{"report_id":"12900e32-aeb7-42b0-a694-aff85bf38c88","version":6,"status":"done","tags":[],"date":"2025-10-02T06:26:51Z","url":{"schema":"http","addr":"glucweldicom1977.blogspot.be/","fqdn":"glucweldicom1977.blogspot.be","domain":"glucweldicom1977.blogspot.be","tld":"blogspot.be"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog\u0026ia=web","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"title":"financeMatthew blog at DuckDuckGo"},"submit":{"url":{"schema":"http","addr":"glucweldicom1977.blogspot.be/","fqdn":"glucweldicom1977.blogspot.be","domain":"glucweldicom1977.blogspot.be","tld":"blogspot.be"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-06T06:26:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"glucweldicom1977.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"glucweldicom1977.blogspot.be","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.blogger.com","ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2025-09-28T22:32:36.380581Z","alert_count":0,"request_count":3,"received_data":180667,"sent_data":1467,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"glucweldicom1977.blogspot.be","ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-02-01","domain_rank":0,"first_seen":"2023-08-02T01:08:42Z","last_seen":"2024-09-23T01:24:58Z","alert_count":1,"request_count":1,"received_data":10417,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"improving.duckduckgo.com","ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2007-11-11","domain_rank":42824,"first_seen":"2018-08-02T06:09:11Z","last_seen":"2025-09-25T07:55:05.364995Z","alert_count":0,"request_count":25,"received_data":15457,"sent_data":21926,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"glucweldicom1977.blogspot.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2023-08-02T01:08:55Z","last_seen":"2024-12-22T09:18:13.432145Z","alert_count":3,"request_count":3,"received_data":17604,"sent_data":1414,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"links.duckduckgo.com","ip":{"addr":"20.223.54.233","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2007-11-11","domain_rank":46078,"first_seen":"2020-06-26T19:49:08Z","last_seen":"2025-08-10T11:30:00.103273Z","alert_count":0,"request_count":1,"received_data":19329,"sent_data":889,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"duckduckgo.com","ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2007-11-11","domain_rank":522,"first_seen":"2012-05-24T01:23:28Z","last_seen":"2025-10-01T07:37:27.29692Z","alert_count":0,"request_count":33,"received_data":5391046,"sent_data":15385,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"external-content.duckduckgo.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2007-11-11","domain_rank":37893,"first_seen":"2019-10-15T18:30:58Z","last_seen":"2025-09-23T17:34:25.848354Z","alert_count":0,"request_count":11,"received_data":1869,"sent_data":5113,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ulvis.net","ip":{"addr":"104.21.57.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-10-28","domain_rank":736502,"first_seen":"2016-11-12T19:50:51Z","last_seen":"2025-09-14T14:49:30.229661Z","alert_count":0,"request_count":1,"received_data":22330,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"Function","is_inline":false,"md5":"0510c92e726f5678ff161f69b48765d7","sha1":"f527c14fe5f61d70f89916097dadea14a90b1067","sha256":"b784abc3341533fe3e782231f764cb4f6a783250b2ece584a927a3a73a668cda","sha512":"4b01421507472890dc5f1ecb88f76156cd9d3058f8bb5b319cdd9031bab9c009ce391b535ec5762d4ff36024f62d556eb2767f94a3783c6423f59bf2991b66b5","ssdeep":"","tlshash":"19c02b8b0eff209030133452163f5e20447bcf623088f500e809c8cc04f2534c2174cc","size":169,"data":"","first_seen":"2023-04-11T21:53:16Z","last_seen":"2026-03-11T12:58:20.387968Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/b.beaf2bcf9f873f42d452.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8539237b340b64146e9c796f68d6d3b9","sha1":"6df3f2f8e39ac93c23565106b617e7f416ac8f71","sha256":"4f8d7217b25195cba5909ef8c6c900153d7cae412ee3d8e516f06ce746af26ff","sha512":"5e23006856589156c1301bfa9e848ea2bec87942e18608f10e72adf33d98a8ca0737111e681a2584327cd72b986d9bcb68be9fd3fd24e8b92ca96bf168962600","ssdeep":"768:iK//X7gubHbOhuxbYs+BQW0Vc/hC1LMJFV01jh:f/X7DbHbOebYsUQW0VWhFW","tlshash":"4313e9ddb265b0715be772a2283f2217b23e946db08c50587159dad428bdd0fa323b7c","size":43772,"data":"","first_seen":"2025-10-02T06:27:01.035668Z","last_seen":"2025-10-02T06:27:01.035668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/p.f5b58579149e7488209f.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"81061861e28008b28cf6b4bbc3265dd2","sha1":"5f167e01c02fb1bb2f15e1762dc294814d14aa6e","sha256":"6c7334db0f46b3c0b430ee760bb0ceedbfdae65522a5f1d30c9fcd447b5066e6","sha512":"21bc0abed844def04aa4909e2923c9fbc32f2d8ee4f9167353127aec35d7585d199fc335edbe41b4787903141a1c125c4014f9eb7f5d2482e5f921ad2301fce1","ssdeep":"","tlshash":"6ee0cd8e3b042a3c5ae2c15166df3546747766fa4911d41408646c906f34ecfb3767c7","size":297,"data":"","first_seen":"2023-03-07T01:27:21Z","last_seen":"2026-03-11T12:58:20.356004Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.9814.bc8d39a7c3f86bcff94b.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8167c8518c8595f0e676ddb3b5ad7394","sha1":"051e036d15e443f76e131935cb97c6873408c792","sha256":"d6c47854b6270796b2098268bd0d47e3788c61ab3ef63bedcca4d2cf17b131f1","sha512":"e837d9dd4e4aad587af798533c747cbc608959d5c918a50e955703f75b5b2c17dd485c264dc6c72da4dd44c609f02de0eff768b546e82f495c68259b805aff9a","ssdeep":"192:dTCmaQmAHf+1UcGi58Jm7qz+xqABtzaCtBS0C6EBCMoCX1CL/celjZUDoVzZP/Bh:dtFmA+6cjv3eWoSyKtVzbGmf","tlshash":"fc220bc0b4646ebca18a08d89c43908d736db21c790728f1b5f9ec9d1874ac47b3b79b","size":10368,"data":"","first_seen":"2025-10-02T06:27:01.041445Z","last_seen":"2025-11-06T17:12:03.045323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.com/","fqdn":"glucweldicom1977.blogspot.com","domain":"glucweldicom1977.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"38ee2f6ddbe8a478e5795030e72ba35d","sha1":"d332319b04b273e3b9a93ffa22ba9036d59b8e99","sha256":"97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319","sha512":"15610a3ce0ff69817776e355c350aebc006a7744a941c1258fe16a2e73445d964fd94885bd4b50bb2e9ea773a5f95bf1aa124fd90a3252ab2769d2870e5fbb95","ssdeep":"","tlshash":"20d02ef7f4d5ac218809a3200865e9083032e6feb3a08de094c0063a488a8ba9306fa0","size":275,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-04T03:35:40.623114Z","times_seen":96596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/3878540743-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21eece0b7a222dbb78c925531a656c27","sha1":"48d0cc9691ba9b6229b5e4ec20e8a88c43f5af6d","sha256":"7511fc1573d0fd386edba6b764b3d97a7e47eb91ea5beb2f99d0b2ddecec8106","sha512":"197338ee2203a3e54e007d8b5fb5ee330667d86536e7d8f5bf9d150e3f7d1fa0f42fa033abf6f64e20fdbd68c8e7b6aec738fdb046420cbbc1b9608f28878f7a","ssdeep":"1536:ZJVLTvRqRF9UwngQc6MYse/412eRAMwPlH2NrAtSKUnvGYgMBSBWV66dSDXsZAas:oF9USb412eqXsNrPK+gYV8sGJeNNyN","tlshash":"6ee30ad8b79270628373b4b5003f010ff13a74aae84889acb188d9e57e749695677f7c","size":147538,"data":"","first_seen":"2025-09-29T03:21:26.936869Z","last_seen":"2025-10-17T21:16:23.593664Z","times_seen":4190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"155fbd70537323cf34ce616e3fd855ed","sha1":"ac110f9cedd669ed89f444783dbdc845b47fb232","sha256":"4b5c87585d9459e586bed1dd8afbaaa148ebd97b1219f711d0c73865b32a2ca2","sha512":"693972d81169ce0b23aca2e0406e601849aabb8cad9cbd7070b8a05de849a0c908ba28e9285a523ac7cbf09334047215328052fe807e9b00216c69d49554deac","ssdeep":"","tlshash":"b101863cb400b17b3e11d4db08b6ba69434d178150049e7fc85ce53532d880f01c3799","size":838,"data":"","first_seen":"2025-10-02T06:27:01.085084Z","last_seen":"2025-10-02T06:27:01.085084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8450405e4ade779b8d84fadcba76dd9","sha1":"b03fc0e537fbcbd59e2da788e2ae687b74f1cf1d","sha256":"49c118922a49c8cb8815407459466ed236dd05f943856d97966184fa3a47aae7","sha512":"3fae44ca6146993274fe1806c10dfdd08321bdfc8bbc9ec2fb30540f9ea500b44753dc5806530909b624424fddbc6b7697200a055d4c8c8fbd56de32ec315f1f","ssdeep":"","tlshash":"7641ae88c0103ffd412e0518d9b439d597dd62a261ab77b9b159cf2c17e9dd816384d3","size":2005,"data":"","first_seen":"2025-10-02T06:27:01.086709Z","last_seen":"2025-10-02T06:27:01.086709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f3d36204b72914fc918638c4e1a66fe","sha1":"0985f82a70e0ba6c4f19e9d51444e3b2f3f4b076","sha256":"934b68707503e8879a968b5af2057f78b7b4882174d6349e47efb92f287baed1","sha512":"c66841f8c0b18b6658b8e654fbc992c5a47f415b443e79bbd9e46fbb26b9c185217cef1ea62ee0593a3eed3de224b76f52ce1f510fd96582b07eef5471923dac","ssdeep":"","tlshash":"f6d05e2d460c74ad98958778c1149a0c56ae0d3e3185b601cccf294269b70e1532004b","size":253,"data":"","first_seen":"2024-10-16T08:23:54.121307Z","last_seen":"2025-10-08T23:48:02.698037Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"links.duckduckgo.com/d.js?q=financeMatthew%20blog\u0026l=us-en\u0026s=0\u0026dl=en\u0026ct=NO\u0026vqd=4-20083712301349773718473246314504997642\u0026bing_market=en-US\u0026p_ent=\u0026ex=-1\u0026dp=NNGZlJhvPPs6GRQq9vBVY1YJ2sOZMuyClIm9au2C7Zj6CCQh4smKaWynNzMv6y8fHZHyxPf7Ms9IGivBTjHwgrIyYsKCY4Klhu8YqjQcAngwflfno4BIWEW2PCQcEqGPqj0YVmLZM7X2KRh5LhzSew.F5UT8OGHiGJ3ZIlKFFjH2Q\u0026perf_id=9ba1aba285f12e9a\u0026parent_perf_id=70796eb20b3f8bbe\u0026perf_sampled=0\u0026host_region=eun\u0026sp=1\u0026dfrsp=1\u0026bpa=1\u0026wrap=1\u0026aps=0\u0026biaexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026weatherexp=b","fqdn":"links.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"20.223.54.233","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4079845a0f22d7f9cf5c9666d11f1bfa","sha1":"6b9d7023efa6c8f0431d1681d7bf9024d1062c11","sha256":"679c6fccddc7e382d8078f868d55adcf59339649b08cae83045727ce8962a3c7","sha512":"059baec30bd002b4646dd31d4eaa19c7caeca5c45f903729898ed137ae3316e23d0b8a729514d7898eb117fe9f42ef2875c151be464e5ef0274a0cccbe877984","ssdeep":"192:HeHir+cflX4iMBccpOpbJF+oDoSaglRE4ynSvr1vBqsLJW2851t:AY+cgB6dTh63SD1vBqsLJLyT","tlshash":"0272d7771a5c31a69fa362c8709fbf4cc89a632bd5d0c8f1c655dc08c3a647753e22a9","size":16882,"data":"","first_seen":"2025-10-02T06:27:01.076857Z","last_seen":"2025-10-02T06:27:01.076857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/g.ae0ecf6f7944642771c8.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b828700f42cd9b60851d933be9f84770","sha1":"64aeefdfe62c7fe2af744dbccd1d1eeaa6ff04e7","sha256":"ce1e15a1b3892bfe23e68a67e5f650ff3fd75934fe2bff6cc2862feaeaa3da77","sha512":"5550f16ac5d7a353f157703c341578f12355e801a9694e7af88734684287ddb5975578a290d3c8d6cecadea0684e295ca8541456aff83626f76213f4e8c673c8","ssdeep":"6144:R1Ey2eUIcR31QgRB52toiTimqoRZvUvxpjS1M/whsFsTVruXMRte+AkkD5HMQX:Y1RRb2TTiEvUpEduXMze+AkkD5H1X","tlshash":"00e43bcab174b86642ef60a4f80f2605a27ad25df44e0148787c85ed7578e0f723bb79","size":688129,"data":"","first_seen":"2025-10-02T06:27:01.069069Z","last_seen":"2025-10-02T06:27:01.069069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.duckassist-ia.9f373a52e0170703eb93.