Report - 59a2b.bcryptoexpert.top/

Report Overview

Submitted URL
59a2b.bcryptoexpert.top/
IP
185.68.93.104
ASN
#56577 Relink LTD
Submitted
2024-05-10 13:55:50
Access
public
Website Title
DuckDuckGo — Privacy, simplified.
Final URL
duckduckgo.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
duckduckgo.com	1519	2007-11-11	2012-05-24	2024-05-09	36 kB	3.6 MB	40.114.177.156
improving.duckduckgo.com	7346	2007-11-11	2018-08-02	2024-05-09	1.6 kB	151 kB	40.114.177.156
59a2b.bcryptoexpert.top	unknown	unknown	No data	No data	394 B	232 B	185.68.93.104

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-05-10 13:55:22	medium	Client IP	185.68.93.104	ET INFO HTTP Request to a *.top domain
2024-05-10 13:55:22	medium	Client IP	185.68.93.104	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-10	medium	bcryptoexpert.top	Sinkholed

ThreatFox

No alerts detected

JavaScript (24)

	URL	Size	First Seen	Last Seen
	duckduckgo.com/_next/static/chunks/main-d4b13818a262f8be.js	100 kB	2024-04-24	2024-05-18
Pretty URL duckduckgo.com/_next/static/chunks/main-d4b13818a262f8be.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 00:29:18 Last Seen2024-05-18 21:59:22 Times Seen166 Hash 2b5e9a4ed433ead00b5c0d44bf9b84d3 13e089842a3ce534e23092086b57ff5fb67c4002 5bf0a9485dccd6c4f25af2d68a9959f19e48c550fe38b5587bab6823fe5fed53 Loading...

	duckduckgo.com/_next/static/chunks/46481-1b71605a05b28a4a.js	8.0 kB	2024-04-24	2024-05-14
Pretty URL duckduckgo.com/_next/static/chunks/46481-1b71605a05b28a4a.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 00:29:18 Last Seen2024-05-14 12:44:13 Times Seen121 Hash 12469b7a34a96f7635422b334254d133 9b52c94c7131565a55458af1de2f5296b2b7c1d9 95db116ff60bb944d49d6a816b8bf116e44dec78cf961fbf13596fc719660fd4 Loading...

	duckduckgo.com/_next/static/chunks/7379-9d9b0741ad59b832.js	12 kB	2024-04-24	2024-05-14
Pretty URL duckduckgo.com/_next/static/chunks/7379-9d9b0741ad59b832.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 00:29:18 Last Seen2024-05-14 12:44:13 Times Seen151 Hash 77b71de9a3c5bb0f86dd5028c9f54d60 2d1cef6daad52f69e762b02e2c150b40b15b7f89 5503f00c8ca1bb80a8324dc332d1aa254e74e1b7bc5b24392b962018f3d467f8 Loading...

	duckduckgo.com/_next/static/chunks/21006-f9b9db2a951659d2.js	56 kB	2024-05-06	2024-05-10
Pretty URL duckduckgo.com/_next/static/chunks/21006-f9b9db2a951659d2.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 21:56:54 Last Seen2024-05-10 15:55:57 Times Seen114 Hash 60e87d0af3323dab3f95676d258b48ea a798c5e421be76e799b1436e7b2b8418b501f8a7 d60390231bbee673fc0778b3f0ebeed2c0a5b160facc33ce8dbbb07cbb36c2af Loading...

	duckduckgo.com/_next/static/chunks/16085-1c83bec09a435327.js	82 kB	2024-05-06	2024-05-10
Pretty URL duckduckgo.com/_next/static/chunks/16085-1c83bec09a435327.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 21:56:55 Last Seen2024-05-10 15:55:57 Times Seen113 Hash 8b90fdd2ec975cac2e6efcfe928eeee9 e2fe3fd865cd81b5c9293af74d6b557ceb7847fe bc76ad9598e9da9f81a4ec06cbfa2751013534b48f9388560dfd3260c504a277 Loading...

	duckduckgo.com/_next/static/IGMpOptoY-4LEOQTjFNoV/_buildManifest.js	16 kB	2024-05-09	2024-05-10
Pretty URL duckduckgo.com/_next/static/IGMpOptoY-4LEOQTjFNoV/_buildManifest.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-09 19:37:20 Last Seen2024-05-10 15:55:57 Times Seen45 Hash e53e6d282502455737a9935f838ef567 ff16fd2ed140576dc568092e64e4255ba2106087 6108c32fa6ad721c24e9f26fad5235d22e8eaf79e10387c385bf7db503b9e354 Loading...

	duckduckgo.com/	576 B	2023-07-18	2024-05-18
Pretty URL duckduckgo.com/ IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-07-18 10:47:51 Last Seen2024-05-18 21:59:21 Times Seen553 Hash 7cef30dd79b3b889c0f95a601ab59fae ef952b02d8722ad896abc88b02a2ce0ce4febd76 942adbcc961b2a77c456b138789169d574ad7c7adb5fdd157cb1b2e3fe633b98 Loading...

	duckduckgo.com/_next/static/chunks/webpack-e1ecf366946e6573.js	74 kB	2024-05-09	2024-05-10
Pretty URL duckduckgo.com/_next/static/chunks/webpack-e1ecf366946e6573.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-09 19:37:20 Last Seen2024-05-10 15:55:57 Times Seen46 Hash 8c6bd60551f740c9cffa26886540da43 b6adc92f3f7d7add4a0b5a4815e9ab5ca2dea8b2 31f6c9fb64d9f970e4d621ec70110c4ecdb1352988f2f0871c1fe58b09b6604d Loading...

	duckduckgo.com/_next/static/chunks/framework-f8115f7fae64930e.js	130 kB	2023-03-26	2024-05-18
Pretty URL duckduckgo.com/_next/static/chunks/framework-f8115f7fae64930e.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 06:41:16 Last Seen2024-05-18 21:59:22 Times Seen1052 Hash 2148feac62c3267f1acacae3031707c1 8a568d6628a6f94161ab6268799647795e17ebeb 03a41d1f14a05121707d12e64640b67e4dc7d51026f5b0eac7147fc4a3286cd5 Loading...

	duckduckgo.com/_next/static/chunks/49224-2de3d7ae3b973557.js	24 kB	2024-04-05	2024-05-18
Pretty URL duckduckgo.com/_next/static/chunks/49224-2de3d7ae3b973557.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 15:02:47 Last Seen2024-05-18 21:59:22 Times Seen171 Hash 4c2af44948f3d51f3bd3be2146630f82 9ff33410b7e39866b12eca954b62f0abe6a6b627 c542a46c4a65f14262d7a21ab24edc5f4e94dcbb9e855f01e9e45dea5a939df5 Loading...

	duckduckgo.com/_next/static/chunks/34290-7abfff0ef9e8e5d0.js	6.6 kB	2024-04-24	2024-05-14
Pretty URL duckduckgo.com/_next/static/chunks/34290-7abfff0ef9e8e5d0.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-24 00:29:17 Last Seen2024-05-14 12:44:13 Times Seen127 Hash d38bb0102650192bd5274810fd3366f6 5487257e48ca039f31f7cdb459f70e11127453cb 1c61c768d79f4a49502623e13e434f97c4baa66c9d4546c914199c28747b95ca Loading...

