{"report_id":"2f86db12-62e0-4a59-8be3-c0347d2cd3cc","version":6,"status":"done","tags":[],"date":"2026-05-29T18:13:33Z","url":{"schema":"http","addr":"f44.to","fqdn":"f44.to","domain":"f44.to","tld":"to"},"ip":{"addr":"91.206.71.251","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"f44.to/","fqdn":"f44.to","domain":"f44.to","tld":"to"},"title":"Вы не робот?","dom":{"size":1473,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1440), with no line terminators","md5":"5dd222b0c985bc9a28026b3446e00217","sha1":"87445d0776848cd46cafb508d5beee2fdd9e9c1e","sha256":"4fde07a6c81d4bd39682c8830cc4d4b49ffab3fe117db78876bb5ef243201270","sha512":"62b10837b0ef6c4b6496be3a2d33112d665affd632cb4b43f0b63514894abc77484d7ff6eb9f0e577b9765c3d6520229cbc61b9dc2ee714877154deaeec58fb2","ssdeep":"","tlshash":"553174332d4954204867db70b4d3eac8d156803af917b890986021744ffdad5cf72e5e","dom_hash":"domhashf17fc353fdf76acc303b34dfc54c6653","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"f44.to","fqdn":"f44.to","domain":"f44.to","tld":"to"},"ip":{"addr":"91.206.71.251","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T18:13:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"f44.to","ip":{"addr":"91.206.71.251","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-29T18:13:20.711223Z","last_seen":"2026-05-29T18:13:20.711223Z","alert_count":0,"request_count":3,"received_data":13669,"sent_data":1387,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"f44.to/","fqdn":"f44.to","domain":"f44.to","tld":"to"},"ip":{"addr":"91.206.71.251","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f745c22b8eb9b285d676b54de141f869","sha1":"3b380fe50a0e1157bfaa3b76ef04ca80c8ad2a4c","sha256":"0e3c46ef176a8c48db02ab9e446429608b74b8e4a5cd7db7ccb554850ab9e437","sha512":"b57f0a8e0efac9745add975681373d06475dc9b1a1bb46dceb314303c436b4c05bf7fb119da949692174072249652a07c0716f30212658bda677d04649c220e6","ssdeep":"","tlshash":"62c02b3b71092c74039bf936503fe3681b35300130011101d414084c4d96b8ce076c89","size":139,"data":"","first_seen":"2025-03-13T21:00:39.55932Z","last_seen":"2026-05-29T18:13:34.274418Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"f44.to/favicon.ico","fqdn":"f44.to","domain":"f44.to","tld":"to"},"ip":{"addr":"91.206.71.251","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f44.to/","date":"2026-05-29T18:13:12.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f44.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 02:00:37 GMT","end":"Fri, 17 Jul 2026 03:00:29 GMT"},"fingerprint":{"sha1":"7E:6C:DA:FD:EB:4A:B1:40:54:9A:2D:BF:80:0A:88:53:2F:84:26:9E","sha256":"D6:4A:1E:1B:2E:5B:D2:24:C7:69:73:C7:57:9A:C5:89:94:A5:2B:A3:EC:04:7C:8A:80:D9:C5:DD:60:40:35:72"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: f44.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f44.to/\r\nCookie: CaptchaH=85c5f61df21ff2777f4ebf90ae0d0e3c; CaptchaS=02D7751693F6D4A8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 18:13:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Fri, 29 May 2026 22:13:12 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: gzip\r\ncf-ray: a03778c2e8431525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1473,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1440), with no line terminators","md5":"32527e6cd4c3c1b15e5903d404ae52d2","sha1":"2763c5ce9a1da6811a9837af392d76bbec42c15e","sha256":"a0c53615bef55e7077cb22bf4a57fc7938a2a335ab74d0a17ebfafdd4e9180a2","sha512":"d916d97e60b3e356d6c244c59427a5bed6a9ce02254757822e5ac2df7a119e522ebc395dafaa622e6685c431c2a9fc8a4d43910445690e4b3cab7540b9f3ed50","ssdeep":"","tlshash":"de3174331d5954205866db70b4d3eac8d556803af907b880985031784ffdad5cf72e5e","first_seen":"2023-11-10T02:27:09Z","last_seen":"2026-05-29T18:13:34.272734Z","times_seen":107,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f44.to/","fqdn":"f44.to","domain":"f44.to","tld":"to"},"ip":{"addr":"91.206.71.251","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T18:13:12.