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef1722bd9fd7814339e30408d6f2ec58","sha1":"237480ab5b032ac440d3421be40759ff74816a2a","sha256":"9f27d4abee5de39bf03256c965ba7ea02c0fb1097e90b670160c46457287ab87","sha512":"4bf2033a62b6130336bd6dc3565df99578376b66b50ac0b380dff353d46cb20972f318d94e61094c6215c0858ae2ed0adc77d7cf95699638878fc2c1f245c401","ssdeep":"768:TVkSU6L7sDw4xdiyleOWOMRZV6X3T5p2ttVmakv28dWhLiGjgpJ///BZg/d2cZW9:TocES6Dxlw4","tlshash":"dce21b40d509ee79f23688f4913b852d722e3718b5499060b66fec8819e45c6b623ffb","size":33300,"data":"","first_seen":"2025-10-02T06:27:01.064151Z","last_seen":"2025-10-02T06:27:01.064151Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab40a4956484e25796bebaf53876ddb2","sha1":"ca3053daaf01e32d797ac368cfdb5ef0411017c9","sha256":"c59358ef098cd5ce1a049d1279697526d30d721dd0da7431f988ed3c159fc9c7","sha512":"9146c463bec6fa45bde3ff442edb05f9bf34805a19408f13d9eae73e512d7d156a37068f0914ecaa32622c3523deafb7bd520130d0af22717b2040aa2ea52608","ssdeep":"96:YwJjHqIGZkktkKt8wgU6kSofRk/C3oIo9hKQDr9krhRoNRd:YwpHO2bL2ZoIF2d","tlshash":"f0b1ac1d40304b61b9bc1df2b85fb91f8af844c3885485c4c2762a5d8b4f537e7626d6","size":5118,"data":"","first_seen":"2025-10-02T06:27:01.08975Z","last_seen":"2025-10-02T06:27:01.08975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"be0f90ac2e1e227de0b517dd6225a7d8","sha1":"ea280745cac03c62bc7d6fb8499bf7b03f833105","sha256":"83e8f544feab010c6d323dd75292d557e2146c1d65eb469896701335c11528af","sha512":"3b03c7a9a4bf7405fdeea32b9393ab990179d0b8515a5eef98750843a198681cab581330e27cb59ea9b152012c3b391a381d03a1c8164aa247107c44d2eba53d","ssdeep":"","tlshash":"3da0024104a664f713200e52a2a32f023d91926c41e0ba1c818d269130b0143ca669c4","size":62,"data":"","first_seen":"2023-12-05T21:02:18Z","last_seen":"2026-03-11T12:58:20.394351Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b987dce28acc2c6213635814be74c758","sha1":"c8617d632684d82be5b445199c99d0593f78874a","sha256":"58d15fafa744becb301d35f8fcab57a75019237fd9bac9ffc185fb2cdd686677","sha512":"45db6c602d9d0ffceb27d657ee98ab88e408ef7f102883f053a2fc4fac4763793fde203626d44034bff2710c3108ed8e887054fc56c799f09a78a7266227ed68","ssdeep":"","tlshash":"2e9004444c405cd00c74151007137f11f14514051cf31d15c47c010ddcf3107141d543","size":44,"data":"","first_seen":"2023-12-05T21:02:18Z","last_seen":"2026-03-11T12:58:20.396225Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a96c9de7ebc2f242b92aed54d1e5c0c3","sha1":"c1dc828ee09f83fe2c47eb26de94c4ee4b491705","sha256":"63bd2bccb728f4adc94245ac32eed72415a4d7b1100a25047988ecb8f4876e93","sha512":"912d5e031d0ca59d397e21e72d0514ebce61834991bc658f338790bd4d61a2fc009aec320035d407f85067b0f4e00ce13c693f3fc8224b5e51dc6529ca1eb314","ssdeep":"","tlshash":"d8c0120005980a2b046b8019a0f87f86ba8cd863f6888c38d300ae0f45da0222298296","size":160,"data":"","first_seen":"2025-10-02T06:27:01.093869Z","last_seen":"2025-10-02T06:27:01.093869Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"99b60b3c9347df9cbdf931eaf8766ba6","sha1":"51abff53da175defe379f3ad7644884b9b944696","sha256":"4a3de808aa27a2de5388f9b3e336f69f1bd181c3f0dab5774f895e6df6457905","sha512":"3dced4da60059762efe0031d35560ca8bd8eac554f64d6b9fdb2d1f5a535ba324c543dc922182729ec2f387826714217e9bb2d856c8a5915383223062bb7463a","ssdeep":"1536:VEPZ6+hzDE8i8oTpaB1jTmY6/hgeO4utLIDvcxxD8QF/yPUXI+hii2iev8RN7VkT:+Yd6K+k2hiSGQNay+e8IEWU","tlshash":"45d31ccd72c6f06243ab30b9107f540bf23a6959680d8854f169d8e5bc74a4ea27bf7c","size":136192,"data":"","first_seen":"2024-10-16T08:16:52.681055Z","last_seen":"2026-03-11T12:58:20.319289Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpmv.82f85500ed5c1c787b92.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d38b62f52c536754332f28e99382ffe7","sha1":"00cfa0fe4cd62e359aa0c75c8eff00486dab4696","sha256":"c0e97ac9e4d041f7a3fbd41127b503f815da261aa9cad4506ce9d89b1c821b67","sha512":"b7aebc8f0aa98f46d8c838db23ac3ecf65ce5aa5ef73c802c272eec3eec0bf493c79569e1d929c00e344fc552f806d137bfa8b333b6427041cd003039296b26d","ssdeep":"12288:EuAewRDrnEI8QDUesvcOpNZlvLe6WUI7EvmI:pAewdrEI8QDUesvPPdLbv1","tlshash":"c8153ce4b338b5dda6b7805f81bba805b33e7129301e4560e65fe994b0275c9f327e60","size":890433,"data":"","first_seen":"2025-10-02T06:27:01.067466Z","last_seen":"2025-10-02T06:27:01.067466Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.1619.e4e6f69abdbc1ef9618a.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1506a9fb09dde1ba268d6f5b027b44c5","sha1":"b7e7c61cd6a23705f22a968f7cb72e76644fa7b7","sha256":"88023527c7af4eb337fb0118d44d89347710d8160a336fb24fc423ca42bcf5a8","sha512":"3576bb72acbe3aa28fc5196a6faa48a44eda13dce9d55eb4c0f0a27c0b91ac3499eec101c4b220c6e36be2863c43aeeacd85c7071cdf90c6c1aa86fd1fa21641","ssdeep":"6144:mSzUGTtqbiHDOTIBMW2InFneMxpgz3uFCKiSiEAMlpYz1:mPGTtsiHSTIBM7InFn/gz3IiSiEDb41","tlshash":"2cb44bbb328078a576538a8790bf2307a07d6d5fb109c471f7b4d8a3ac669971027f6c","size":498494,"data":"","first_seen":"2025-10-02T06:27:01.028579Z","last_seen":"2025-10-08T23:48:02.655004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/d.c8ca4b06cebd0c0d5d8f.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d576e6fdbd4bd850cd12901e62f312","sha1":"a170f28386eaa2a3535a7382193f9da87db98270","sha256":"4294afb56203e257b020e3b5b4fc900a549c83f57e0edd77cef25198648f3eac","sha512":"a8a60fceb8bf7837da456180a15576ee5456a471e888145b73dcf1e57f388aae32e7ddc5e4a9d663b032907da4d971c8e797267f3f32c78147178555fea093d5","ssdeep":"6144:O/lFxNX8mehNki9ShBdRaKvmUwea2GWQkWDO:i8hNkZfGWQkWDO","tlshash":"56944cd5b098b42b023b5194ec1f2505937ab694d44a0214bd7c8bfdba6ce8f312bf79","size":443506,"data":"","first_seen":"2025-10-02T06:27:01.039455Z","last_seen":"2025-10-02T06:27:01.039455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/s.33a0c98b0e2d3e0b7f5f.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"460baea11ec040b57bb8fc59cf03a7ef","sha1":"f4946d04c0fce70191ae714da9263056d7cc8db5","sha256":"5f9ca2dbe36239148e5e1bf74778849592fdd00e5ca8b5b3da68650025e845dd","sha512":"41463b3d6ad4d7e9aff66d46ff5ac62c768d4afe59a4c112da4eb4bf9e2da153de6a1663784845caa2dd8b22e55ebc03fc56b91b4b4363c1928b5a3d2b173a89","ssdeep":"768:xLRup/vc65d7szwZ0X4uz1GPLzguv5uK5C36Y80322IA2zMjpifeblquBetee92v:pRupn9dp0IfLUuvXC36Y803Gib0S","tlshash":"cb43e9d67014fa3a439b54bcc04a5b05113af329a526c03876bce9e8b769cc63277b76","size":57964,"data":"","first_seen":"2025-09-09T17:58:21.955626Z","last_seen":"2025-10-02T06:27:01.070967Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.com/","fqdn":"glucweldicom1977.blogspot.com","domain":"glucweldicom1977.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f488687f23b8b2ad6f1d05c2d07b2735","sha1":"9fc276898b78f841cb27d76da4f17dbe8c77aefe","sha256":"9153ade8a8e5db45d8092225fe85f04f6af83889149e2f735d1815268a1003c9","sha512":"de641622763436813ae87369ae73c0f2d7123835e07e67005a30b4bc76dccf76f07be9c35b78614275144015af1f491458cf292e060df5ef74cefbeb267e7ce2","ssdeep":"","tlshash":"690189137108e71422a314347b8bba18fd2ac2520895453b391cf5324f07b63ce96be3","size":798,"data":"","first_seen":"2024-02-05T14:31:36Z","last_seen":"2026-04-04T03:36:30.064865Z","times_seen":65658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.com/js/cookienotice.js","fqdn":"glucweldicom1977.blogspot.com","domain":"glucweldicom1977.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-04T03:35:40.618328Z","times_seen":109062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/locale/en_US.bd4836e2427abbd6e4526a9704f3bd79.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d882592f2cd191b00cec095d44e746f3","sha1":"22d9fddf96e7477395b06bb903f6273e2d3576f9","sha256":"571c196c5f5aa4348de5f26c36afe5da415a5926e13305c1ae42b91e9afe5181","sha512":"e410e646635aca1ccaa180efd2cea0a311873a0760002750b93e8fa32cdf54ec1f9d533def8eeffa3c0f9d0dd302ab96e9cc853ea796048d966a4dbed64137e2","ssdeep":"1536:n10GUNpvnLJOdWdmpFfe3C3WihvY45QmrnvNM+xDp4mYzYh:1LUNpvnwIdmpFf/NY4rW+x14mQ2","tlshash":"fc0450d6d5942e270d82026dae31ff87edac30e73328427358fe8d68d3f5995122a58d","size":174876,"data":"","first_seen":"2025-09-09T17:58:21.925274Z","last_seen":"2025-10-02T10:03:03.993401Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.main.bb5efd86c007e29dd484.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f52c1d4191abfbf15b84c65af048e51f","sha1":"627f822fb9d59159d677312073a69ed8ab52780a","sha256":"f9b96f0ea009cb76a124d6b09e9b872b64769e99f5070589e4ab8d44c4e9444f","sha512":"903b3a2324d9a78088fb7a98e2d60342564694ba34f113df646b29d770cf3df29ac288009950b5dc3d6d52243c0059d5ae66d6db7f83325846c240d5bcf0d5c6","ssdeep":"24576:y4YqhNEh2c/Zsj4K8IQgv1CtomZzFooCisKnflBxDL+5W3R:y4DhNEhH/ZU4mQg1CtomZzFooCisKnfX","tlshash":"17357e85b265b5ed586308e6c53fa80df32d3e04741ac150f26ddde8648a5cbf223f6a","size":1090110,"data":"","first_seen":"2025-10-02T06:27:01.096268Z","last_seen":"2025-10-02T06:27:01.096268Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.com/","fqdn":"glucweldicom1977.blogspot.com","domain":"glucweldicom1977.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c2ac2e4555b414df4d3994f57dc7c00","sha1":"23ea2aeec37868585e71b6c93da8786e9b9110f4","sha256":"c71576b297fcd44a6418b89e1d9bd59d01ec637ad7f0249aa3a1ac9a6cdae7e8","sha512":"374515b9e2c6521806689455554628b186f7618a2ff30c38fa941034767bc3982da74f49785413be233242a85d83af524ef47f68495a76878b9d875229d1507e","ssdeep":"96:tNntWRW3WLgWjllbhCoxw7FyHTUOwjDBRq2Ex5u4AhqcNHllL+WRsciEL2LgJx/S:vtWRW3WLgWjllhGyI/BRq2ExChqcpllw","tlshash":"17c123c3a4bd60f65faea99ef01dbfb076864d05cc82b9668c655874230df83a854f60","size":5940,"data":"","first_seen":"2025-10-02T06:27:01.097846Z","last_seen":"2025-10-02T06:27:01.097846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.com/","fqdn":"glucweldicom1977.blogspot.com","domain":"glucweldicom1977.