	duckduckgo.com/_next/static/chunks/57-e323944a40667bb9.js	32 kB	2024-05-06	2024-05-10
Pretty URL duckduckgo.com/_next/static/chunks/57-e323944a40667bb9.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 21:56:54 Last Seen2024-05-10 15:55:57 Times Seen114 Hash 97ee57920a456b18e2dd4029cf07ad41 98eca7d8c291ad5f173248364ed8cc67d25a304a 7370e1459e8b58421d31a9e4c83389c4e73932ab7ecf4c49167c2e0a2a14ecc9 Loading...

	duckduckgo.com/_next/static/chunks/78597.c875db33140f7df5.js	974 B	2024-01-19	2024-05-18
Pretty URL duckduckgo.com/_next/static/chunks/78597.c875db33140f7df5.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-19 12:14:50 Last Seen2024-05-18 21:59:21 Times Seen224 Hash 28b266e9add6dddff88394bf47b32a87 8e004c3ed876459a25d74fb13b44a394650b25e5 f558a71010b7b51b429a07a9b064b80143007052fb97e3a3b5e09b9aade37638 Loading...

	duckduckgo.com/_next/static/chunks/41664-0c7a5cf8f744007e.js	5.8 kB	2024-04-05	2024-05-18
Pretty URL duckduckgo.com/_next/static/chunks/41664-0c7a5cf8f744007e.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 15:02:47 Last Seen2024-05-18 21:59:21 Times Seen129 Hash 202775d42b5deb0cafcbe2703aa87151 74f3e8b872d728bc21a8c8a8b054e278d7b01d17 184ef7d852a7fd49724e82f19e02cfaf478755c2fb4e9b7fe21b52967146a036 Loading...

	duckduckgo.com/_next/static/chunks/93432-b63c1a9a4c7cd9f3.js	11 kB	2024-02-21	2024-05-18
Pretty URL duckduckgo.com/_next/static/chunks/93432-b63c1a9a4c7cd9f3.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-21 19:40:54 Last Seen2024-05-18 21:59:22 Times Seen242 Hash c99083c449218a792e7d35d79bdab04a a5e667b1f7f007b10a2e8c7e2b0bd682c1234d4e 5e6b258c194c80e2ca1ff39cc10d6de80b1368c3b7779f29671ac5c6ab0f70ef Loading...

	duckduckgo.com/_next/static/chunks/81125-b74d1b6f4908497b.js	28 kB	2023-11-30	2024-05-18
Pretty URL duckduckgo.com/_next/static/chunks/81125-b74d1b6f4908497b.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 22:43:51 Last Seen2024-05-18 21:59:22 Times Seen465 Hash d5e75250b712ffcee9696e9165bda48b b0e2eaa888e672d17a8be01ba19ccca0be4bf8e0 91f423471d13239124f4bce98fae216276c368fae466db3040e061999eef2113 Loading...

	duckduckgo.com/_next/static/chunks/74759-792f3bb5afaced39.js	263 kB	2024-05-08	2024-05-10
Pretty URL duckduckgo.com/_next/static/chunks/74759-792f3bb5afaced39.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 01:13:06 Last Seen2024-05-10 15:55:57 Times Seen93 Hash 7d99d84e8cfc1146c08d24f3731c8310 87037dfd09098a1167464fced9355f06a9673533 1d8eb545909ba1b79113722e7bb9b853a47e12bb52771a778167ff7be0cc5af0 Loading...

	duckduckgo.com/_next/static/chunks/19625-2b45041ff1eb780d.js	8.4 kB	2024-05-06	2024-05-13
Pretty URL duckduckgo.com/_next/static/chunks/19625-2b45041ff1eb780d.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 21:56:55 Last Seen2024-05-13 15:06:00 Times Seen95 Hash f8b532f65be7dcbf8e02905856f8d539 ef9c4448d681d735a720235ba507556135ad6486 81b778555714b95c4d690c2e552cab4091c9c7af6697db9a66447489ec1121d9 Loading...

	duckduckgo.com/_next/static/chunks/57280-20b387a9ef50c865.js	175 kB	2024-05-06	2024-05-10
Pretty URL duckduckgo.com/_next/static/chunks/57280-20b387a9ef50c865.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 21:56:55 Last Seen2024-05-10 15:55:57 Times Seen111 Hash 78a82828e5f75b526fe4ff12795b71a6 69e73337273d1a701f6225d6736248b8e787f23c 8a3824d6b9a4189c02f9fb297421159dd4a475048e0c6d3996a92b294c34a233 Loading...

	duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D-e4d9ef058bf67bb6.js	359 B	2024-05-06	2024-05-10
Pretty URL duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D-e4d9ef058bf67bb6.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 21:56:55 Last Seen2024-05-10 15:55:57 Times Seen71 Hash 58b7429592a1233cd3434e2a44887dae b19a1d2aaaba3b5e160eb7a8634a04755490c519 3328e9db50c4f7c7d387797d5f361fa188a75b55000b7e482341adf7e0fa0aba Loading...

	duckduckgo.com/_next/static/IGMpOptoY-4LEOQTjFNoV/_ssgManifest.js	3.4 kB	2024-05-06	2024-05-10
Pretty URL duckduckgo.com/_next/static/IGMpOptoY-4LEOQTjFNoV/_ssgManifest.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 05:47:03 Last Seen2024-05-10 15:55:57 Times Seen74 Hash b0d9dc38f751934e95882bb626ca7194 8cd4ba26719158aed455dd085f3b18d81854550f 88adfeb1293445a8081a69af6d3db1585a9981ffde63b3b7e616de1abb10dbff Loading...

	duckduckgo.com/	57 kB	2024-05-06	2024-05-10
Pretty URL duckduckgo.com/ IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-06 21:56:55 Last Seen2024-05-10 15:55:57 Times Seen57 Hash 5c6babe30a04a21f309f236093b28af3 db3ba8d193b0134b5a9c16e817166f7027ee4ee2 8651a51d9aefed2fa0550491db99895e21f7b0d5cb5bf839dab365ef2663eb49 Loading...

	duckduckgo.com/_next/static/chunks/pages/_app-50797e260a9bb3c5.js	349 kB	2024-05-06	2024-05-10
Pretty URL duckduckgo.com/_next/static/chunks/pages/_app-50797e260a9bb3c5.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 21:56:55 Last Seen2024-05-10 15:55:57 Times Seen114 Hash 45dabf447bc54c1e1890c9fe0dc54af1 de4443c26ff37961f03da95b9002ff12f035b6cc 30ac961adc87df9242ccebc1e239e0be915bdae649ced276c341ad9069ade9af Loading...

	duckduckgo.com/_next/static/chunks/32998-d4eb9132e10869e9.js	14 kB	2024-05-06	2024-05-13
Pretty URL duckduckgo.com/_next/static/chunks/32998-d4eb9132e10869e9.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-06 21:56:55 Last Seen2024-05-13 15:06:00 Times Seen129 Hash 24fbc733e6cb06d5d1044a12cfbb3ece f597e01a2766898caf326c98cc87a50ae9692479 82034d6e47d674199a2221252ea7429ba414def7a5a8aa3e72ff1430316dde80 Loading...

