34f42419af78fb963328c15c17ceeda8","sha256":"353f4f13dcb62c34fc7235eaccc34b06ec8d579a81d68da92c0e2a791d51b566","sha512":"c16714c4d20845a9b1c63f2f58e66849fc9e2dabbe2275c77c829905bdaef8605221957840315892a2615c62aea1043a60d02e95a20a112af20d2be155b7f5e9","ssdeep":"96:iU3M+x2HiGiFoN5dk5HU63GIRtU4sL27N2HCe255Mmaeaj:iU8+MiFoBgUY7RtU45UHAgvj","tlshash":"88917dd2c53b477c81672b11eec8a25286a28e627554e000ca9d3f73ad6424f2a06655","first_seen":"2023-05-03T00:55:13Z","last_seen":"2025-12-26T01:27:09.48453Z","times_seen":70,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 11 Nov 2025 18:46:09 GMT\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8264,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3e60d92d1a3ec9b0ecddb3b2f3818ffd","sha1":"517b66169afb17d5d0538ae8d559371698077511","sha256":"9aa57887b113c39cf22bae9d6289ec0c6624a0b274c2124555e81235df512597","sha512":"791f3208a2b56caa224bd13ccb1f89f5660be92fa92e8d0163a5c0a081f0738e2de67c9258a67f2616e968cfce980018d1c18aec1741b2f05540357d77d68895","ssdeep":"192:43pv33pUn/J3n/lOw3Oir/i3r/Ux/o3x/TpwOp7RIu71D5Mp76D:4353m/R/lFx7u7Up8pTHF","tlshash":"0802c092086ba508db930dc222da7e36ff0fa25064559935efff14c8bc97c6a5361b0c","first_seen":"2025-09-17T05:16:48.274798Z","last_seen":"2026-04-05T12:52:14.371037Z","times_seen":5250,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":89,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://b2bwork444.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Nov 2025 00:01:54 GMT\r\nexpires: Thu, 05 Nov 2026 00:01:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 585856\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-05T13:49:31.26847Z","times_seen":184602,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":124,"dns":0,"connect":28,"send":0,"wait":29,"receive":27,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/img/pt.png","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/img/pt.png HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Oct 2025 20:36:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68e2d6cd-10de\"\r\nexpires: Thu, 11 Dec 2025 18:46:09 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxpuZBfb%2BH6XkMw5yF%2Fr2sKh8TND5yPtZAEgGAhb4vomYk7Qhu3hGOEITY9UwZO85D04nVVI2O1eCGO43BfAZiriz1MEFFFo47pB03Xa\"}]}\r\ncf-ray: 99cff3633f1c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4462d684b769cbc0c572f2d0e849c554","sha1":"dde1ca7332ba10cad7af9bfc2ec5384f5427d708","sha256":"c5b841a5b4623410323bf39616eaa5afac0d41d8db4447e780ddec3020975935","sha512":"3723ad4923f3db6ba42d1f9ed6523fed97a0684e1edb429c520e0b9d05d1342874c4556c826b58403605de44f396e33f381c3edd9f31fcc8ed187e9d1ba2cce6","ssdeep":"96:kQjSaSo7eQ0upmCx35M+eIgSWkZVpKOhwfL6YRmgN:kQjSah7VpmCpybIukfpjhSLzsgN","tlshash":"87918c45466492712f2eabb78d28cf4a3bb013e1c7e264a2c92fb1734d4aa07f4448d3","first_seen":"2025-07-27T21:41:44.468803Z","last_seen":"2025-12-26T01:27:09.489755Z","times_seen":28,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/jquery.min.js?baoqi520","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:09.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/jquery.min.js?baoqi520 HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Nov 2025 01:00:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69113915-15283\"\r\nexpires: Wed, 12 Nov 2025 06:46:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BRrSUQiWgFG2sr9wKsmAHIIIcDp8l9LZjrP%2FMuTMpoXRFPXKSZ%2FG1lw8YTvqXI8X3eCydEdFauoZeBTaeWRAiDEtdBk4bCyxroDhayx\"}]}\r\ncf-ray: 