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"7688ca9eb3ca1c878821b1e3fe2c23d7","sha1":"2c41fd7e9f8312d6fed18b21e1a0589413e35553","sha256":"793bae9539499e6e02187febbd2e20fd17dd40260033f5175dbfc2f294440d9a","sha512":"2c8eb7f338f85c2fb760cf69c062669cf5b75609e12799b55dfa6994bc9be6fb16695c8d6ad5fb53ca45ea30285b37ef17beadf62bb41480a61dc0fe5339032a","ssdeep":"","tlshash":"9480002888308020000bc30c0203c8c202320c0f02cc2202ac02800802e03200802c23","size":27,"data":"","first_seen":"2023-04-10T15:53:31Z","last_seen":"2026-04-04T03:36:30.067518Z","times_seen":68636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0786a517c217c0668e1eadcac20045ac","sha1":"ea1b0aea9ef95d663a61bbbdd5b02969df960192","sha256":"f3ed1e00141690007af58bdb9513d49d45217efa1cf9eb608d6b341dbac8a760","sha512":"5306e6752ab3eef16cef451bf89f8f730309fe08d75f355a1c8235454bd0601ce18ba1ca65d0fd6d2e69860a475112a16fecca31e8913d428b72922d6ac1cce4","ssdeep":"96:N/L6SxXnLmULgSkqQpYrq+pZdvUNTCnHNbe4JzL8HVA6rbrASN:RLzpHQpYrxeatpniVPbrVN","tlshash":"c0a16116a62e501786893038cf3bf5ca79a06926192194cefc5dc0cda4b45dbcb6dcf6","size":4699,"data":"","first_seen":"2025-03-29T21:15:39.748472Z","last_seen":"2026-03-11T12:58:20.401413Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a0b1cb601d8fbc6743aa6af1219cbcb","sha1":"a1b3397c63c1ae92c237d60a4054b656b5979861","sha256":"4ba2db5a7957e3dcae79827abb61fafa81199b810f63712d00711ed800065971","sha512":"4db12d4dfe123c2375364eb85c2f5dce236fb662b23bfaaa7cfce210f1176e6bbcfe6bf6666858db5a52fe0eca3205df6aa1035a68c82a718f76f48868014a96","ssdeep":"","tlshash":"42e07d88fe68c7f326ce1571615b770c54d205d2981b5c010cdbccdc6930f9c22d157a","size":302,"data":"","first_seen":"2023-03-07T18:40:25Z","last_seen":"2026-03-11T12:58:20.402024Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d6793137f124d8a03d0fa1481b29255","sha1":"b70a5d84536c5d8bf84423f8bf6913ab0958c442","sha256":"8fd661c30c8821fded036408cd6094432801b111f5402f53512484683c73f1b2","sha512":"16234fd6be1b6b129bff3baa1cb7fb7daa4c3f37338e0a4e73b13155dc0b651fcc56ec4c28acb15da924da3277fb971ee158c4609468b732b6d7af3008245e1b","ssdeep":"","tlshash":"48b0120d820084745439b5ff9524d3b5057e8b483a052b01d13ece112e068494516ac3","size":97,"data":"","first_seen":"2023-10-14T00:32:36Z","last_seen":"2026-02-18T05:00:34.530252Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/util/u.7dd789dac532271f0f13.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"33fec41d94d191d74cee6270ab0d0774","sha1":"1cf6bcbc00fe07641303c0154f0ec8e5e46fc61f","sha256":"3150b8d43ce819f9c3b92318c65b70a74581c0f394d13f65e36879d02ab78e85","sha512":"b96d2511672974baaaf4b910c580348705b76449f7f2446df4019c7c4e1b021c6ef74c76da566ba576b8cbdef9a8df607f6d3c9866fdaf72d639e8289d629de0","ssdeep":"1536:QRiYQNb1H5gm+Re1kP7V5QFTajePVL8fs6FylPiS5GzYu05r2e:XYqi5SprcsCy1hGP0f","tlshash":"42d32a5da5d2eb7d02a21191784b520bf13e1615b15c8920b6eadcc52eefd0c632fbbc","size":131397,"data":"","first_seen":"2025-10-02T06:27:01.079648Z","last_seen":"2025-10-02T06:27:01.079648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"eventHandler","is_inline":false,"md5":"3db05714484bd759c3efe337c1ec2c31","sha1":"432e5e6b5ad4b5b61a0a89b65fb828f53765fdfd","sha256":"bcc373c37ba8d0f9f183f93b36fa60a091107cc47c257daed64feaf45c66b3f4","sha512":"7e61d78fcea5944c5c28851f4eb996f89bb19f2540449de7029e0428b5b0b5cf12d2d59524067fc2a187d69038d064a29b8391957b2f2f53b6dc5eab10f969af","ssdeep":"","tlshash":"4a800082200280cc23208a0a22aafa0a308082830a32c02a0b20300cf0b0c8383a88e2","size":28,"data":"","first_seen":"2023-08-30T17:22:52Z","last_seen":"2026-03-11T12:58:20.392818Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"duckduckgo.com/?q=financeMatthew+blog","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-02T06:26:31.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /?q=financeMatthew+blog HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=43;desc=\"Backend Total [n]\"\r\nx-detected-query-lang: en\r\nx-duckduckgo-results: 1\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Thu, 02 Oct 2025 06:26:32 GMT\r\ncache-control: max-age=1\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21348,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (18567)","md5":"49635fd03e698f030e3cd1ec72fd22c4","sha1":"52d5b962d5f927dc61df15dbed7a8bc2178ae418","sha256":"49550870addfa8d8139875268b3dbece46364de565e5a5f20c41fb8448420001","sha512":"874d440272c4e85a07b42f454e5a7e2db7f3b36fdf7f67db39a30e7690750052fa07971faf5f9c86a6e0e16de6b5b44974d07f745918440de18a99f916a8eef4","ssdeep":"384:i8OoKXPsjSgV7sYA3NqZTgoDqs0SWx87P6NG9ZIGilea80xhxyEnoQBEnkN/p3X/:ROoKXPsjSgV7sYA3NqZTgoDqs0SWx87Q","tlshash":"19a21b094824a9b7a53918f9f87af49ec2dc51038812d8d4f0ad8a5c13e9ddbcb599f3","first_seen":"2025-10-02T06:27:01.015051Z","last_seen":"2025-10-02T06:27:01.015051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":58,"dns":2,"connect":27,"send":0,"wait":74,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpl.main.dec786c63e5f0f9847eb.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpl.main.dec786c63e5f0f9847eb.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 50067\r\nlast-modified: Mon, 29 Sep 2025 13:28:50 GMT\r\netag: \"68da8992-c393\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":353366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6d038a3ca91d2b28b521d84f44fca5e6","sha1":"c451f391aec77013a5d50045f81cdee42b11bed5","sha256":"d91ec9c69a8dbbd7dab6acd934078bc5bc8ab2b91f1cc4a4a1dbcf51085decbf","sha512":"ea51aa314adc2101da38b5042039c19ce8fdcb6bf0b577d12a7025b4fc9f05cd2b32cdb828bb09e4ac6f239b68354922c0c57f319f59505d9098021d2f208d49","ssdeep":"3072:iqz+kc7IN8/6er1Xac8HummL0Rslo04ciwG:ihkf8/6eHm50liwG","tlshash":"0874f8b34270522df82bdc211b9ca62c4514f493dd12a7eae912ab35cbc7bf7067125b","first_seen":"2025-10-02T06:27:01.020166Z","last_seen":"2025-10-02T06:27:01.020166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-46ec\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18156, version 1.0","md5":"8a71415883fd28980f0c81d0cc6dd3b1","sha1":"45446bf1f1c2d17e4a28b00ce81f9963f43dda9a","sha256":"42c30588d9adaeee4cea28af0afda91efc7484528c6eea2ce7d591d927fd1a69","sha512":"70500c02c9955944522686bc4935d6f737802cd27f5351b0efac16b7ca4e704a4ac54277974fad83c93240d74c9de5bc0a49710e20ef2297a2b6f9e64933a78a","ssdeep":"384:lWsLI4pNAV7jA2yrgbB5hOFqMym+B7GPDfnnXLK8oGZNH:fpNA2hc1J7G7XW8o2H","tlshash":"8682d085c687a1274697723cae6b8dc2431c8a330c9ec635fb31305f9e751b09f1ca5a","first_seen":"2023-04-05T23:24:02Z","last_seen":"2026-02-06T22:44:10.243221Z","times_seen":373,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/t.js?q=financeMatthew%20blog\u0026l=us-en\u0026s=0\u0026dl=en\u0026ct=NO\u0026bing_market=en-US\u0026p_ent=\u0026ex=-1\u0026dp=NNGZlJhvPPs6GRQq9vBVY1YJ2sOZMuyClIm9au2C7Zj6CCQh4smKaWynNzMv6y8fHZHyxPf7Ms9IGivBTjHwgrIyYsKCY4Klhu8YqjQcAngwflfno4BIWEW2PCQcEqGPqj0YVmLZM7X2KRh5LhzSew.F5UT8OGHiGJ3ZIlKFFjH2Q\u0026perf_id=9ba1aba285f12e9a\u0026parent_perf_id=70796eb20b3f8bbe\u0026perf_sampled=0\u0026host_region=eun\u0026dfrsp=1\u0026aps=0\u0026biaexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026weatherexp=b","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /t.js?q=financeMatthew%20blog\u0026l=us-en\u0026s=0\u0026dl=en\u0026ct=NO\u0026bing_market=en-US\u0026p_ent=\u0026ex=-1\u0026dp=NNGZlJhvPPs6GRQq9vBVY1YJ2sOZMuyClIm9au2C7Zj6CCQh4smKaWynNzMv6y8fHZHyxPf7Ms9IGivBTjHwgrIyYsKCY4Klhu8YqjQcAngwflfno4BIWEW2PCQcEqGPqj0YVmLZM7X2KRh5LhzSew.F5UT8OGHiGJ3ZIlKFFjH2Q\u0026perf_id=9ba1aba285f12e9a\u0026parent_perf_id=70796eb20b3f8bbe\u0026perf_sampled=0\u0026host_region=eun\u0026dfrsp=1\u0026aps=0\u0026biaexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/www.bloomberg.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.627Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/www.bloomberg.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/matthewfinance.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.634Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/matthewfinance.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.1619.e4e6f69abdbc1ef9618a.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpm.1619.e4e6f69abdbc1ef9618a.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 112316\r\nlast-modified: Tue, 30 Sep 2025 15:42:37 GMT\r\netag: \"68dbfa6d-1b6bc\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":498494,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65447)","md5":"1506a9fb09dde1ba268d6f5b027b44c5","sha1":"b7e7c61cd6a23705f22a968f7cb72e76644fa7b7","sha256":"88023527c7af4eb337fb0118d44d89347710d8160a336fb24fc423ca42bcf5a8","sha512":"3576bb72acbe3aa28fc5196a6faa48a44eda13dce9d55eb4c0f0a27c0b91ac3499eec101c4b220c6e36be2863c43aeeacd85c7071cdf90c6c1aa86fd1fa21641","ssdeep":"6144:mSzUGTtqbiHDOTIBMW2InFneMxpgz3uFCKiSiEAMlpYz1:mPGTtsiHSTIBM7InFn/gz3IiSiEDb41","tlshash":"2cb44bbb328078a576538a8790bf2307a07d6d5fb109c471f7b4d8a3ac669971027f6c","first_seen":"2025-10-02T06:27:01.028579Z","last_seen":"2025-10-08T23:48:02.655004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/ias_wikinlp?1117267\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=540\u0026timeSinceDeepStarted=41\u0026timeSinceDeepFinished=0\u0026tabPosition=-1\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026fsig=low\u0026precheck_counts=0\u0026flow=a\u0026intent=0\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/ias_wikinlp?1117267\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=540\u0026timeSinceDeepStarted=41\u0026timeSinceDeepFinished=0\u0026tabPosition=-1\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026fsig=low\u0026precheck_counts=0\u0026flow=a\u0026intent=0\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/iaoi_related_searches?1924391\u0026id=related_searches\u0026fot=i\u0026lot=i\u0026dev=sidebar:slotted\u0026fsig=na\u0026ss=0\u0026sp=0\u0026im=1\u0026ism=1\u0026px=0\u0026ul=0\u0026default=1\u0026area=sidebar\u0026wide=0\u0026index=0\u0026vertical=web\u0026placeholder=0\u0026placeholdertimeout=0\u0026loadingTime=0\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026kp=-1\u0026serp_return=0\u0026bing_market=en-US\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/iaoi_related_searches?1924391\u0026id=related_searches\u0026fot=i\u0026lot=i\u0026dev=sidebar:slotted\u0026fsig=na\u0026ss=0\u0026sp=0\u0026im=1\u0026ism=1\u0026px=0\u0026ul=0\u0026default=1\u0026area=sidebar\u0026wide=0\u0026index=0\u0026vertical=web\u0026placeholder=0\u0026placeholdertimeout=0\u0026loadingTime=0\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026kp=-1\u0026serp_return=0\u0026bing_market=en-US\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /assets/icons/meta/DDG-iOS-icon_152x152.png?v=2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3576\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\netag: \"6722cdc6-df8\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit colormap, non-interlaced","md5":"25c443fd913d8172af12119396c494e3","sha1":"543937df02caa63dc86aa31ee5743052d803268a","sha256":"f6e52a35e8854ebf14c9b8442302f6f7d5d0063f0215b7210edf4676d7fd7369","sha512":"910dc04b6422aae52a4d5294fbf9ae87e65bf678ba36c2ddfcab60cc21f0e37f25a6a01e78a2c0edf9356ec1035166c4f5ec47a5e2ed5a7263a917ece1b6b1d9","ssdeep":"","tlshash":"04714dfd8390593dc0b7a8ff985e8645d49d612089b4fdf1b741bafd84ae5db006150c","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-04-04T01:38:41.337856Z","times_seen":1836,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/moreresults?7162151\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/moreresults?7162151\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/perf?8443441\u0026redirects_count=0\u0026redirect_time_ms=0\u0026connect_time_ms=56\u0026dns_time_ms=2\u0026tls_handshake_time_ms=28\u0026ttfb_ms=75\u0026transfer_time_ms=0\u0026net_rtt_ms=32\u0026cohort=n\u0026protocol=h2\u0026transfer_size_bytes=9227\u0026encoded_size_bytes=6777\u0026decoded_size_bytes=21348\u0026dom_interactive_time_ms=258\u0026dom_content_loaded_time_ms=301\u0026dom_complete_time_ms=952\u0026first_contentful_paint_ms=1954\u0026type=navigate\u0026page=serp\u0026d=d\u0026pre_va=_\u0026pre_atbva=_\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/perf?8443441\u0026redirects_count=0\u0026redirect_time_ms=0\u0026connect_time_ms=56\u0026dns_time_ms=2\u0026tls_handshake_time_ms=28\u0026ttfb_ms=75\u0026transfer_time_ms=0\u0026net_rtt_ms=32\u0026cohort=n\u0026protocol=h2\u0026transfer_size_bytes=9227\u0026encoded_size_bytes=6777\u0026decoded_size_bytes=21348\u0026dom_interactive_time_ms=258\u0026dom_content_loaded_time_ms=301\u0026dom_complete_time_ms=952\u0026first_contentful_paint_ms=1954\u0026type=navigate\u0026page=serp\u0026d=d\u0026pre_va=_\u0026pre_atbva=_\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/dev?8827960\u0026fsig=related_searches%3An%2Cwikinlp%3Al\u0026nerrors=0\u0026ntimeouts=0\u0026nconflicts=0\u0026nextras=0\u0026nsuperseded=0\u0026pole=na\u0026wide=na\u0026extras=na\u0026mainline=w10wikinlp1\u0026sidebar=r1\u0026nshifts=0\u0026d=Entities%3Aother%3Asidebar%3Adisambiguation%3A0%2Crelated_searches%3Amodule%3Asidebar%3Aslotted%3A0%2Cwikinlp%3Amodule%3Aextras%3Atriggering%3A0\u0026q=financeMatthew%20blog\u0026serp_return=0\u0026organic_above_fold=1\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/dev?8827960\u0026fsig=related_searches%3An%2Cwikinlp%3Al\u0026nerrors=0\u0026ntimeouts=0\u0026nconflicts=0\u0026nextras=0\u0026nsuperseded=0\u0026pole=na\u0026wide=na\u0026extras=na\u0026mainline=w10wikinlp1\u0026sidebar=r1\u0026nshifts=0\u0026d=Entities%3Aother%3Asidebar%3Adisambiguation%3A0%2Crelated_searches%3Amodule%3Asidebar%3Aslotted%3A0%2Cwikinlp%3Amodule%3Aextras%3Atriggering%3A0\u0026q=financeMatthew%20blog\u0026serp_return=0\u0026organic_above_fold=1\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/b.beaf2bcf9f873f42d452.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/b.beaf2bcf9f873f42d452.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 12354\r\nlast-modified: Wed, 24 Sep 2025 18:57:18 GMT\r\netag: \"68d43f0e-3042\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43772,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31152)","md5":"8539237b340b64146e9c796f68d6d3b9","sha1":"6df3f2f8e39ac93c23565106b617e7f416ac8f71","sha256":"4f8d7217b25195cba5909ef8c6c900153d7cae412ee3d8e516f06ce746af26ff","sha512":"5e23006856589156c1301bfa9e848ea2bec87942e18608f10e72adf33d98a8ca0737111e681a2584327cd72b986d9bcb68be9fd3fd24e8b92ca96bf168962600","ssdeep":"768:iK//X7gubHbOhuxbYs+BQW0Vc/hC1LMJFV01jh:f/X7DbHbOebYsUQW0VWhFW","tlshash":"4313e9ddb265b0715be772a2283f2217b23e946db08c50587159dad428bdd0fa323b7c","first_seen":"2025-10-02T06:27:01.035668Z","last_seen":"2025-10-02T06:27:01.035668Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/post3.html","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /post3.html HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 136\r\nvary: Accept-Encoding\r\netag: \"68dd7887-88\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://search.duckduckgo.com ; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bd31f45529be86fdabbe43a67cf554e4","sha1":"b242f5f7d18e0a96799529e1ff3e84c9203fc05b","sha256":"7fb37f3598b4b2fc04a134dfaba63fd5a61dbeaf6baae5f8a3a01e4b6324e073","sha512":"351b96cd4d1ee73ff033db27c46a72c4ff424d4d0cf387b0feece6c82e558454f293cef36388e1af702ccc1b826ca7f4dff2849168a653e90fa4bf11337ec154","ssdeep":"","tlshash":"a7c08c9f0c0a8804207098e1a9b2f64850aaa14cc152cc8452e0e4e7c284f8acc432a8","first_seen":"2024-08-20T15:27:44.009434Z","last_seen":"2026-03-11T12:58:20.343787Z","times_seen":60,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/www.rippling.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.625Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/www.rippling.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/d.c8ca4b06cebd0c0d5d8f.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/d.c8ca4b06cebd0c0d5d8f.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 90295\r\nlast-modified: Tue, 30 Sep 2025 13:40:54 GMT\r\netag: \"68dbdde6-160b7\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443506,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"70d576e6fdbd4bd850cd12901e62f312","sha1":"a170f28386eaa2a3535a7382193f9da87db98270","sha256":"4294afb56203e257b020e3b5b4fc900a549c83f57e0edd77cef25198648f3eac","sha512":"a8a60fceb8bf7837da456180a15576ee5456a471e888145b73dcf1e57f388aae32e7ddc5e4a9d663b032907da4d971c8e797267f3f32c78147178555fea093d5","ssdeep":"6144:O/lFxNX8mehNki9ShBdRaKvmUwea2GWQkWDO:i8hNkZfGWQkWDO","tlshash":"56944cd5b098b42b023b5194ec1f2505937ab694d44a0214bd7c8bfdba6ce8f312bf79","first_seen":"2025-10-02T06:27:01.039455Z","last_seen":"2025-10-02T06:27:01.039455Z","times_seen":1,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.9814.bc8d39a7c3f86bcff94b.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpm.9814.bc8d39a7c3f86bcff94b.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 3565\r\nlast-modified: Tue, 26 Aug 2025 15:23:31 GMT\r\netag: \"68add173-ded\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10368,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (10368), with no line terminators","md5":"8167c8518c8595f0e676ddb3b5ad7394","sha1":"051e036d15e443f76e131935cb97c6873408c792","sha256":"d6c47854b6270796b2098268bd0d47e3788c61ab3ef63bedcca4d2cf17b131f1","sha512":"e837d9dd4e4aad587af798533c747cbc608959d5c918a50e955703f75b5b2c17dd485c264dc6c72da4dd44c609f02de0eff768b546e82f495c68259b805aff9a","ssdeep":"192:dTCmaQmAHf+1UcGi58Jm7qz+xqABtzaCtBS0C6EBCMoCX1CL/celjZUDoVzZP/Bh:dtFmA+6cjv3eWoSyKtVzbGmf","tlshash":"fc220bc0b4646ebca18a08d89c43908d736db21c790728f1b5f9ec9d1874ac47b3b79b","first_seen":"2025-10-02T06:27:01.041445Z","last_seen":"2025-11-06T17:12:03.045323Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/ias_news?7469641\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=2\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/ias_news?7469641\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=2\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ulvis.net/x8oJ","fqdn":"ulvis.net","domain":"ulvis.net","tld":"net"},"ip":{"addr":"104.21.57.206","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-02T06:26:30.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ulvis.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 03:08:56 GMT","end":"Fri, 12 Dec 2025 19:30:23 GMT"},"fingerprint":{"sha1":"01:0F:39:E1:F4:53:C5:98:73:9F:A3:13:51:F6:0C:70:DE:72:DF:D5","sha256":"ED:F2:73:15:97:90:85:6A:4C:85:3D:1F:B7:60:7E:34:DF:C8:0F:D3:E0:21:99:BF:71:64:BC:B4:42:5E:9E:79"}}},"request":{"raw":"GET /x8oJ HTTP/1.1\r\nHost: ulvis.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://duckduckgo.com/?q=financeMatthew+blog\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, s-maxage=10\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: User-Agent\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=11,cfOrigin;dur=540\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nmjdfi0Cffv1MMT7OZn6Q%2Fq2Gy7Oc%2BHsvARqbQMIvh6Xs7HxTTM8S99tAIMuNcKDnnMdIbmqxEB3kiVmx%2BBpNLoiPbgkzmI%3D\"}]}\r\nset-cookie: PHPSESSID=0hpme1nmciforg1nsgdrnakui7; Path=/\r\ncf-ray: 988220f038c356a8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":21348,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":2447,"timings":{"blocked":946,"dns":788,"connect":2,"send":0,"wait":555,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/font/ProximaNova-Reg-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /font/ProximaNova-Reg-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-469c\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18076, version 1.0","md5":"9cb812c72d169a407787679df65e85ed","sha1":"cf02893a196b2a6b9581060446b7dcb2f6ac8c74","sha256":"c219a877eb2c47380ba959748793187f3aaed9533061abace5461024cd7d0704","sha512":"92d9e7961ba716191541e1f738f81675d19225772552a374cb9df102bcfdbabc00206ee56a25701df264a47d63b3471106446820ef1c139e04da67be1b2b1579","ssdeep":"384:Hfsuo9tTd6OiE9BjRP3I2WrPKMN7SUaquPjqNrAwh1QDh+tP:Hf92clE9xRvI2WrPKesqubU8ty","tlshash":"a982dfd8c66ded868669e3334081b1caa94c84c757720cf6f625fdd92cec0ac2547b91","first_seen":"2023-04-13T12:57:28Z","last_seen":"2026-02-06T22:44:10.237214Z","times_seen":365,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/locale/en_US.bd4836e2427abbd6e4526a9704f3bd79.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/locale/en_US.bd4836e2427abbd6e4526a9704f3bd79.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 36776\r\nlast-modified: Mon, 08 Sep 2025 20:51:35 GMT\r\netag: \"68bf41d7-8fa8\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174876,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (65458), with no line terminators","md5":"d882592f2cd191b00cec095d44e746f3","sha1":"22d9fddf96e7477395b06bb903f6273e2d3576f9","sha256":"571c196c5f5aa4348de5f26c36afe5da415a5926e13305c1ae42b91e9afe5181","sha512":"e410e646635aca1ccaa180efd2cea0a311873a0760002750b93e8fa32cdf54ec1f9d533def8eeffa3c0f9d0dd302ab96e9cc853ea796048d966a4dbed64137e2","ssdeep":"1536:n10GUNpvnLJOdWdmpFfe3C3WihvY45QmrnvNM+xDp4mYzYh:1LUNpvnwIdmpFf/NY4rW+x14mQ2","tlshash":"fc0450d6d5942e270d82026dae31ff87edac30e73328427358fe8d68d3f5995122a58d","first_seen":"2025-09-09T17:58:21.925274Z","last_seen":"2025-10-02T10:03:03.993401Z","times_seen":4,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/serp_textpromo_impression?8521773\u0026location=serp_header\u0026name=2025-donations\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/serp_textpromo_impression?8521773\u0026location=serp_header\u0026name=2025-donations\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/ias_images?7525394\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=1\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/ias_images?7525394\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=1\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/ias_maps_expanded?8773315\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=4\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/ias_maps_expanded?8773315\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=4\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/dyn-css/authorization.css?targetBlogID=6680584419845830890\u0026zx=fede3a7a-b17c-4e7e-98b0-507c30c69fd1","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://glucweldicom1977.blogspot.com/","date":"2025-10-02T06:26:30.