HTTP Transactions (81)

URL IP Response Size

59a2b.bcryptoexpert.top/

185.68.93.104

0 B

URL User Request GET
59a2b.bcryptoexpert.top/
IP
185.68.93.104:0
ASN
#56577 Relink LTD

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET / HTTP/1.1
Host: 59a2b.bcryptoexpert.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Fri, 10 May 2024 13:55:22 GMT
Server: Apache/2.4.38 (Debian)
Access-Control-Allow-Origin: *
Location: http://duckduckgo.com
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

duckduckgo.com/

40.114.177.156

200 OK

19 kB

URL User Request GET HTTP/2
duckduckgo.com/
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (33150)
Size
19 kB (18678 bytes)
Hash
08853a2094d940836b7fad2a2aeda77a
17d9e7473eecec3ea725518215ec76728e971f9e
d6d12f0397c433d1e506d855b9702ce554b1b00eb147739d9c3c690512448374

HTTP Headers

GET / HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: text/html; charset=UTF-8
content-length: 18678
vary: Accept-Encoding
etag: "663d16fc-48f6"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Fri, 10 May 2024 13:55:21 GMT
cache-control: no-cache
X-Firefox-Spdy: h2

improving.duckduckgo.com/t/page_home_commonImpression?4829979&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&ax=false&legacy=false

40.114.177.156

200 OK

150 kB

URL POST HTTP/2
improving.duckduckgo.com/t/page_home_commonImpression?4829979&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&ax=false&legacy=false
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
150 kB (149634 bytes)
Hash
47efb572a588bedd4548dc425d02a61f
255eedb491ec6b390eeb1f35552dafaeeae33ba3
901da6003e3a921839fb65b094ebf6e4b782242e5a3a3bb630a324fdf139bbcb

HTTP Headers

POST /t/page_home_commonImpression?4829979&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&ax=false&legacy=false HTTP/1.1
Host: improving.duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
Origin: https://duckduckgo.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/gif
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/93432-b63c1a9a4c7cd9f3.js

40.114.177.156

200 OK

131 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/93432-b63c1a9a4c7cd9f3.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (10669), with no line terminators
Size
131 kB (131062 bytes)
Hash
c99083c449218a792e7d35d79bdab04a
a5e667b1f7f007b10a2e8c7e2b0bd682c1234d4e
5e6b258c194c80e2ca1ff39cc10d6de80b1368c3b7779f29671ac5c6ab0f70ef

HTTP Headers

GET /_next/static/chunks/93432-b63c1a9a4c7cd9f3.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-29ad"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/81125-b74d1b6f4908497b.js

40.114.177.156

200 OK

13 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/81125-b74d1b6f4908497b.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (27593), with no line terminators
Size
13 kB (13220 bytes)
Hash
d5e75250b712ffcee9696e9165bda48b
b0e2eaa888e672d17a8be01ba19ccca0be4bf8e0
91f423471d13239124f4bce98fae216276c368fae466db3040e061999eef2113

HTTP Headers

GET /_next/static/chunks/81125-b74d1b6f4908497b.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-6bc9"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/34290-7abfff0ef9e8e5d0.js

40.114.177.156

200 OK

3.4 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/34290-7abfff0ef9e8e5d0.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (6566), with no line terminators
Size
3.4 kB (3398 bytes)
Hash
d38bb0102650192bd5274810fd3366f6
5487257e48ca039f31f7cdb459f70e11127453cb
1c61c768d79f4a49502623e13e434f97c4baa66c9d4546c914199c28747b95ca

HTTP Headers

GET /_next/static/chunks/34290-7abfff0ef9e8e5d0.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-19a6"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/74759-792f3bb5afaced39.js

40.114.177.156

200 OK

88 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/74759-792f3bb5afaced39.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
88 kB (88017 bytes)
Hash
7d99d84e8cfc1146c08d24f3731c8310
87037dfd09098a1167464fced9355f06a9673533
1d8eb545909ba1b79113722e7bb9b853a47e12bb52771a778167ff7be0cc5af0

HTTP Headers

GET /_next/static/chunks/74759-792f3bb5afaced39.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-4040c"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/pages/_app-50797e260a9bb3c5.js

40.114.177.156

200 OK

87 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/pages/_app-50797e260a9bb3c5.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
87 kB (87222 bytes)
Hash
45dabf447bc54c1e1890c9fe0dc54af1
de4443c26ff37961f03da95b9002ff12f035b6cc
30ac961adc87df9242ccebc1e239e0be915bdae649ced276c341ad9069ade9af

HTTP Headers

GET /_next/static/chunks/pages/_app-50797e260a9bb3c5.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-55496"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/font/ProximaNova-ExtraBold-webfont.woff2

40.114.177.156

200 OK

54 kB

URL GET HTTP/2
duckduckgo.com/static-assets/font/ProximaNova-ExtraBold-webfont.woff2
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 42692, version 1.0
Size
54 kB (53973 bytes)
Hash
41bea1a5bf9f18151ebac78d52bfe8f1
ca03133d7684ab526ae40f89c9a1153b59a8b397
2f1247934be433d70d54fc6496101f636dca8eba95b2bc02434645ff171e8787

HTTP Headers

GET /static-assets/font/ProximaNova-ExtraBold-webfont.woff2 HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: font/woff2
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-a6c4"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/main-d4b13818a262f8be.js

40.114.177.156

200 OK

51 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/main-d4b13818a262f8be.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
51 kB (50996 bytes)
Hash
2b5e9a4ed433ead00b5c0d44bf9b84d3
13e089842a3ce534e23092086b57ff5fb67c4002
5bf0a9485dccd6c4f25af2d68a9959f19e48c550fe38b5587bab6823fe5fed53

HTTP Headers

GET /_next/static/chunks/main-d4b13818a262f8be.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-18714"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/firefox-lg.8efad702.png

40.114.177.156

200 OK

13 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/firefox-lg.8efad702.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
13 kB (13229 bytes)
Hash
ec00dfdead7b4ebaedfe9899ea5905d1
ff6b6c17a52b89578fe16e4aff4989a4fda860d3
3123de188014a841f794fce944662c3c1dd4d71cccbc72459e2b9148933b0dac

HTTP Headers

GET /_next/static/media/firefox-lg.8efad702.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 13229
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-33ad"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/7379-9d9b0741ad59b832.js

40.114.177.156

200 OK

7.7 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/7379-9d9b0741ad59b832.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11843), with no line terminators
Size
7.7 kB (7702 bytes)
Hash
77b71de9a3c5bb0f86dd5028c9f54d60
2d1cef6daad52f69e762b02e2c150b40b15b7f89
5503f00c8ca1bb80a8324dc332d1aa254e74e1b7bc5b24392b962018f3d467f8

HTTP Headers

GET /_next/static/chunks/7379-9d9b0741ad59b832.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-2e43"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/21006-f9b9db2a951659d2.js

40.114.177.156

200 OK

39 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/21006-f9b9db2a951659d2.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (56331), with no line terminators
Size
39 kB (38936 bytes)
Hash
60e87d0af3323dab3f95676d258b48ea
a798c5e421be76e799b1436e7b2b8418b501f8a7
d60390231bbee673fc0778b3f0ebeed2c0a5b160facc33ce8dbbb07cbb36c2af