99cff3633f2075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86659,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-05T13:32:37.263546Z","times_seen":77490,"resource_available":true,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":292,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/static/index/img/login-bg2.jpg","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /static/index/img/login-bg2.jpg HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/index/login/index.html?code=1513116\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 10 Aug 2025 12:57:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68989739-c912\"\r\nexpires: Thu, 11 Dec 2025 18:46:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jxnv8serlv%2F%2FYfUD4xVqlIqpUJIaB5eU%2FOqvweAhr%2Fzdo%2FZFeeOLHozvAeKOX%2B4glxpQG5q77c%2FqFsDmWeev2kUbAscqtEvoMyHPz9Af\"}]}\r\ncf-ray: 99cff368bf5075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51474,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x1280, components 3","md5":"fdac4099ee2d0e727778894bdf53cba8","sha1":"ad712fe55d15e22bbf699fb25d48adeb8cdad485","sha256":"80cb0e137b1f97cbc09d8b543c178fa63bde8d3923c19a02f0e67e58c58aca06","sha512":"78e349dd671fffbfb895ab6b52fcee190404c6d3823052449a23400225b03ce86e99d53099fe50c80196aaec076a242e6ba64b1e59c290723e294402d6d754b5","ssdeep":"1536:iTZyC1hWUye1Y/fZGmMhcI/HRKvACIm6wM:i9vPr36YmMh/RqACItwM","tlshash":"a233e157470c19b9e861613db8ef1738e6132e29f33e91e2768d331bd86d355e98d820","first_seen":"2025-09-02T08:44:35.215922Z","last_seen":"2025-12-26T01:27:09.498737Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":553,"receive":538,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b2bwork444.top/assets/css/background.png","fqdn":"b2bwork444.top","domain":"b2bwork444.top","tld":"top"},"ip":{"addr":"104.21.11.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b2bwork444.top/index/login/index.html?code=1513116","date":"2025-11-11T18:46:10.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b2bwork444.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:01:58 GMT","end":"Wed, 14 Jan 2026 08:00:50 GMT"},"fingerprint":{"sha1":"6E:8E:28:F6:2F:9B:16:C6:12:21:1C:44:77:0A:D7:35:49:83:02:48","sha256":"B4:6E:84:6A:0D:57:B1:9C:A1:21:CB:9F:0A:8A:CF:3A:D8:0A:02:84:F4:B5:F6:B9:00:80:17:FD:A5:1B:3C:EB"}}},"request":{"raw":"GET /assets/css/background.png HTTP/1.1\r\nHost: b2bwork444.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b2bwork444.top/assets/css/style.css\r\nCookie: lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 11 Nov 2025 18:46:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 10 Aug 2025 12:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68989657-20e7\"\r\nexpires: Thu, 11 Dec 2025 18:46:10 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IN02Xpe3zEgEArMh9ik6IevBxA8q30sdTMN89NjCTDR3EPjzIXiEA40B2PSfHcnGvhu%2FjPnzoeIhOXaDQyE5miW7OVa2Rw%2FcLuc%2BN8zS\"}]}\r\ncf-ray: 99cff368cf5175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 567 x 296, 8-bit colormap, non-interlaced","md5":"a4e5edc0329807c1917efca1d1711331","sha1":"7426e55e7f27b14c7799a710b28d2724d5bb9029","sha256":"cc7d716c2fb66a535644cfac9e96213bea1c19f0238bfe0ae6c3ea86a48a47f9","sha512":"485209aa6887a3335a024b327545fa3769ac9d6a3c7e858a5cc07b53d618b2c526f4047f0b96ef365d4084713baa212fc456bc515cd7de8145962adcbda387c6","ssdeep":"192:+F/8totD3ualjJFAYiqNPnfmtkZXVnXTNIlUcEOBw5i+tKLCx:fot3uaBViqsyZpNIlUcm5i6x","tlshash":"fd02bf4c2235b47038542437757e0d399e8692ec26a2a27a179ae486c0bf2fde64dc23","first_seen":"2025-03-15T09:28:11.780805Z","last_seen":"2026-02-06T10:38:06.4458Z","times_seen":21,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":560,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"b2bwork444.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}