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f44.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 02:00:37 GMT","end":"Fri, 17 Jul 2026 03:00:29 GMT"},"fingerprint":{"sha1":"7E:6C:DA:FD:EB:4A:B1:40:54:9A:2D:BF:80:0A:88:53:2F:84:26:9E","sha256":"D6:4A:1E:1B:2E:5B:D2:24:C7:69:73:C7:57:9A:C5:89:94:A5:2B:A3:EC:04:7C:8A:80:D9:C5:DD:60:40:35:72"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: f44.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 18:13:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\ncf-ray: a03778c179911525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1473,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1440), with no line terminators","md5":"32527e6cd4c3c1b15e5903d404ae52d2","sha1":"2763c5ce9a1da6811a9837af392d76bbec42c15e","sha256":"a0c53615bef55e7077cb22bf4a57fc7938a2a335ab74d0a17ebfafdd4e9180a2","sha512":"d916d97e60b3e356d6c244c59427a5bed6a9ce02254757822e5ac2df7a119e522ebc395dafaa622e6685c431c2a9fc8a4d43910445690e4b3cab7540b9f3ed50","ssdeep":"","tlshash":"de3174331d5954205866db70b4d3eac8d556803af907b880985031784ffdad5cf72e5e","first_seen":"2023-11-10T02:27:09Z","last_seen":"2026-05-29T18:13:34.272734Z","times_seen":107,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":51,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f44.to/captcha","fqdn":"f44.to","domain":"f44.to","tld":"to"},"ip":{"addr":"91.206.71.251","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://f44.to/","date":"2026-05-29T18:13:12.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"f44.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 02:00:37 GMT","end":"Fri, 17 Jul 2026 03:00:29 GMT"},"fingerprint":{"sha1":"7E:6C:DA:FD:EB:4A:B1:40:54:9A:2D:BF:80:0A:88:53:2F:84:26:9E","sha256":"D6:4A:1E:1B:2E:5B:D2:24:C7:69:73:C7:57:9A:C5:89:94:A5:2B:A3:EC:04:7C:8A:80:D9:C5:DD:60:40:35:72"}}},"request":{"raw":"GET /captcha HTTP/1.1\r\nHost: f44.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f44.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 18:13:12 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2019 15:44:19 GMT\r\nset-cookie: CaptchaH=85c5f61df21ff2777f4ebf90ae0d0e3c; Path=/; Expires=Fri, 29-May-26 18:17:12 GMT\nCaptchaS=02D7751693F6D4A8; Path=/; Expires=Fri, 29-May-26 18:17:12 GMT\r\npragma-directive: no-cache\r\ncache-directive: no-cache\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\netag: W/\"5dc58d53-254e\"\r\ncontent-encoding: gzip\r\ncf-ray: a03778c29efa1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9550,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"fc13bf29262c374ef7db0693aee54cd8","sha1":"94467bcc3d811104a981f060aa5f7ef779140133","sha256":"ee59997c688148d1b203423017845a1dbdc37793b724931307a4ca6d5029e7c1","sha512":"b68fe65c15b8677e03f9113ab4b92382b31e9a08da2ac2032dcc346bf96a13fc3b383b75b249ac128184b215f5227bec40170c894b6c98e3ad85b59d66c89548","ssdeep":"384:T57pAyLEDN1ym6AlZ/kDxwInIy9ZY5n9r:TdayYDby1Av8NwIIyru9r","tlshash":"25528ec0a793e37463b1a0fefa0eefccf2488d4c5a6c39a1cd6081b56d94699846d247","first_seen":"2026-05-29T18:13:34.273433Z","last_seen":"2026-05-29T18:13:34.273433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}