HTTP Headers

GET /_next/static/chunks/21006-f9b9db2a951659d2.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-dc0b"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/49224-2de3d7ae3b973557.js

40.114.177.156

200 OK

120 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/49224-2de3d7ae3b973557.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (23654), with no line terminators
Size
120 kB (120481 bytes)
Hash
4c2af44948f3d51f3bd3be2146630f82
9ff33410b7e39866b12eca954b62f0abe6a6b627
c542a46c4a65f14262d7a21ab24edc5f4e94dcbb9e855f01e9e45dea5a939df5

HTTP Headers

GET /_next/static/chunks/49224-2de3d7ae3b973557.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-5c66"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png

40.114.177.156

200 OK

106 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 865 x 1220, 8-bit colormap, non-interlaced
Size
106 kB (105834 bytes)
Hash
81c041e5dc29d7dc9d16cd7c8e725a24
b9b5c6b0d5b46c991a2078073ca8daac88dfaa84
b8ed057550f8d1298e616296823662a6331de234d77fd6a8db5c421343d043cc

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 105834
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-19d6a"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/57-e323944a40667bb9.js

40.114.177.156

200 OK

68 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/57-e323944a40667bb9.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (31534), with no line terminators
Size
68 kB (67827 bytes)
Hash
97ee57920a456b18e2dd4029cf07ad41
98eca7d8c291ad5f173248364ed8cc67d25a304a
7370e1459e8b58421d31a9e4c83389c4e73932ab7ecf4c49167c2e0a2a14ecc9

HTTP Headers

GET /_next/static/chunks/57-e323944a40667bb9.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-7b2e"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/font/ProximaNova-Bold-webfont.woff2

40.114.177.156

200 OK

100 kB

URL GET HTTP/2
duckduckgo.com/static-assets/font/ProximaNova-Bold-webfont.woff2
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 42392, version 1.0
Size
100 kB (100023 bytes)
Hash
398e125f54e0d48e16ca0809fbfaf1cb
73ac6e1000bfaf013b5c5e3b1bb717142ed21e45
fed15393dbd651cc99ca78f5b0a39a721f143aa61c5ebecec69e520b3a48507f

HTTP Headers

GET /static-assets/font/ProximaNova-Bold-webfont.woff2 HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: font/woff2
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-a598"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/font/ProximaNova-Reg-webfont.woff2

40.114.177.156

200 OK

61 kB

URL GET HTTP/2
duckduckgo.com/static-assets/font/ProximaNova-Reg-webfont.woff2
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 41908, version 1.0
Size
61 kB (60727 bytes)
Hash
bdb39d03661910c1be4309004950b17b
55beed31d58fb78b5762faf86428e0f6e1adeda8
f3a4b4d740f3bc6fc9be76520559135be004bf72ea54e4dd2412889c46a032d0

HTTP Headers

GET /static-assets/font/ProximaNova-Reg-webfont.woff2 HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: font/woff2
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-a3b4"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/flame.1241f020.png

40.114.177.156

200 OK

57 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/flame.1241f020.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 2161 x 703, 8-bit colormap, non-interlaced
Size
57 kB (56916 bytes)
Hash
b2bd05ef5fce31298889cbd6c8ff84ea
e7ad3004b8daf588d5d49bd171d727f3e999d29c
7cf1d090dbdd0f77b93301e27e92e069c75f4ece2ccf8c8593989be74c3cad8d

HTTP Headers

GET /_next/static/media/flame.1241f020.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 56916
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-de54"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/css/8618a82ac0401530.css

40.114.177.156

200 OK

81 kB

URL GET HTTP/2
duckduckgo.com/_next/static/css/8618a82ac0401530.css
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
ASCII text, with very long lines (25272), with no line terminators
Size
81 kB (81042 bytes)
Hash
e3b4812cd650b916743be53b138f8792
31e1ba51390877abc9ef13d30a9c2c231c9c7ec2
7884c039bb7ebbb377f4c4dbeff90771c16c19c63c6e14156aeb5ebeb6edd0b3

HTTP Headers

GET /_next/static/css/8618a82ac0401530.css HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: text/css
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-62b8"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/css/d1021d7633ac8a5f.css

40.114.177.156

200 OK

14 kB

URL GET HTTP/2
duckduckgo.com/_next/static/css/d1021d7633ac8a5f.css
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (45055), with no line terminators
Size
14 kB (14365 bytes)
Hash
da21eb0f063f777c8a9f0db81f444dae
19ef2da4853227e1f46d01b153316b81cff87970
c2ff2fdcc0124ea9a52aa29f4a3ee8c47afdf3f92e3ff4b950d581fd75b606c4

HTTP Headers

GET /_next/static/css/d1021d7633ac8a5f.css HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: text/css
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-b007"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/css/61c8b57d9d79e022.css

40.114.177.156

200 OK

15 kB

URL GET HTTP/2
duckduckgo.com/_next/static/css/61c8b57d9d79e022.css
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
ASCII text, with very long lines (44757), with no line terminators
Size
15 kB (15028 bytes)
Hash
a7782f839a59e07eb466b4235148fc27
a9601707952773adbe91356c26eda97f5f561e9a
98c70a6a6efe846274ccc371ed1236ed3226303228890e66d2f92eadf1851020

HTTP Headers

GET /_next/static/css/61c8b57d9d79e022.css HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: text/css
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-aed5"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/widget-big@2x.a260ccf6.png

40.114.177.156

200 OK

18 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/widget-big@2x.a260ccf6.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 656 x 360, 8-bit/color RGBA, non-interlaced
Size
18 kB (18003 bytes)
Hash
2d6036022d638907d4f9e2580f01d44e
f6b990943e876b3a7a20f378b81a09ab601ee416
2f1091c6161caaf22d718c7f286fa2784fe7c50df6824faeaac4c94caf3ec1d6

HTTP Headers

GET /_next/static/media/widget-big@2x.a260ccf6.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 18003
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-4653"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/night@2x.4ca79636.png

40.114.177.156

200 OK

4.0 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/night@2x.4ca79636.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 134 x 134, 8-bit/color RGBA, non-interlaced
Size
4.0 kB (4011 bytes)
Hash
a624cf1afca6f47138b06bd264dad94a
eec113049f9d98a89257700b904095d4a34b7c67
72cb61508e0822ab4ed4ba679725ad541f5e5a9ae23ec1f6924bc79fb59d06da

HTTP Headers

GET /_next/static/media/night@2x.4ca79636.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 4011
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-fab"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/dark-mode@2x.3e150d01.png

40.114.177.156

200 OK

71 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/dark-mode@2x.3e150d01.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 610 x 1050, 8-bit colormap, non-interlaced
Size
71 kB (70733 bytes)
Hash
53769951d5a8e8cd49572ee696929643
e3b3ec0df2c68daaa59e80524ecfd3eb14a70be5
dbc7b77c3f2d2d5618623f0555e20cef3a7ccd65ca1f2a2fb2a8a058d88d1550

HTTP Headers

GET /_next/static/media/dark-mode@2x.3e150d01.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 70733
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-1144d"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

improving.duckduckgo.com/t/atb_home_sad_impression?647464&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false