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:41 GMT","end":"Mon, 01 Dec 2025 08:34:40 GMT"},"fingerprint":{"sha1":"1A:24:0C:AD:28:20:AF:28:F3:B3:CA:EC:9A:55:F1:09:B8:2D:34:31","sha256":"8D:6E:71:7C:E5:10:11:AF:84:AC:ED:C0:3A:2A:3E:01:E9:69:79:1D:B6:B6:C6:4E:31:FD:2D:70:38:CA:2F:71"}}},"request":{"raw":"GET /dyn-css/authorization.css?targetBlogID=6680584419845830890\u0026zx=fede3a7a-b17c-4e7e-98b0-507c30c69fd1 HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glucweldicom1977.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: CP=\"This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en\u0026answer=151657 for more info.\"\r\ncontent-security-policy: script-src   'self' *.google.com *.google-analytics.com 'unsafe-inline'   'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com   *.googleapis.com uds.googleusercontent.com https://s.ytimg.com   https://i18n-cloud.appspot.com   https://www.youtube.com   www-onepick-opensocial.googleusercontent.com   www-bloggervideo-opensocial.googleusercontent.com   www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 02 Oct 2025 06:26:30 GMT\r\nlast-modified: Thu, 02 Oct 2025 06:26:30 GMT\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 21\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-04T03:31:12.431364Z","times_seen":182794,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.com/favicon.ico","fqdn":"glucweldicom1977.blogspot.com","domain":"glucweldicom1977.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://glucweldicom1977.blogspot.com/","date":"2025-10-02T06:26:30.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:18 GMT","end":"Mon, 01 Dec 2025 08:36:17 GMT"},"fingerprint":{"sha1":"6F:E3:FC:0E:25:80:B1:0B:D1:53:88:1C:BF:99:3E:6A:FF:73:1D:C7","sha256":"4B:31:81:66:2F:C1:3B:BE:5E:30:7B:C7:ED:E7:79:59:EE:92:60:A5:00:27:B9:E4:80:DD:86:2D:8D:F0:4E:FE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: glucweldicom1977.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glucweldicom1977.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"glucweldicom1977.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/react-assets/fe21b530ba74e4553643.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/react-assets/fe21b530ba74e4553643.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 May 2024 20:11:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66466859-283\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46ff98dc96050d9a4bbda1b61aa49f63","sha1":"40c708a6e923f86b0a93f69ed5078a58dc22c305","sha256":"18bb68d450bd7b2e893237f11c2327c9df2c708954c7a972e21b5cd40efca168","sha512":"a8bebb4b08559ebf8f5a11408c6abe2eae644390839b863316a009ef4968491686de64cc63dbca662cad392495af4b445ef5a347e8c2de1df22f2e0067774dc9","ssdeep":"","tlshash":"d4f0ddeaf48ceac444098334d6388183f06f5cbd93924508e554bc18d91d0e28ae4b29","first_seen":"2024-12-13T04:07:00.093655Z","last_seen":"2026-03-11T12:58:20.340334Z","times_seen":23,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.9982.96d6fb2bae5e566040f2.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpm.9982.96d6fb2bae5e566040f2.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 4671\r\nlast-modified: Tue, 26 Aug 2025 09:29:52 GMT\r\netag: \"68ad7e90-123f\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28716,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21392)","md5":"1ee6c3c1606424f2f99d87d09f117e03","sha1":"7a374b04ae30365f49dbb5749f6d22d5c735cd35","sha256":"f058782442065720991d43863daaeab25eeb690da8b8264dec82eb2dfcaabd01","sha512":"01cf93642bf12efde72e5e3e0a798b56c084ce9876197b46502bce5fd8955d76d3586b234f5b7b2f1a24ee73ab7df753e6fba3f563e772f4f38300172f576d75","ssdeep":"384:h4m4gZd2kAZBZWTmS3LneDdXqTYRTAa7FXwyD/h:h47gZdPGBZWTvKFJR5wyD5","tlshash":"f9d232e9deb0c17a9c298b11276d717c5900b55bea34b8c3f6159d91bfc2efb0081a1b","first_seen":"2025-09-09T17:58:21.921102Z","last_seen":"2025-10-23T07:28:12.288092Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/ias_videos?7344274\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=3\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/ias_videos?7344274\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=3\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/iaui?6325206\u0026missing=news\u0026shown=wikinlp%2Crelated_searches\u0026r5=news\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/iaui?6325206\u0026missing=news\u0026shown=wikinlp%2Crelated_searches\u0026r5=news\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://glucweldicom1977.blogspot.com/","date":"2025-10-02T06:26:29.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:41 GMT","end":"Mon, 01 Dec 2025 08:34:40 GMT"},"fingerprint":{"sha1":"1A:24:0C:AD:28:20:AF:28:F3:B3:CA:EC:9A:55:F1:09:B8:2D:34:31","sha256":"8D:6E:71:7C:E5:10:11:AF:84:AC:ED:C0:3A:2A:3E:01:E9:69:79:1D:B6:B6:C6:4E:31:FD:2D:70:38:CA:2F:71"}}},"request":{"raw":"GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glucweldicom1977.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 6620\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 12:42:58 GMT\r\nexpires: Fri, 25 Sep 2026 12:42:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 25 Sep 2025 08:49:20 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 582211\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30597,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30596)","md5":"e3f09df1bc175f411d1ec3dfb5afb17b","sha1":"3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9","sha256":"1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617","sha512":"16164d66d452d7d343b1902fe5b864ffdee42811ee90952cbfe9efa9847c58c0403f944c8e29db2bc2384ccd516b629cb8765e5e51de37da6efd75962cf82530","ssdeep":"384:OVysImDyPWquJMpx/SCYW0h8+Rl9yaZwuJ86YKSQCNL/J69nKg93jW1gngRe2Fr/:OnIm6IvW0trVJw1gngRLFr/","tlshash":"1dd2c972a590201df237d726b893fa8d3218d563e7135eeed556b2b8cec56de0023329","first_seen":"2023-04-05T07:30:06Z","last_seen":"2026-03-13T23:53:05.525541Z","times_seen":28033,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":50,"dns":2,"connect":8,"send":0,"wait":8,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/lib/l.32113981e35aa54fc221.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 45797\r\nlast-modified: Tue, 06 Aug 2024 15:56:47 GMT\r\netag: \"66b247bf-b2e5\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":136192,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49027)","md5":"99b60b3c9347df9cbdf931eaf8766ba6","sha1":"51abff53da175defe379f3ad7644884b9b944696","sha256":"4a3de808aa27a2de5388f9b3e336f69f1bd181c3f0dab5774f895e6df6457905","sha512":"3dced4da60059762efe0031d35560ca8bd8eac554f64d6b9fdb2d1f5a535ba324c543dc922182729ec2f387826714217e9bb2d856c8a5915383223062bb7463a","ssdeep":"1536:VEPZ6+hzDE8i8oTpaB1jTmY6/hgeO4utLIDvcxxD8QF/yPUXI+hii2iev8RN7VkT:+Yd6K+k2hiSGQNay+e8IEWU","tlshash":"45d31ccd72c6f06243ab30b9107f540bf23a6959680d8854f169d8e5bc74a4ea27bf7c","first_seen":"2024-10-16T08:16:52.681055Z","last_seen":"2026-03-11T12:58:20.319289Z","times_seen":81,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/react-assets/51ff8f5f877025448b4a.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/react-assets/51ff8f5f877025448b4a.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 18:40:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c317a1-62f\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71493d3bc39ddc04727ad85a5868c3f9","sha1":"d7ca9e81b0523e5d2f7fbe338b2e92929327d77d","sha256":"2fa6b0623777ff8fcbb0b6df22617550e7c290547d3cf23f480f87f5b2fd80f0","sha512":"e90e9aa3d81b479bdbdbd794a6277255d9277ccac13771bfd280d1cab180794c251fc12a4373505e24fecf89881165879595802d3470eb044fb96d22e1d1e72d","ssdeep":"","tlshash":"2d31e072e79adce3d699e694db52a434506d51f3ae84d0a090a0ff7f7834cc22c0dad0","first_seen":"2025-10-02T06:27:01.050353Z","last_seen":"2026-03-11T12:58:20.330214Z","times_seen":12,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/newsletterhunt.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.623Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/newsletterhunt.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/ias_web?6839546\u0026fromWebTab=1\u0026initialState=active\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=0\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/ias_web?6839546\u0026fromWebTab=1\u0026initialState=active\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=0\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/iaoi_wikinlp?6836868\u0026id=wikinlp\u0026fot=i\u0026lot=i\u0026dev=extras:triggering\u0026fsig=l\u0026flow=a\u0026intent=0\u0026precheck_counts=0\u0026kbe=2\u0026is_upgradable=0\u0026default=1\u0026area=mainline\u0026wide=0\u0026index=10\u0026vertical=web\u0026placeholder=1\u0026placeholdertimeout=0\u0026loadingTime=0\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026kp=-1\u0026serp_return=0\u0026bing_market=en-US\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/iaoi_wikinlp?6836868\u0026id=wikinlp\u0026fot=i\u0026lot=i\u0026dev=extras:triggering\u0026fsig=l\u0026flow=a\u0026intent=0\u0026precheck_counts=0\u0026kbe=2\u0026is_upgradable=0\u0026default=1\u0026area=mainline\u0026wide=0\u0026index=10\u0026vertical=web\u0026placeholder=1\u0026placeholdertimeout=0\u0026loadingTime=0\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026kp=-1\u0026serp_return=0\u0026bing_market=en-US\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.com/","fqdn":"glucweldicom1977.blogspot.com","domain":"glucweldicom1977.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-02T06:26:29.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:18 GMT","end":"Mon, 01 Dec 2025 08:36:17 GMT"},"fingerprint":{"sha1":"6F:E3:FC:0E:25:80:B1:0B:D1:53:88:1C:BF:99:3E:6A:FF:73:1D:C7","sha256":"4B:31:81:66:2F:C1:3B:BE:5E:30:7B:C7:ED:E7:79:59:EE:92:60:A5:00:27:B9:E4:80:DD:86:2D:8D:F0:4E:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: glucweldicom1977.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 02 Oct 2025 06:26:29 GMT\r\ndate: Thu, 02 Oct 2025 06:26:29 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Sun, 22 Sep 2024 21:03:51 GMT\r\netag: W/\"ef4af9bdcdf01f8575faf43029a67f40e05f31f9fa22ef93382531a8c2a0e61c\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3199\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":9916,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4095)","md5":"ffb4652079d8fe8df4a2b07fc561ec89","sha1":"5388f4273d10eae8efd3d92fd47d7e5b3bede633","sha256":"ca967ba0ca5cd0f4cb57c4f821feea778627b1dc1b8fbbfb4b79fcaf10bae1f1","sha512":"5b4c0b5a87ff8fc4ce19f70462c35a88ced074a9ad6d5db217cb9e938fbf7d5bede0c820ef7b48f925915ede8f8a276714821e82cd9e40a16d558f9c415d59aa","ssdeep":"192:uDY1a+LQIQMbhKCKD38SiAqGitWRW3WLgWjllhGyI/BRq2ExChqcpllL+WRbiELr:uDYUmecuitWRW3WLgWjlr2/dll6WFiMt","tlshash":"1d12e7c3b8bda0b61f6e589ef81dba64f643cd44cc41eca59caa5835270df93d844b60","first_seen":"2025-10-02T06:27:01.052061Z","last_seen":"2025-10-02T06:27:01.052061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":87,"dns":36,"connect":8,"send":0,"wait":280,"receive":7,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"glucweldicom1977.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/themattwalshblog.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.618Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/themattwalshblog.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/www.thestreet.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.629Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/www.thestreet.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/web_conversion_search?5461135\u0026origin=\u0026locale=en-US\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/web_conversion_search?5461135\u0026origin=\u0026locale=en-US\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/perf?9264733\u0026redirect_time_ms=0\u0026connect_time_ms=0\u0026dns_time_ms=0\u0026ttfb_ms=0\u0026transfer_time_ms=2477\u0026protocol=\u0026transfer_size_bytes=0\u0026encoded_size_bytes=0\u0026decoded_size_bytes=0\u0026page=serp\u0026resource=%2Fd.js\u0026timer.deepFinished=2480\u0026d=d\u0026pre_va=_\u0026pre_atbva=_\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/perf?9264733\u0026redirect_time_ms=0\u0026connect_time_ms=0\u0026dns_time_ms=0\u0026ttfb_ms=0\u0026transfer_time_ms=2477\u0026protocol=\u0026transfer_size_bytes=0\u0026encoded_size_bytes=0\u0026decoded_size_bytes=0\u0026page=serp\u0026resource=%2Fd.js\u0026timer.deepFinished=2480\u0026d=d\u0026pre_va=_\u0026pre_atbva=_\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.main.bb5efd86c007e29dd484.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpm.main.bb5efd86c007e29dd484.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 264015\r\nlast-modified: Wed, 01 Oct 2025 12:07:20 GMT\r\netag: \"68dd1978-4074f\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1090110,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"68f982b4ca2e08c358c4b06466719f73","sha1":"a023b269fe7e7366888bb42155c10831d1f24499","sha256":"09d7e17f577f6f4d4fbd1e2f040be068f87c1c9ca5828ebf08820ab54dea7255","sha512":"ce465b07c5a0ef742214fe4124b11e28cda21b4baf217fdc8b7a60999c40854cdde6a27918683d9aa2b209f54293512c65453f8268bdbd94846b0f6b87084707","ssdeep":"24576:y4YqhNEh2c/Zsj4K8IQgv1CtomZzFooCisKnflBxDL+5W3Y:y4DhNEhH/ZU4mQg1CtomZzFooCisKnfC","tlshash":"ee257d88b2a5b9ed586708e9c53f540df32d3e047426c160f26ddde864895cbf223f6a","first_seen":"2025-10-02T06:27:01.05428Z","last_seen":"2025-10-02T06:27:01.05428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.9814.7e4ed57335dc49c52f0c.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpm.9814.7e4ed57335dc49c52f0c.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 4692\r\nlast-modified: Tue, 26 Aug 2025 15:23:31 GMT\r\netag: \"68add173-1254\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18179)","md5":"693dcb72ae18d8ee2b50b5f082ab40d5","sha1":"f280b90fd2b2acf20692dc3a876e300bba12133b","sha256":"12acb0ec1c105cef70e0bd298dd895f7f755a751c68b679445bdf1c826cccf24","sha512":"10fcdeb88b29740268809308b1742b2817ad2d53f02767173668549b769164f59f87a7fb0e71c9b74e12ea611d56d421b6668af0c764a788d6d57af9c1069cd6","ssdeep":"384:XBelLgZd2kAZBZWTmS3LneDdXqTYRTAa7FXwyD/h:xMgZdPGBZWTvKFJR5wyD5","tlshash":"2cb250fada30813a941a5a51139cb17c5f04b863aa3578c1fb158d81bfc3af305d2e27","first_seen":"2025-10-02T06:27:01.056043Z","last_seen":"2025-10-02T06:27:01.056043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/icons/related/loupe-grey.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /assets/icons/related/loupe-grey.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 22 Aug 2025 14:31:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a87f3d-159\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d3cfadf4bb617691b3c796b1c2d6f69","sha1":"f09f495dc8a01427a930e06f7b641798b26c2480","sha256":"bc206e04c6092783cfe5951a492629fc078ec8c4ce081a7ed37085ce0ca75ddc","sha512":"dcc0c999884bbe9aa5c14aaaaac6aefbf6eee21db5cccfa56d95402e8d3cb2aad03b0acbd44930e8c497011a7ab22c73140c3e5d281ff03b793aa19e92a85667","ssdeep":"","tlshash":"37e026f8422d842c8b134e75eb3d76a52b7e60ff322800d5b54d6314b792e76c80b1a9","first_seen":"2025-10-02T06:27:01.058014Z","last_seen":"2026-03-11T12:58:20.35545Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/temp_settings_on_query?8524457\u0026vertical=web\u0026kbj=-1\u0026kbg=1\u0026kbe=2\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/temp_settings_on_query?8524457\u0026vertical=web\u0026kbj=-1\u0026kbg=1\u0026kbe=2\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/adsummary?8876326\u0026page=1\u0026mainline_ad=0\u0026mainline_bottom=0\u0026mainline_products=0\u0026mainline_products_middle=0\u0026mainline_autoads=0\u0026mainline_toursactivities=0\u0026mainline_creditcards=0\u0026sidebar_ad=0\u0026sidebar_products=0\u0026sidebar_products_middle=0\u0026sidebar_autoads=0\u0026sidebar_toursactivities=0\u0026sidebar_creditcards=0\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/adsummary?8876326\u0026page=1\u0026mainline_ad=0\u0026mainline_bottom=0\u0026mainline_products=0\u0026mainline_products_middle=0\u0026mainline_autoads=0\u0026mainline_toursactivities=0\u0026mainline_creditcards=0\u0026sidebar_ad=0\u0026sidebar_products=0\u0026sidebar_products_middle=0\u0026sidebar_autoads=0\u0026sidebar_toursactivities=0\u0026sidebar_creditcards=0\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/s.df3ed0e6e977f2c00ec6.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/s.df3ed0e6e977f2c00ec6.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 35627\r\nlast-modified: Tue, 12 Aug 2025 17:58:42 GMT\r\netag: \"689b80d2-8b2b\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168057,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5f0d1deaf58409203c025269eb1cbd07","sha1":"d41cfb0950d20ba5624abe53723b1f5239a24b65","sha256":"a7c31f3354573c6b56ac5b863a69c60306afc74f8a14511a82e12b3b1f68e62e","sha512":"f4faf29f5d90656f2a6d3e8e5ff733af6dc8fddf752e5897ae30544890b98a2ae0c70f8ed342983fc03569d1693e83e2da41b28a93ae2169cf7068212cae2911","ssdeep":"1536:Wyl3l2xbxucXV8ff/OrG2YKQw9/MsdHrQpBrZ6SwQbyZwM6faoqeIdGvFNVZ+tdV:Jl3l2xtl8X/fZLpe","tlshash":"5af3ea61d9592009513fca17f5c17fa43138b122eb3397abf663a53ecac79dd1262b08","first_seen":"2025-09-09T17:58:21.939869Z","last_seen":"2025-10-08T23:48:02.675759Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/logo_header.v109.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /assets/logo_header.v109.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-1174\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4468,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a7029059e2e6eedc2f1b565c75f0185","sha1":"592f069e281afee8699ddb4ab1e8be7d0a454f3d","sha256":"a552810b288ab1511f5ad547957de90d44b4245c364b60a2a90a437532e16f21","sha512":"52d51358613eecc1a166ff55bc0fa69a38088ec48ed98d8aa56c1791211ad803d107a54be8ff4b4626840376d713ca75abae3a181da5a7d00f0d03d17afffee0","ssdeep":"96:Hnm6qbDNGqN/Xb1Bt1Xo5YtePRqUieKn1GGPTiopWncgMK1:HfKVN1BnXo5YteAUG1NTnI+o","tlshash":"bd9196e417f492dc988a8b3cef3d49d0260f64fe391081c5d5ae8f996992e88df498c0","first_seen":"2023-12-05T21:02:19Z","last_seen":"2026-03-11T12:58:20.370231Z","times_seen":68,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/react-assets/23d563f964108cbb5b74.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/react-assets/23d563f964108cbb5b74.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 May 2024 20:11:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66466859-215\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"083187682c7ff97254b4ca41b335cb9b","sha1":"f85ceb93de2022ba02b84efcc6320a7307b9b9ae","sha256":"429eb5bf5da55b9c10f4e258d4e5df022c0c18a6b0248ff9de1e7cebb3893de1","sha512":"0fc409443adec8250042eddfeda8ad5ed4e9153b6f06b252452fcf135c612bb00f0f195c9fd1f3aae859f1c55e9953ad7eaae13b4afbae85f441889529a1c33f","ssdeep":"","tlshash":"84f0c9e1b18ce6804e0dc374e22c4082e57f2dfd97884a1ca280ec29ec491e68ed4ea4","first_seen":"2025-01-28T06:56:04.955762Z","last_seen":"2026-03-11T12:58:20.35102Z","times_seen":20,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/financialpanther.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.621Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/financialpanther.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.duckassist-ia.9f373a52e0170703eb93.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpm.duckassist-ia.9f373a52e0170703eb93.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 10879\r\nlast-modified: Tue, 16 Sep 2025 21:55:20 GMT\r\netag: \"68c9dcc8-2a7f\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33300,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (33300), with no line terminators","md5":"ef1722bd9fd7814339e30408d6f2ec58","sha1":"237480ab5b032ac440d3421be40759ff74816a2a","sha256":"9f27d4abee5de39bf03256c965ba7ea02c0fb1097e90b670160c46457287ab87","sha512":"4bf2033a62b6130336bd6dc3565df99578376b66b50ac0b380dff353d46cb20972f318d94e61094c6215c0858ae2ed0adc77d7cf95699638878fc2c1f245c401","ssdeep":"768:TVkSU6L7sDw4xdiyleOWOMRZV6X3T5p2ttVmakv28dWhLiGjgpJ///BZg/d2cZW9:TocES6Dxlw4","tlshash":"dce21b40d509ee79f23688f4913b852d722e3718b5499060b66fec8819e45c6b623ffb","first_seen":"2025-10-02T06:27:01.064151Z","last_seen":"2025-10-02T06:27:01.064151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/ias_products?2995971\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=5\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/ias_products?2995971\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=5\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.com/js/cookienotice.js","fqdn":"glucweldicom1977.blogspot.com","domain":"glucweldicom1977.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glucweldicom1977.blogspot.com/","date":"2025-10-02T06:26:29.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:18 GMT","end":"Mon, 01 Dec 2025 08:36:17 GMT"},"fingerprint":{"sha1":"6F:E3:FC:0E:25:80:B1:0B:D1:53:88:1C:BF:99:3E:6A:FF:73:1D:C7","sha256":"4B:31:81:66:2F:C1:3B:BE:5E:30:7B:C7:ED:E7:79:59:EE:92:60:A5:00:27:B9:E4:80:DD:86:2D:8D:F0:4E:FE"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: glucweldicom1977.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glucweldicom1977.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Thu, 02 Oct 2025 06:26:29 GMT\r\nexpires: Thu, 09 Oct 2025 06:26:29 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 01 Oct 2025 17:51:36 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-04T03:35:40.618328Z","times_seen":109062,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"glucweldicom1977.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpl.vendors.160d8c3b3123eead9671.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpl.vendors.160d8c3b3123eead9671.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 3496\r\nlast-modified: Tue, 26 Aug 2025 09:29:47 GMT\r\netag: \"68ad7e8b-da8\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18833,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11509)","md5":"7a7a2ce5d6116a233ba223fc7865b957","sha1":"2e8868b5f0ade179ee525d845766b509b06e63ab","sha256":"ee621f3528d630b587e8e05036c1461148edfe72f7fcf9e7d1254fb1c2b2c2ed","sha512":"56664abb31a031f489c619213112bc08b143aeaa5ecaa4297b5e6e8634ce76e4716fa1e45580b18aab3b0d91d3f8110bb19e77301753df5e4b7d0939138a5d58","ssdeep":"384:dgUgZd2kAZBZWTmS3LneDdXqTYRTAa7FXwyD/h:DgZdPGBZWTvKFJR5wyD5","tlshash":"b382ccf6da308176951a5a52635cb03daf40b467ab7874c0fb198d81bec2af304c6f67","first_seen":"2025-09-09T17:58:21.936753Z","last_seen":"2025-10-23T07:28:12.288913Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpmv.82f85500ed5c1c787b92.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpmv.82f85500ed5c1c787b92.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 197616\r\nlast-modified: Tue, 30 Sep 2025 15:42:38 GMT\r\netag: \"68dbfa6e-303f0\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":890433,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"d38b62f52c536754332f28e99382ffe7","sha1":"00cfa0fe4cd62e359aa0c75c8eff00486dab4696","sha256":"c0e97ac9e4d041f7a3fbd41127b503f815da261aa9cad4506ce9d89b1c821b67","sha512":"b7aebc8f0aa98f46d8c838db23ac3ecf65ce5aa5ef73c802c272eec3eec0bf493c79569e1d929c00e344fc552f806d137bfa8b333b6427041cd003039296b26d","ssdeep":"12288:EuAewRDrnEI8QDUesvcOpNZlvLe6WUI7EvmI:pAewdrEI8QDUesvPPdLbv1","tlshash":"c8153ce4b338b5dda6b7805f81bba805b33e7129301e4560e65fe994b0275c9f327e60","first_seen":"2025-10-02T06:27:01.067466Z","last_seen":"2025-10-02T06:27:01.067466Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/g.ae0ecf6f7944642771c8.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/g.ae0ecf6f7944642771c8.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 141679\r\nlast-modified: Tue, 30 Sep 2025 13:40:54 GMT\r\netag: \"68dbdde6-2296f\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":688129,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (65494), with no line terminators","md5":"b828700f42cd9b60851d933be9f84770","sha1":"64aeefdfe62c7fe2af744dbccd1d1eeaa6ff04e7","sha256":"ce1e15a1b3892bfe23e68a67e5f650ff3fd75934fe2bff6cc2862feaeaa3da77","sha512":"5550f16ac5d7a353f157703c341578f12355e801a9694e7af88734684287ddb5975578a290d3c8d6cecadea0684e295ca8541456aff83626f76213f4e8c673c8","ssdeep":"6144:R1Ey2eUIcR31QgRB52toiTimqoRZvUvxpjS1M/whsFsTVruXMRte+AkkD5HMQX:Y1RRb2TTiEvUpEduXMze+AkkD5H1X","tlshash":"00e43bcab174b86642ef60a4f80f2605a27ad25df44e0148787c85ed7578e0f723bb79","first_seen":"2025-10-02T06:27:01.069069Z","last_seen":"2025-10-02T06:27:01.069069Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/s.33a0c98b0e2d3e0b7f5f.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/s.33a0c98b0e2d3e0b7f5f.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 13779\r\nlast-modified: Mon, 08 Sep 2025 09:18:25 GMT\r\netag: \"68be9f61-35d3\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57964,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (57960), with no line terminators","md5":"460baea11ec040b57bb8fc59cf03a7ef","sha1":"f4946d04c0fce70191ae714da9263056d7cc8db5","sha256":"5f9ca2dbe36239148e5e1bf74778849592fdd00e5ca8b5b3da68650025e845dd","sha512":"41463b3d6ad4d7e9aff66d46ff5ac62c768d4afe59a4c112da4eb4bf9e2da153de6a1663784845caa2dd8b22e55ebc03fc56b91b4b4363c1928b5a3d2b173a89","ssdeep":"768:xLRup/vc65d7szwZ0X4uz1GPLzguv5uK5C36Y80322IA2zMjpifeblquBetee92v:pRupn9dp0IfLUuvXC36Y803Gib0S","tlshash":"cb43e9d67014fa3a439b54bcc04a5b05113af329a526c03876bce9e8b769cc63277b76","first_seen":"2025-09-09T17:58:21.955626Z","last_seen":"2025-10-02T06:27:01.070967Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/p.f5b58579149e7488209f.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/post3.html","date":"2025-10-02T06:26:32.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/p.f5b58579149e7488209f.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 157\r\nlast-modified: Fri, 27 Oct 2023 12:03:07 GMT\r\netag: \"653ba6fb-9d\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"81061861e28008b28cf6b4bbc3265dd2","sha1":"5f167e01c02fb1bb2f15e1762dc294814d14aa6e","sha256":"6c7334db0f46b3c0b430ee760bb0ceedbfdae65522a5f1d30c9fcd447b5066e6","sha512":"21bc0abed844def04aa4909e2923c9fbc32f2d8ee4f9167353127aec35d7585d199fc335edbe41b4787903141a1c125c4014f9eb7f5d2482e5f921ad2301fce1","ssdeep":"","tlshash":"6ee0cd8e3b042a3c5ae2c15166df3546747766fa4911d41408646c906f34ecfb3767c7","first_seen":"2023-03-07T01:27:21Z","last_seen":"2026-03-11T12:58:20.356004Z","times_seen":82,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/thefinancebuff.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.622Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/thefinancebuff.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/matthewfinance.com.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.125.222","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /ip3/matthewfinance.com.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1478\r\netag: \"674060e1-5c6\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ab1fb25b83d4b333ea661a84bd298b2e","sha1":"980aa215c45dd3b92f40b272234a21f6d850b14a","sha256":"e5db88ea2322863ca17817b99d60006c625a31cff0dad49cf05d3c6d16a75c17","sha512":"db6c05deb54c16f999022c1f8e2b66d5a4e9525756338d6c0528029cf1242665f3700144b010451cd217894f21a95daf980044378b661ce3fe4b89e1dccf2c75","ssdeep":"","tlshash":"b331a917f55464105e0cf1c279e1d82669974900dbccd69654cffd1b5930071e92d6cf","first_seen":"2023-06-01T07:04:39Z","last_seen":"2026-04-02T11:09:41.233806Z","times_seen":88,"resource_available":false,"data":null}},"time_used":2100,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":2050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/ias_chat?9109601\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=-1\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/ias_chat?9109601\u0026fromWebTab=1\u0026initialState=inactive\u0026timeSincePageLoad=539\u0026timeSinceDeepStarted=40\u0026timeSinceDeepFinished=0\u0026tabPosition=-1\u0026isBack=false\u0026recommendedTabOrder=images,news,videos,maps_expanded,products\u0026maxVisibleTabs=3\u0026displayedTabOrder=web,images,news,videos,maps_expanded,products\u0026q=financeMatthew%20blog\u0026ct=NO\u0026d=d\u0026kl=wt-wt\u0026rl=us-en\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/r.4075316d99e3b5cc0e02.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/r.4075316d99e3b5cc0e02.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 48964\r\nlast-modified: Tue, 30 Sep 2025 15:00:36 GMT\r\netag: \"68dbf094-bf44\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377071,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"061888b9bff7241df72d9da2929ac9ca","sha1":"78a58d88eb95906ad6599e759725874f8505eb2f","sha256":"de80b77b46f7bb924725e5d66ab36600e47022519356b0667edac7f02a55c158","sha512":"9f9cc02fcd6c43632b8ba37c44ab4f55933a6241e0de47e6334c50a77a32d87219d23626d8e08b101c6322204a94d808387e7c5a83ce89965c2857c22cefffbf","ssdeep":"1536:4E8UAP0pVHqp5tIKOTHHaAsd178Gm3T6OlJnfrQpN+CfcVt2S02OI2dmce6mmNaE:dY2OIeiw2QjfTbgaQWUiEe1WRgWw","tlshash":"cd84e930e571281f643fd716f8c07bb5aebc7483922257abe53b6a54878b1c512b3a4c","first_seen":"2025-10-02T06:27:01.075435Z","last_seen":"2025-10-08T23:48:02.657511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"glucweldicom1977.blogspot.be/","fqdn":"glucweldicom1977.blogspot.be","domain":"glucweldicom1977.blogspot.be","tld":"blogspot.be"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-02T06:26:28.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:18 GMT","end":"Mon, 01 Dec 2025 08:36:17 GMT"},"fingerprint":{"sha1":"6F:E3:FC:0E:25:80:B1:0B:D1:53:88:1C:BF:99:3E:6A:FF:73:1D:C7","sha256":"4B:31:81:66:2F:C1:3B:BE:5E:30:7B:C7:ED:E7:79:59:EE:92:60:A5:00:27:B9:E4:80:DD:86:2D:8D:F0:4E:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: glucweldicom1977.blogspot.be\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://glucweldicom1977.blogspot.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Thu, 02 Oct 2025 06:26:29 GMT\r\nexpires: Thu, 02 Oct 2025 06:26:29 GMT\r\ncache-control: private, max-age=0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 204\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":9916,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":99,"dns":42,"connect":8,"send":0,"wait":628,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"glucweldicom1977.blogspot.be","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"links.duckduckgo.com/d.js?q=financeMatthew%20blog\u0026l=us-en\u0026s=0\u0026dl=en\u0026ct=NO\u0026vqd=4-20083712301349773718473246314504997642\u0026bing_market=en-US\u0026p_ent=\u0026ex=-1\u0026dp=NNGZlJhvPPs6GRQq9vBVY1YJ2sOZMuyClIm9au2C7Zj6CCQh4smKaWynNzMv6y8fHZHyxPf7Ms9IGivBTjHwgrIyYsKCY4Klhu8YqjQcAngwflfno4BIWEW2PCQcEqGPqj0YVmLZM7X2KRh5LhzSew.F5UT8OGHiGJ3ZIlKFFjH2Q\u0026perf_id=9ba1aba285f12e9a\u0026parent_perf_id=70796eb20b3f8bbe\u0026perf_sampled=0\u0026host_region=eun\u0026sp=1\u0026dfrsp=1\u0026bpa=1\u0026wrap=1\u0026aps=0\u0026biaexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026weatherexp=b","fqdn":"links.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"20.223.54.233","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /d.js?q=financeMatthew%20blog\u0026l=us-en\u0026s=0\u0026dl=en\u0026ct=NO\u0026vqd=4-20083712301349773718473246314504997642\u0026bing_market=en-US\u0026p_ent=\u0026ex=-1\u0026dp=NNGZlJhvPPs6GRQq9vBVY1YJ2sOZMuyClIm9au2C7Zj6CCQh4smKaWynNzMv6y8fHZHyxPf7Ms9IGivBTjHwgrIyYsKCY4Klhu8YqjQcAngwflfno4BIWEW2PCQcEqGPqj0YVmLZM7X2KRh5LhzSew.F5UT8OGHiGJ3ZIlKFFjH2Q\u0026perf_id=9ba1aba285f12e9a\u0026parent_perf_id=70796eb20b3f8bbe\u0026perf_sampled=0\u0026host_region=eun\u0026sp=1\u0026dfrsp=1\u0026bpa=1\u0026wrap=1\u0026aps=0\u0026biaexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: links.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\nserver-timing: total;dur=636;desc=\"Backend Total [n]\"\r\nvary: Accept-Encoding, Origin\r\nstrict-transport-security: max-age=31536000\r\nx-robots-tag: noindex\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16882,"size_decoded":0,"mime_type":"application/x-javascript; charset=UTF-8","magic":"ASCII text, with very long lines (16882), with no line terminators","md5":"4079845a0f22d7f9cf5c9666d11f1bfa","sha1":"6b9d7023efa6c8f0431d1681d7bf9024d1062c11","sha256":"679c6fccddc7e382d8078f868d55adcf59339649b08cae83045727ce8962a3c7","sha512":"059baec30bd002b4646dd31d4eaa19c7caeca5c45f903729898ed137ae3316e23d0b8a729514d7898eb117fe9f42ef2875c151be464e5ef0274a0cccbe877984","ssdeep":"192:HeHir+cflX4iMBccpOpbJF+oDoSaglRE4ynSvr1vBqsLJW2851t:AY+cgB6dTh63SD1vBqsLJLyT","tlshash":"0272d7771a5c31a69fa362c8709fbf4cc89a632bd5d0c8f1c655dc08c3a647753e22a9","first_seen":"2025-10-02T06:27:01.076857Z","last_seen":"2025-10-02T06:27:01.076857Z","times_seen":1,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":80,"dns":3,"connect":27,"send":0,"wait":666,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/favicon.ico","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-aef\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 03 Oct 2025 06:26:32 GMT\r\ncache-control: max-age=86400\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2799,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"0a362a1a0cf4cc6bc56d65db8049dd6f","sha1":"ebfd1b824377525e1588719e935bf4b06349cddf","sha256":"d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd","sha512":"9bc3349815f97884a92965f5936a7abc4ee937232f305148bd6d791de0d0199c51c5a314e6f4f5efbcac925a860c8da4da6e94472471f36db7725caf4b49ac8b","ssdeep":"","tlshash":"5c515e6372d0083ae64fa6f1d7f77fc1e5a4c4285ae36e5943a825742d07780a897382","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-04-04T01:38:41.296391Z","times_seen":1822,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/apss_f?4808600\u0026preloaded=1\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/apss_f?4808600\u0026preloaded=1\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/3878540743-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://glucweldicom1977.blogspot.com/","date":"2025-10-02T06:26:29.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:41 GMT","end":"Mon, 01 Dec 2025 08:34:40 GMT"},"fingerprint":{"sha1":"1A:24:0C:AD:28:20:AF:28:F3:B3:CA:EC:9A:55:F1:09:B8:2D:34:31","sha256":"8D:6E:71:7C:E5:10:11:AF:84:AC:ED:C0:3A:2A:3E:01:E9:69:79:1D:B6:B6:C6:4E:31:FD:2D:70:38:CA:2F:71"}}},"request":{"raw":"GET /static/v1/widgets/3878540743-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://glucweldicom1977.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 52140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Sep 2025 01:58:13 GMT\r\nexpires: Tue, 29 Sep 2026 01:58:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Sep 2025 00:49:49 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 275297\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147538,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4058)","md5":"21eece0b7a222dbb78c925531a656c27","sha1":"48d0cc9691ba9b6229b5e4ec20e8a88c43f5af6d","sha256":"7511fc1573d0fd386edba6b764b3d97a7e47eb91ea5beb2f99d0b2ddecec8106","sha512":"197338ee2203a3e54e007d8b5fb5ee330667d86536e7d8f5bf9d150e3f7d1fa0f42fa033abf6f64e20fdbd68c8e7b6aec738fdb046420cbbc1b9608f28878f7a","ssdeep":"1536:ZJVLTvRqRF9UwngQc6MYse/412eRAMwPlH2NrAtSKUnvGYgMBSBWV66dSDXsZAas:oF9USb412eqXsNrPK+gYV8sGJeNNyN","tlshash":"6ee30ad8b79270628373b4b5003f010ff13a74aae84889acb188d9e57e749695677f7c","first_seen":"2025-09-29T03:21:26.936869Z","last_seen":"2025-10-17T21:16:23.593664Z","times_seen":4190,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":65,"dns":2,"connect":8,"send":0,"wait":8,"receive":9,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.duckassist-ia.9f373a52e0170703eb93.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpm.duckassist-ia.9f373a52e0170703eb93.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 10879\r\nlast-modified: Tue, 16 Sep 2025 21:55:20 GMT\r\netag: \"68c9dcc8-2a7f\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33300,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (33300), with no line terminators","md5":"ef1722bd9fd7814339e30408d6f2ec58","sha1":"237480ab5b032ac440d3421be40759ff74816a2a","sha256":"9f27d4abee5de39bf03256c965ba7ea02c0fb1097e90b670160c46457287ab87","sha512":"4bf2033a62b6130336bd6dc3565df99578376b66b50ac0b380dff353d46cb20972f318d94e61094c6215c0858ae2ed0adc77d7cf95699638878fc2c1f245c401","ssdeep":"768:TVkSU6L7sDw4xdiyleOWOMRZV6X3T5p2ttVmakv28dWhLiGjgpJ///BZg/d2cZW9:TocES6Dxlw4","tlshash":"dce21b40d509ee79f23688f4913b852d722e3718b5499060b66fec8819e45c6b623ffb","first_seen":"2025-10-02T06:27:01.064151Z","last_seen":"2025-10-02T06:27:01.064151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/l_d_wt?5676799\u0026iao=1\u0026nr=1\u0026rl=us-en\u0026dl=en\u0026ck=0\u0026atbi=false\u0026i=false\u0026q=financeMatthew%20blog\u0026ct=NO\u0026kl=wt-wt\u0026kp=-1\u0026serp_return=0\u0026djsd=0\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/l_d_wt?5676799\u0026iao=1\u0026nr=1\u0026rl=us-en\u0026dl=en\u0026ck=0\u0026atbi=false\u0026i=false\u0026q=financeMatthew%20blog\u0026ct=NO\u0026kl=wt-wt\u0026kp=-1\u0026serp_return=0\u0026djsd=0\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\nserver-timing: total;dur=1;desc=\"Backend Total [n]\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/duckassist_generate_cta_impression_wikinlp?4173597\u0026id=wikinlp\u0026fot=i\u0026lot=i\u0026dev=extras:triggering\u0026fsig=l\u0026flow=a\u0026intent=0\u0026precheck_counts=0\u0026kbe=2\u0026is_upgradable=0\u0026default=1\u0026area=mainline\u0026wide=0\u0026index=10\u0026vertical=web\u0026placeholder=1\u0026placeholdertimeout=0\u0026ct=NO\u0026rl=us-en\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/duckassist_generate_cta_impression_wikinlp?4173597\u0026id=wikinlp\u0026fot=i\u0026lot=i\u0026dev=extras:triggering\u0026fsig=l\u0026flow=a\u0026intent=0\u0026precheck_counts=0\u0026kbe=2\u0026is_upgradable=0\u0026default=1\u0026area=mainline\u0026wide=0\u0026index=10\u0026vertical=web\u0026placeholder=1\u0026placeholdertimeout=0\u0026ct=NO\u0026rl=us-en\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/mattlevine.co.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.630Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/mattlevine.co.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"external-content.duckduckgo.com/ip3/matthewhaws.home.blog.ico","fqdn":"external-content.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.633Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ip3/matthewhaws.home.blog.ico HTTP/1.1\r\nHost: external-content.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/util/u.7dd789dac532271f0f13.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:31.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/util/u.7dd789dac532271f0f13.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:31 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 36705\r\nlast-modified: Tue, 30 Sep 2025 12:38:44 GMT\r\netag: \"68dbcf54-8f61\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:31 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131397,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"33fec41d94d191d74cee6270ab0d0774","sha1":"1cf6bcbc00fe07641303c0154f0ec8e5e46fc61f","sha256":"3150b8d43ce819f9c3b92318c65b70a74581c0f394d13f65e36879d02ab78e85","sha512":"b96d2511672974baaaf4b910c580348705b76449f7f2446df4019c7c4e1b021c6ef74c76da566ba576b8cbdef9a8df607f6d3c9866fdaf72d639e8289d629de0","ssdeep":"1536:QRiYQNb1H5gm+Re1kP7V5QFTajePVL8fs6FylPiS5GzYu05r2e:XYqi5SprcsCy1hGP0f","tlshash":"42d32a5da5d2eb7d02a21191784b520bf13e1615b15c8920b6eadcc52eefd0c632fbbc","first_seen":"2025-10-02T06:27:01.079648Z","last_seen":"2025-10-02T06:27:01.079648Z","times_seen":1,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/wpm.duckassist-ia.578aeedc0d4e6fc7431a.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /dist/wpm.duckassist-ia.578aeedc0d4e6fc7431a.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 6841\r\nlast-modified: Tue, 16 Sep 2025 21:55:20 GMT\r\netag: \"68c9dcc8-1ab9\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35973,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28649)","md5":"f36f28c59e7d3f01db6ff15be03b58c0","sha1":"195e81e424ad50e1a10ef2fa8bc0696a2e788216","sha256":"7b9ae01c4a59e306c5f37f98d762d5d089ec3864ead5f2729aeabf9369f0717e","sha512":"c6bca1464086a8fb072a4860448095a9aa2adc3a8d5e903ac8ffe0c9591611ae50d9e1148b0eca22529e465f24824c55e2f750d3efff3a821a63a37f4983ebac","ssdeep":"768:cMUHMrRWJbjEjLdil6mlqU5/egJmmL9gZdPGBZWTvKFJR5wyD5:nrLil6j46Zc8KJR5wy1","tlshash":"e1f281fada70827a942b9e5117ccb53c4b14b863aa3074c4fa015e55efc3bf30592a67","first_seen":"2025-10-02T06:27:01.081019Z","last_seen":"2025-10-02T06:27:01.081019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/si?5414124\u0026b=firefox\u0026atbi=false\u0026i=false\u0026d=d\u0026l=en_US\u0026p=windows\u0026pre_atb=v502-2\u0026ax=false\u0026ak=false\u0026serp_return=0\u0026pre_va=_\u0026pre_atbva=_\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/si?5414124\u0026b=firefox\u0026atbi=false\u0026i=false\u0026d=d\u0026l=en_US\u0026p=windows\u0026pre_atb=v502-2\u0026ax=false\u0026ak=false\u0026serp_return=0\u0026pre_va=_\u0026pre_atbva=_\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 02 Oct 2026 06:26:32 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-04-04T03:32:15.873053Z","times_seen":75797,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/deep_request_success_from_preload_200_1?8105563\u0026duration=661\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/deep_request_success_from_preload_200_1?8105563\u0026duration=661\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/l2_d_wt?5234319\u0026osl=0\u0026u=bingv7aa\u0026rc=10\u0026oll=en:9\u0026q=financeMatthew%20blog\u0026ct=NO\u0026rl=us-en\u0026serp_return=0\u0026organic_above_fold=1\u0026organic_or_module_above_fold=1\u0026bing_market=en-US\u0026has_rich_facts=false\u0026djsd=0\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026results_with_ad_images=\u0026fsig=related_searches%3An%2Cwikinlp%3Al\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/?q=financeMatthew+blog","date":"2025-10-02T06:26:32.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"POST /t/l2_d_wt?5234319\u0026osl=0\u0026u=bingv7aa\u0026rc=10\u0026oll=en:9\u0026q=financeMatthew%20blog\u0026ct=NO\u0026rl=us-en\u0026serp_return=0\u0026organic_above_fold=1\u0026organic_or_module_above_fold=1\u0026bing_market=en-US\u0026has_rich_facts=false\u0026djsd=0\u0026blay=w10,e1r1\u0026dsig=wikinlp:l\u0026results_with_ad_images=\u0026fsig=related_searches%3An%2Cwikinlp%3Al\u0026adblock_exp=a\u0026aiheaderexp=b\u0026biaexp=b\u0026disableredditmetadataexp=b\u0026duckaiinautocomplete=b\u0026duckchat_alpha=b\u0026externalmapsexp=b\u0026litexp=a\u0026msvrtexp=b\u0026searchbarexp=b\u0026stackedredditexp=b\u0026toolexp=b\u0026weatherexp=b HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 02 Oct 2025 06:26:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Thu, 02 Oct 2025 06:26:31 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