40.114.177.156

200 OK

43 B

URL POST HTTP/2
improving.duckduckgo.com/t/atb_home_sad_impression?647464&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

POST /t/atb_home_sad_impression?647464&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false HTTP/1.1
Host: improving.duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
Origin: https://duckduckgo.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Fri, 10 May 2024 13:55:22 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
X-Firefox-Spdy: h2

improving.duckduckgo.com/t/atb_home_impression?5996429&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&ax=false&legacy=false

40.114.177.156

200 OK

43 B

URL POST HTTP/2
improving.duckduckgo.com/t/atb_home_impression?5996429&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&ax=false&legacy=false
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

POST /t/atb_home_impression?5996429&b=firefox&d=d&l=en&p=linux&atb=v429-3&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&ax=false&legacy=false HTTP/1.1
Host: improving.duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
Origin: https://duckduckgo.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Fri, 10 May 2024 13:55:22 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png

40.114.177.156

200 OK

182 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 756 x 1450, 8-bit colormap, non-interlaced
Size
182 kB (182030 bytes)
Hash
b28cbfb17e4ea07600e7fb8baced39bf
5ce5b4b20dd16393458a283087ddcaf317227089
7776228e5b47c3e01a51f3310d0eb74dce8474a675d542151eb1c293e04637d8

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 182030
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-2c70e"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png

40.114.177.156

47 kB

URL GET
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png
IP
40.114.177.156:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 711 x 1123, 8-bit colormap, non-interlaced
Size
47 kB (47334 bytes)
Hash
be16f2c911bfbf8690c7186e7e831444
973c99c53b549ac4c5a0ad95d1ab00b91b517f80
45d5a5f4dc731206ebe200acf3c5583d11424e16d792101e463743ed18a485ea

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 47334
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-b8e6"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png

40.114.177.156

40 kB

URL GET
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png
IP
40.114.177.156:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 900 x 784, 8-bit colormap, non-interlaced
Size
40 kB (40423 bytes)
Hash
153557c559ea2e10b8bc312cce950de5
00d830aa06b8b357054636644a6e2b0b9f77090e
29afd98499e84526fcff99d94a773c134a85eac2e7ff55aafe0583efdde2d024

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 40423
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-9de7"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png

40.114.177.156

200 OK

64 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 756 x 1450, 8-bit colormap, non-interlaced
Size
64 kB (64366 bytes)
Hash
c077f143524f375831d4cbac25f35700
8801e1092762d7ab91971a01079c5805db3f2ad1
f74d30563cfff0df0766be1414b7447acbc0fc75c0b2193481d1beb9b4cf98da

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 64366
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-fb6e"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png

40.114.177.156

3.4 kB

URL GET
duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png
IP
40.114.177.156:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 320 x 100, 8-bit/color RGBA, non-interlaced
Size
3.4 kB (3386 bytes)
Hash
43328fbcaf1db1863e035c954df61fe1
28515558727a6fc0aafd38a8099ea16f8d028e48
d35da75e280946ce036a43024266fc61ce0520766ef29a1832f278708130cc41

HTTP Headers

GET /_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 3386
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-d3a"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/46481-1b71605a05b28a4a.js

40.114.177.156

200 OK

12 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/46481-1b71605a05b28a4a.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (8020), with no line terminators
Size
12 kB (12186 bytes)
Hash
12469b7a34a96f7635422b334254d133
9b52c94c7131565a55458af1de2f5296b2b7c1d9
95db116ff60bb944d49d6a816b8bf116e44dec78cf961fbf13596fc719660fd4

HTTP Headers

GET /_next/static/chunks/46481-1b71605a05b28a4a.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-1f54"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/41664-0c7a5cf8f744007e.js

40.114.177.156

200 OK

9.5 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/41664-0c7a5cf8f744007e.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (5772), with no line terminators
Size
9.5 kB (9461 bytes)
Hash
202775d42b5deb0cafcbe2703aa87151
74f3e8b872d728bc21a8c8a8b054e278d7b01d17
184ef7d852a7fd49724e82f19e02cfaf478755c2fb4e9b7fe21b52967146a036

HTTP Headers

GET /_next/static/chunks/41664-0c7a5cf8f744007e.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-168c"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png

40.114.177.156

200 OK

2.1 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 222 x 100, 8-bit/color RGBA, non-interlaced
Size
2.1 kB (2057 bytes)
Hash
d8d4daddf4461281de30a45fd35e868b
cd3fe05044dbb39d080463a83c746501ab19854e
2b86ffb00f2647d6148c0fb73f9a628ea11b6a4c85e4eed45beec499b351819a

HTTP Headers

GET /_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 2057
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-809"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/19625-2b45041ff1eb780d.js

40.114.177.156

200 OK

96 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/19625-2b45041ff1eb780d.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (8403), with no line terminators
Size
96 kB (95644 bytes)
Hash
f8b532f65be7dcbf8e02905856f8d539
ef9c4448d681d735a720235ba507556135ad6486
81b778555714b95c4d690c2e552cab4091c9c7af6697db9a66447489ec1121d9

HTTP Headers

GET /_next/static/chunks/19625-2b45041ff1eb780d.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-20d3"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png

40.114.177.156

205 kB

URL GET
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png
IP
40.114.177.156:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 2360 x 1504, 8-bit colormap, non-interlaced
Size
205 kB (204887 bytes)
Hash
bb5e516ee8d9bc7a0ca28a6663ca01da
172b7f523c2cfce3481c5c387b057f8c7b1596d1
d4f7ae09b7c9d350e9a11200632fa8d334fe5bc6c0e15b919e385358f8d04ce4

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 204887
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-32057"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png

40.114.177.156

200 OK

60 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 834 x 1258, 8-bit colormap, non-interlaced
Size
60 kB (60280 bytes)
Hash
44ea6d78e236ec73c24bcc10d6d8e9a4
ef3ee4446ae791b59910d8a2ddb1090124469f14
27f6316660455cb0350a2b6d39747cba5c95a7c51bd518955f05407e0326bdc6

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 60280
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-eb78"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png

40.114.177.156

200 OK

99 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 782 x 1504, 8-bit colormap, non-interlaced
Size
99 kB (98937 bytes)
Hash
e6e56defe0b2bc5b17f1172ddea8c14f
2b8f0cd66572b98e1fa19fe82084562abf6d7c6f
157676a3e48297adae13f8b3a29cbbef4537148a76871146b86d4ab8c9db28b3

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 98937
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-18279"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png

40.114.177.156

200 OK

34 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 866 x 565, 8-bit colormap, non-interlaced
Size
34 kB (34303 bytes)
Hash
ed5ac3c5f537de70ae3cf64a391c274e
1c854a5885a7602b7d2052fc9ce932cee7e6bed8
1378964bfef8aaa51321b8a8e3184fbf2e330a64dd1ab703df90a97a8980a6a5

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 34303
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-85ff"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/favicons/DDG-iOS-icon_152x152.png

40.114.177.156

200 OK

3.6 kB

URL GET HTTP/2
duckduckgo.com/static-assets/favicons/DDG-iOS-icon_152x152.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 152 x 152, 8-bit colormap, non-interlaced
Size
3.6 kB (3576 bytes)
Hash
25c443fd913d8172af12119396c494e3
543937df02caa63dc86aa31ee5743052d803268a
f6e52a35e8854ebf14c9b8442302f6f7d5d0063f0215b7210edf4676d7fd7369

HTTP Headers

GET /static-assets/favicons/DDG-iOS-icon_152x152.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 3576
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-df8"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/country.json

40.114.177.156

200 OK

524 B

URL GET HTTP/2
duckduckgo.com/country.json
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JSON text data
Size
524 B (524 bytes)
Hash
ae2ccb22f0dfd32ac4b9e0c8177b80eb
c725bda1762fd5d24ae63391c755cc22e5b7f59b
ef8937900364f0b2b22d339df5a758404c5f17c8abb8c263a196dbb15f04d9b8

HTTP Headers

GET /country.json HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: application/json
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 11 May 2024 13:55:23 GMT
cache-control: max-age=86400
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/country.json

40.114.177.156

200 OK

9.2 kB

URL GET HTTP/2
duckduckgo.com/country.json
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JSON text data
Size
9.2 kB (9175 bytes)
Hash
ae2ccb22f0dfd32ac4b9e0c8177b80eb
c725bda1762fd5d24ae63391c755cc22e5b7f59b
ef8937900364f0b2b22d339df5a758404c5f17c8abb8c263a196dbb15f04d9b8

HTTP Headers

GET /country.json HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: application/json
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 11 May 2024 13:55:23 GMT
cache-control: max-age=86400
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/favicon.ico

40.114.177.156

200 OK

9.4 kB

URL GET HTTP/2
duckduckgo.com/favicon.ico
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with - PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Size
9.4 kB (9411 bytes)
Hash
0a362a1a0cf4cc6bc56d65db8049dd6f
ebfd1b824377525e1588719e935bf4b06349cddf
d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/x-icon
last-modified: Mon, 08 May 2023 17:25:04 GMT
vary: Accept-Encoding
etag: W/"64593070-aef"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 11 May 2024 13:55:23 GMT
cache-control: max-age=86400
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/framework-f8115f7fae64930e.js

40.114.177.156

200 OK

55 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/framework-f8115f7fae64930e.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
55 kB (54796 bytes)
Hash
2148feac62c3267f1acacae3031707c1
8a568d6628a6f94161ab6268799647795e17ebeb
03a41d1f14a05121707d12e64640b67e4dc7d51026f5b0eac7147fc4a3286cd5

HTTP Headers

GET /_next/static/chunks/framework-f8115f7fae64930e.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-1fbd3"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png

40.114.177.156

200 OK

7.1 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 230 x 100, 8-bit/color RGBA, non-interlaced
Size
7.1 kB (7116 bytes)
Hash
0f8f4d746abeb03ed6e96d02bdc5b461
e4931971ad75e3b8e1ef0f0e773a2f89d29a6b9a
1ecf9bec55141bd247c0fafbb971fb45f2d92010015a55dfff72be012d752848

HTTP Headers

GET /_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 7116
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-1bcc"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/78597.c875db33140f7df5.js

40.114.177.156

200 OK

974 B

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/78597.c875db33140f7df5.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (976), with no line terminators
Size
974 B (974 bytes)
Hash
954a8b3e1d52ba54b11592861b8e80b3
f0f3f1184886b9735f5681e97e3ee565b7325cd0
6700a084e6c63d184a0b2794399d12e1158f71f7abd20d313621d1a05db64d65

HTTP Headers

GET /_next/static/chunks/78597.c875db33140f7df5.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-3ce"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/firefox-extension.8e658fcd.svg

40.114.177.156

200 OK

19 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/firefox-extension.8e658fcd.svg
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
19 kB (18694 bytes)
Hash
9946a5b4360b8cd06991061769f8b3e2
b013852c325a789d7ab23ac66bf630de298453d4
20b79af5a0707f000d25afeafd0983ae8adafaeff17ddfad4cc4d29b1759f6ce

HTTP Headers

GET /_next/static/media/firefox-extension.8e658fcd.svg HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/svg+xml
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-4906"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/opera-lg.237c4418.png

40.114.177.156

200 OK

2.9 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/opera-lg.237c4418.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
2.9 kB (2945 bytes)
Hash
5730a6187495225e119137863e2ef034
451de7f1b9a7095530690b2f64fb58f6370ce0aa
ef042b0682c1debb22d2be14670312d765b052577e1eed9478b866c5febb6e6a

HTTP Headers

GET /_next/static/media/opera-lg.237c4418.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 2945
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-b81"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/burn@2x.be0bd36d.png

40.114.177.156

200 OK

76 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/burn@2x.be0bd36d.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 584 x 942, 8-bit colormap, non-interlaced
Size
76 kB (75467 bytes)
Hash
c2ed0f41860ba5e310c606f07b03b858
1cf6c77bca21d1d609f41efaad8af0074c194aba
5a4085c6807113f53e5a3b42dd4d5463125972f435dc1a2158974d924e6d1000

HTTP Headers

GET /_next/static/media/burn@2x.be0bd36d.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 75467
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-126cb"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png

0.0.0.0

0 B

URL GET
duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

duckduckgo.com/_next/static/media/widget-small@2x.07c865df.png

40.114.177.156

200 OK

6.5 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/widget-small@2x.07c865df.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 310 x 310, 8-bit/color RGBA, non-interlaced
Size
6.5 kB (6508 bytes)
Hash
de44007c395d7d6dd18c285fee66748f
cd230a69591d492233decf42f594e3d2b5e1803d
da5dfc5597066f59547f66c371eb04a45a89f525eb441647fcbd66a89996a7de

HTTP Headers

GET /_next/static/media/widget-small@2x.07c865df.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 6508
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-196c"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png

40.114.177.156

200 OK

92 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 598 x 1114, 8-bit colormap, non-interlaced
Size
92 kB (92229 bytes)
Hash
6dfb140084554026c9f09a77f12f2860
3014b06321e100bfefcdf9babf6d95d594f0b88b
7734fd711fa3b761c905c5a950e0d5f215eb6c9ef53da62c2eb3ba4b8f17f9d4

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 92229
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-16845"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/16085-1c83bec09a435327.js

40.114.177.156

200 OK

82 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/16085-1c83bec09a435327.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
82 kB (82376 bytes)
Hash
8b90fdd2ec975cac2e6efcfe928eeee9
e2fe3fd865cd81b5c9293af74d6b557ceb7847fe
bc76ad9598e9da9f81a4ec06cbfa2751013534b48f9388560dfd3260c504a277

HTTP Headers

GET /_next/static/chunks/16085-1c83bec09a435327.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-141c8"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/play-store.e5d5ed36.png

40.114.177.156

200 OK

2.1 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/play-store.e5d5ed36.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
2.1 kB (2134 bytes)
Hash
a1186ad62cd74b50f71413011c393483
aa9454f7acb8996b77c1ba54d5c85d598522075b
68ac001e6b000703025dc8cf60c924f7d69213452d8a1c21d91bf62ae7e16a48

HTTP Headers

GET /_next/static/media/play-store.e5d5ed36.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 2134
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-856"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/edge-lg.36af7682.png

40.114.177.156

200 OK

14 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/edge-lg.36af7682.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
14 kB (13743 bytes)
Hash
2f5ad5adecf0e139755fbd2d821979b9
7d865ef92d718a865891feb537034ce4bb5c3c2e
0fce1fe1d859a94618124fddd15bb069eb0639366039cb1fcbd5992d2faaa0ba

HTTP Headers

GET /_next/static/media/edge-lg.36af7682.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 13743
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-35af"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/safari-lg.8406694a.png

40.114.177.156

200 OK

17 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/safari-lg.8406694a.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
17 kB (16939 bytes)
Hash
c03246acb6a2736f4404fadd86bd7100
e9005aefef550076c87d1930feabd346df00f874
af859db11244c077f3c07ea7e7f779c2f5f2e0676c56603434fe6a61aa751d59

HTTP Headers

GET /_next/static/media/safari-lg.8406694a.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 16939
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-422b"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png

40.114.177.156

200 OK

107 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 670 x 1264, 8-bit colormap, non-interlaced
Size
107 kB (107143 bytes)
Hash
d7a9624777768585b192b954246f2924
22c6430c735aefe12a564a5dc6e36443f496fc04
ec1517af9a6e24b331ae640bc1505e15225a211444940bd87c0016d6e275a6ee

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 107143
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-1a287"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png

0.0.0.0

0 B

URL GET
duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png

40.114.177.156

200 OK

8.8 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 302 x 100, 8-bit/color RGBA, non-interlaced
Size
8.8 kB (8839 bytes)
Hash
ccfbdd7e7ceeaca5d5a27d6e0c3d3263
0f60bff24476b1441b1ae5ea13a27b02f2567762
d86699d34be0976543e319b7f225fee17dc76d064dc3fa00fae7fc1a1129f7fe

HTTP Headers

GET /_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:23 GMT
content-type: image/png
content-length: 8839
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-2287"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:23 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/backgrounds/homepage-btf-light.png

40.114.177.156

200 OK

58 kB

URL GET HTTP/2
duckduckgo.com/static-assets/backgrounds/homepage-btf-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 720 x 500, 8-bit colormap, non-interlaced
Size
58 kB (57621 bytes)
Hash
574871be4b5c92ef0461daae0789b4e7
c51501309fb6b33c8f605dd59c6fad4f58acd731
b2c195a170d953446bcdaeb64b686069a2e95cbcb0de8640fb11cf87c7fb6a26

HTTP Headers

GET /static-assets/backgrounds/homepage-btf-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 57621
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-e115"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/flame@2x.40e1cfa0.png

40.114.177.156

200 OK

4.5 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/flame@2x.40e1cfa0.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 68 x 83, 8-bit/color RGBA, non-interlaced
Size
4.5 kB (4465 bytes)
Hash
d4bf1159e28ef12dfc95f36568b0cff7
7253a9c2183acf7034c9143187868ee77e1b956e
7d41fb3ae633127316dc174bc8f5a003b324c0a27b2427420a0ba79d45cae243

HTTP Headers

GET /_next/static/media/flame@2x.40e1cfa0.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 4465
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-1171"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/font/ProximaNova-Sbold-webfont.woff2

40.114.177.156

200 OK

42 kB

URL GET HTTP/2
duckduckgo.com/static-assets/font/ProximaNova-Sbold-webfont.woff2
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 41816, version 1.0
Size
42 kB (41816 bytes)
Hash
4d5698622d8fb4000a4114f204a22904
41df913c2c8d5e453720376a842f1cd5028cc2a3
d4ffa5e62dd2b9dcb4ed73998595529b1d4f89b265e21d951d2e73d783a673a1

HTTP Headers

GET /static-assets/font/ProximaNova-Sbold-webfont.woff2 HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: font/woff2
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-a358"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/macos.61889438.png

40.114.177.156

200 OK

2.8 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/macos.61889438.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
2.8 kB (2769 bytes)
Hash
b93cb32aa29e53489f1615e1bff5bb42
3b858858b7b34fe56664eeb6fb2f3d200ae5a3ae
3bd380b6d4b042f3bdec48e27612b03b72a51847568162a8cc02e31d0bde80c9

HTTP Headers

GET /_next/static/media/macos.61889438.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 2769
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-ad1"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/IGMpOptoY-4LEOQTjFNoV/_ssgManifest.js

40.114.177.156

200 OK

3.4 kB

URL GET HTTP/2
duckduckgo.com/_next/static/IGMpOptoY-4LEOQTjFNoV/_ssgManifest.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
ASCII text, with very long lines (3777), with no line terminators
Size
3.4 kB (3394 bytes)
Hash
310ecf5d29315199d78d86c00169d220
bfabc75e2b2e871f833b8005af7bcfa80b801d47
b6b54239d070499d69cbe8f410c0b4b20dc44af022c8204d275d348bbd0e560f

HTTP Headers

GET /_next/static/IGMpOptoY-4LEOQTjFNoV/_ssgManifest.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-d42"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/IGMpOptoY-4LEOQTjFNoV/_buildManifest.js

40.114.177.156

200 OK

16 kB

URL GET HTTP/2
duckduckgo.com/_next/static/IGMpOptoY-4LEOQTjFNoV/_buildManifest.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
ASCII text, with very long lines (15793), with no line terminators
Size
16 kB (15793 bytes)
Hash
e53e6d282502455737a9935f838ef567
ff16fd2ed140576dc568092e64e4255ba2106087
6108c32fa6ad721c24e9f26fad5235d22e8eaf79e10387c385bf7db503b9e354

HTTP Headers

GET /_next/static/IGMpOptoY-4LEOQTjFNoV/_buildManifest.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-3db1"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png

0.0.0.0

0 B

URL GET
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

duckduckgo.com/_next/static/chunks/webpack-e1ecf366946e6573.js

40.114.177.156

200 OK

74 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/webpack-e1ecf366946e6573.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
74 kB (73866 bytes)
Hash
8c6bd60551f740c9cffa26886540da43
b6adc92f3f7d7add4a0b5a4815e9ab5ca2dea8b2
31f6c9fb64d9f970e4d621ec70110c4ecdb1352988f2f0871c1fe58b09b6604d

HTTP Headers

GET /_next/static/chunks/webpack-e1ecf366946e6573.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-1208a"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/css/c6a56a9b58645f6b.css

40.114.177.156

200 OK

24 kB

URL GET HTTP/2
duckduckgo.com/_next/static/css/c6a56a9b58645f6b.css
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
ASCII text, with very long lines (24541), with no line terminators
Size
24 kB (24541 bytes)
Hash
548f32c8cad14b0abc9acf9774ee377a
84333783dcb10332897e01747d0bfa894843be07
c5e6914eb111bdd41ae1d2c132e543e27f003e92c2463149c15bae8d520b0340

HTTP Headers

GET /_next/static/css/c6a56a9b58645f6b.css HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: text/css
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-5fdd"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D-e4d9ef058bf67bb6.js

40.114.177.156

200 OK

359 B

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D-e4d9ef058bf67bb6.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (361), with no line terminators
Size
359 B (359 bytes)
Hash
1fe75f6fa0d5181a1aedba0d8d4f47b0
be289ef3bb6e1212cf63f865f10c768d12840405
57ed0d45b900c5bfbbd5788565c44fce5d62670b2dd173e70767d8f9e7a40e6c

HTTP Headers

GET /_next/static/chunks/pages/%5Blocale%5D-e4d9ef058bf67bb6.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-167"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/app-store.501fe17a.png

40.114.177.156

200 OK

13 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/app-store.501fe17a.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
13 kB (13056 bytes)
Hash
73727546a9f348a13031d2bc949e23bb
cc63703ba1ef05070c32229137e70fab7d8918a6
f16ad8e6cfad2b8926de41097901917d24471ad55ac2217b443d7ba19af6d174

HTTP Headers

GET /_next/static/media/app-store.501fe17a.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 13056
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-3300"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/chrome-lg.a4859fb2.png

40.114.177.156

200 OK

11 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/chrome-lg.a4859fb2.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
11 kB (11271 bytes)
Hash
e091111b365226756591f79e57ec6789
5fd793c51295d24def9cfa5859f904bf145bfa51
f4921f3dd41c29ae505c934465f47fa31eeb4f2628696782a0c5b5eed83cf0ec

HTTP Headers

GET /_next/static/media/chrome-lg.a4859fb2.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 11271
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-2c07"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png

40.114.177.156

200 OK

58 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 865 x 1272, 8-bit colormap, non-interlaced
Size
58 kB (58141 bytes)
Hash
00c0c21b1074585d95821c0eea5b61ec
8681eaa015046f783f48fae1805af9d803dea789
ecb9becf438553d4136c18b82eab32a292e60a15f4206fcaea4407ac557b0a19

HTTP Headers

GET /static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 58141
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-e31d"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/flame-narrow.70589b7c.png

40.114.177.156

200 OK

19 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/flame-narrow.70589b7c.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 750 x 484, 8-bit colormap, non-interlaced
Size
19 kB (18809 bytes)
Hash
44e48491a36f26972c2f2d500f157201
f16eb7e3f27c70b6102bb8efb0d26cde4b69ea68
8ead12678e0b3da53db5e0fb298c1a5454866e6ec89e0849d662315aee258b38

HTTP Headers

GET /_next/static/media/flame-narrow.70589b7c.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 18809
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-4979"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/backgrounds/homepage-btf-mobile-light.png

40.114.177.156

200 OK

127 kB

URL GET HTTP/2
duckduckgo.com/static-assets/backgrounds/homepage-btf-mobile-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 375 x 940, 8-bit colormap, non-interlaced
Size
127 kB (127123 bytes)
Hash
693fd6cf691840728e9b69e2484719e4
f5d72efe1690bfd403d69fe8b0fbf2d5ae7ededc
7379bf8b463f46ab8d925e78a0f08ce806caf487fa468f687dda1d2a071d65ed

HTTP Headers

GET /static-assets/backgrounds/homepage-btf-mobile-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 127123
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-1f093"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/57280-20b387a9ef50c865.js

40.114.177.156

200 OK

175 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/57280-20b387a9ef50c865.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
175 kB (175420 bytes)
Hash
78a82828e5f75b526fe4ff12795b71a6
69e73337273d1a701f6225d6736248b8e787f23c
8a3824d6b9a4189c02f9fb297421159dd4a475048e0c6d3996a92b294c34a233

HTTP Headers

GET /_next/static/chunks/57280-20b387a9ef50c865.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-2ad3c"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/windows.477fa143.png

40.114.177.156

200 OK

509 B

URL GET HTTP/2
duckduckgo.com/_next/static/media/windows.477fa143.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Size
509 B (509 bytes)
Hash
95877c3f0436a0c14803d7908d2c5041
8e7a18efa4c1853daa5c9c7e5ce5fcf91381702e
ac420c082866099ff585e804fe2b2ea67e77ea7b3b960dad3200103e5638144c

HTTP Headers

GET /_next/static/media/windows.477fa143.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 509
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-1fd"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/chunks/32998-d4eb9132e10869e9.js

40.114.177.156

200 OK

14 kB

URL GET HTTP/2
duckduckgo.com/_next/static/chunks/32998-d4eb9132e10869e9.js
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (13570), with no line terminators
Size
14 kB (13570 bytes)
Hash
24fbc733e6cb06d5d1044a12cfbb3ece
f597e01a2766898caf326c98cc87a50ae9692479
82034d6e47d674199a2221252ea7429ba414def7a5a8aa3e72ff1430316dde80

HTTP Headers

GET /_next/static/chunks/32998-d4eb9132e10869e9.js HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: application/x-javascript
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-3502"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/image/pages/home/devices-light.png

40.114.177.156

200 OK

150 kB

URL GET HTTP/2
duckduckgo.com/static-assets/image/pages/home/devices-light.png
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
PNG image data, 1984 x 1164, 8-bit colormap, non-interlaced
Size
150 kB (149591 bytes)
Hash
12617aa39b87128318aefa6d49468772
32ef23ad418305b6db993fdd593ae7a12ec4de7d
0d808aecd8d2afeef070cbe93f79678f89027deabb5a414df2421aa7d1c835f4

HTTP Headers

GET /static-assets/image/pages/home/devices-light.png HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/png
content-length: 149591
last-modified: Thu, 09 May 2024 08:50:51 GMT
etag: "663c8e6b-24857"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
X-Firefox-Spdy: h2

duckduckgo.com/_next/static/media/set-as-default.d95c3465.svg

40.114.177.156

200 OK

12 kB

URL GET HTTP/2
duckduckgo.com/_next/static/media/set-as-default.d95c3465.svg
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
12 kB (12533 bytes)
Hash
35f578a2f12174f1c4653af1160b0f23
032243a96c70f1b7d2f8851adf9669ed295f460d
9f66a4eff2062030b217cb92883ac820300a1e061d5fb971c531e6717bb7c505

HTTP Headers

GET /_next/static/media/set-as-default.d95c3465.svg HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: image/svg+xml
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-30f5"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

duckduckgo.com/static-assets/font/ProximaNova-RegIt-webfont.woff2

40.114.177.156

200 OK

42 kB

URL GET HTTP/2
duckduckgo.com/static-assets/font/ProximaNova-RegIt-webfont.woff2
IP
40.114.177.156:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://duckduckgo.com/
Certificate
IssuerDigiCert Inc
Subject*.duckduckgo.com
FingerprintD3:FD:33:24:EE:54:65:20:06:67:BB:D2:C9:F9:43:33:36:4C:04:06
ValidityThu, 02 May 2024 00:00:00 GMT - Mon, 25 Nov 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 42536, version 1.0
Size
42 kB (42536 bytes)
Hash
64fbb6107105770ad34cf8aeab88c0d1
216fa8f176527d06dd5bbd247feea54637df587d
4f9572518c6f22e97dde811faf185b6bbd07d5098d089b173976805b38f92ce3

HTTP Headers

GET /static-assets/font/ProximaNova-RegIt-webfont.woff2 HTTP/1.1
Host: duckduckgo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://duckduckgo.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 13:55:22 GMT
content-type: font/woff2
last-modified: Thu, 09 May 2024 08:50:51 GMT
vary: Accept-Encoding
etag: W/"663c8e6b-a628"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 10 May 2025 13:55:22 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (24)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML