{"report_id":"139f28f6-da93-4dd1-9dff-1faf2471b12f","version":6,"status":"done","tags":[],"date":"2026-03-14T04:48:39Z","url":{"schema":"http","addr":"playtglecode.com/","fqdn":"playtglecode.com","domain":"playtglecode.com","tld":"com"},"ip":{"addr":"157.90.33.74","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"duckduckgo.com/","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"title":"DuckDuckGo - Protection. Privacy. Peace of mind.","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"playtglecode.com/","fqdn":"playtglecode.com","domain":"playtglecode.com","tld":"com"},"ip":{"addr":"157.90.33.74","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T04:48:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-14T04:48:11Z","timestamp":1773463691,"ip_dst":{"addr":"Client IP","port":45302,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"91.218.50.173","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-03-14T04:48:11.730448+0000\",\"flow_id\":572651891012256,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"91.218.50.173\",\"src_port\":443,\"dest_ip\":\"172.18.0.4\",\"dest_port\":45302,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=iseawave.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:B4:37:5E:E2:44:DC:4C:BF:CA:A9:38:12:3F:DC:20:DE\",\"fingerprint\":\"d6:85:87:14:17:24:a9:49:00:00:eb:ac:c8:e4:69:46:6c:a3:79:9d\",\"sni\":\"iseawave.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-04T00:00:00\",\"notafter\":\"2026-05-05T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"0191d81a4ad7ee1a330a1e2c51d23ace\",\"string\":\"771,49195,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3632,\"start\":\"2026-03-14T04:48:11.602784+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-14T04:48:12Z","timestamp":1773463692,"ip_dst":{"addr":"Client IP","port":45334,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"157.90.33.73","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1","source":"{\"timestamp\":\"2026-03-14T04:48:12.380160+0000\",\"flow_id\":760122918545970,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"157.90.33.73\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":45334,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2036300,\"rev\":3,\"signature\":\"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2022_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Significant\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_04_27\"]}},\"http\":{\"hostname\":\"playtglecode.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":758},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1536,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1250,\"start\":\"2026-03-14T04:48:11.305714+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-14T04:48:12Z","timestamp":1773463692,"ip_dst":{"addr":"Client IP","port":45334,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"157.90.33.73","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3","source":"{\"timestamp\":\"2026-03-14T04:48:12.380160+0000\",\"flow_id\":760122918545970,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"157.90.33.73\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":45334,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2036302,\"rev\":3,\"signature\":\"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2022_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Significant\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_04_27\"]}},\"http\":{\"hostname\":\"playtglecode.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":758},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1536,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1250,\"start\":\"2026-03-14T04:48:11.305714+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"iseawave.com","ip":{"addr":"91.218.50.173","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2025-10-11T15:27:01.739359Z","last_seen":"2026-03-02T03:19:37.177291Z","alert_count":0,"request_count":2,"received_data":390247,"sent_data":1052,"comment":"","tags":null,"fingerprints":[{"name":"Angie:1.7.0","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"duckduckgo.com","ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2007-11-11","domain_rank":522,"first_seen":"2012-05-24T01:23:28Z","last_seen":"2026-03-11T12:58:07.838087Z","alert_count":0,"request_count":94,"received_data":5597597,"sent_data":44124,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"improving.duckduckgo.com","ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2007-11-11","domain_rank":42824,"first_seen":"2018-08-02T06:09:11Z","last_seen":"2026-03-09T17:46:21.523615Z","alert_count":0,"request_count":7,"received_data":6474,"sent_data":3887,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"playtglecode.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":1820,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"duckduckgo.com/","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c93bb2bb79f11f96d46e45ff552c6d0","sha1":"923e3d7c80e7f28fc76d05bf258b57a8c9773600","sha256":"3b390696524efc2d99cbd776788642572b726981eb6370829368152c6dc46b8b","sha512":"2b4b4045efc17284cfe8ef3f0c68d1103c8f2796e39e17cb2074ce6b1b9c5923543bda38c3895de78d27471f5a78f8116dbd478116ffbb73bde86bd0d0bc849c","ssdeep":"","tlshash":"a34197fe1293a1730fee1700216b31a6f3ef4696544c8448e8c159111974d97d3e6ba8","size":2416,"data":"","first_seen":"2026-01-13T19:12:51.035189Z","last_seen":"2026-04-20T16:00:39.997263Z","times_seen":550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/main-e01866fd58586c66.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4086b7aa3c8fe1e2f9d5f78a56e0824d","sha1":"aa2f025254c1a61564b3a7fa9a7587bb6c09ae09","sha256":"27d897b169e5138092365e4db123f357093350ce0ca5cd41b87ec23d717bc520","sha512":"6ef866209d9edb6cb6bad9e5c5cde40fe52799afce120c485f9f8346ba22a6d82da55e6dbc5202ff9384759d7df458781431fdff45627577039dd1bd2951ebac","ssdeep":"1536:s29fc4IJFB5Gg+RWdqcZNkXMr4F/NRvEDS6V6Ect:sDT5MWLPkXMMNRvEDTIt","tlshash":"1ec31ab672d1fda2039741d4883b0007f3691cba146e7095b3eadcd6b49099ea0f6f76","size":119238,"data":"","first_seen":"2025-12-12T17:06:26.295804Z","last_seen":"2026-04-20T16:00:39.954805Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/webpack-2abeac151a6f61b1.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bd876b060d71aaee76d892ecf743389","sha1":"ad76b0bf6028fbb4616417d363e333bbe7a20c74","sha256":"6ddd057665b32049e15f10c298f22e796dc5b336c1c3552ea18822c9f955eae2","sha512":"3473287feab62b2fabcc3fcaa92813f788638708f1395fcfd92345086107b5ad5117bab3ba6fe3f6d73ce7cccbc458dea416236374101418b706db4253ada8c4","ssdeep":"","tlshash":"391161ea226bf0f5035e8881aa0f4485e60b4e39411cfcd25b86d8f860e6857403ae32","size":1000,"data":"","first_seen":"2026-02-09T17:29:57.219049Z","last_seen":"2026-04-20T16:00:39.996202Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/8770-7000586f490a9dc2.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6652c67bf5b7107b4b2a67f4a8321465","sha1":"4489f755cb19e748a8143e1566362949538f7b40","sha256":"5f75654214d597b05d8454d53c89f5196e33447e8eb29a87e3cc00bed2ed70de","sha512":"721893717b78432900cc5c95ba8e7da98b5b2071a25e64c3dff1ff66958d5a7382a412b65c0bd5bef79877d8a4c65294d065c02caf1a0cf63cb0b33a30e1abec","ssdeep":"1536:q+gYwF8g/tZFtJwH9UkxawyHgxMFSURUcEg+B5bA5hy2U5tAO:+F8ghrw+dSKUckbA5rktAO","tlshash":"f1b309e53291b4a6c3db01eac06f4446e37a1a9d280e443cb7b9dcda215584c72fbf79","size":107529,"data":"","first_seen":"2026-01-27T12:41:40.043169Z","last_seen":"2026-03-31T02:37:23.373953Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/7991-fda16686d13b7cb4.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"721ebaffcfbf1ec06ca3c78828e2ba93","sha1":"24db80d76a7b94ce179053db26bf3c4d55bc2ce9","sha256":"5dc85de04fb34e21d3072fef64e88855a46448de6f64bd125b4722dcdd864278","sha512":"d3061e957863088d1ee4cb280e564ec41bf7fa588eed0e1a66728c1c35a19e4598f6eeeca008bf14ccfaf1981f4938d8773aebaf9fdf748c9bc000c4a0738fd5","ssdeep":"384:JSZGI4v9mS3I0Vg+RCCmVROU/JvFM2bgjOpHR36GtGxNFgyH1:YGIA5g+RCCWsstoOpHZ67rFpH1","tlshash":"88d2b3d8b292b0368ad7a4e9507f514eb33f3a56249d5050e02ae0d83d78ecdc673e9d","size":30059,"data":"","first_seen":"2025-06-24T10:48:48.100364Z","last_seen":"2026-04-20T16:00:39.99565Z","times_seen":843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/1492-8b6c7836dca20e24.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"87435ad889f4a28a018e9eba41ec912a","sha1":"57a408b0901fe03707c59fc88102654b391ba971","sha256":"a96b906382b821e1c681ada209e12ad006954bbc484c45bce3cea6ba9c0b77cd","sha512":"929fa59c27f264d240ce5c0b8fb8f468846c78cbb6a65a11cfe3f83f2b91bdf64281856573f90df470bf526752365167f8bebdfc3a2815b990ebcb6182e0f96f","ssdeep":"384:voAKajj/yXooYCh5n9J14vNk1aYqw/6qLmEcCF8BYtW3/Y:QLDXoYF5H12Bz3/Y","tlshash":"466219d1a209bae7293e2cdfc0fe600d721e764844555184f1f6a8b8547a3e933577bc","size":15293,"data":"","first_seen":"2026-03-05T22:41:54.197544Z","last_seen":"2026-03-31T02:37:23.386624Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/2242-69005bb590293c0d.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c4f7a2271a7760007ae0d57312d4be2","sha1":"4ceba152d50babb9b1260250bb3deb2058443d1e","sha256":"1d8ae0b42fdc6f09d0abbe70aeca5008804197569b776d243a6f1ea9288171d7","sha512":"145aaba0ea64b7d2ba6d5943c3110da9069d1c608d0c2a81917237397e8dc3090ba338c341adb9f541910f5fd8e6be9983245e62fcf4cd844a2ebdec7113fc6b","ssdeep":"1536:tOrYtYQ0SNvBIKOXHllRzCDGZ5gX0RkhFGjgnRntqMF7C/02axahc5xRmc:tOrYtYQ0SlBIzDRzCDw5AXGjgnRntqMJ","tlshash":"ba933b23964a3a7a1e6d1caec5bfacccf10da34414a111d4faedda58801a7ad71473fc","size":94143,"data":"","first_seen":"2026-03-05T22:41:54.208042Z","last_seen":"2026-03-18T13:28:14.795769Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/framework-676ac3c731e183b1.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb21d3438cb9b108fc3db62a4eb6ea04","sha1":"b9db3cf52e805543737873202df55ed90f0c680b","sha256":"7cef625379128a5c3ab06e267f75a17ec881739848c59d126e58ab740fed1309","sha512":"9c347347ecf420cfd123981d0a5a050933b9cff06c1471bcb01f482b2755d3afa7eaa7f5337111eba3e2bd82c87d9d03d7325193d7e40328bb3d660118b92ec2","ssdeep":"","tlshash":"a61105e639c2b4e26fef10d4449e5847b2bc2e173d5dd100d241fe52633012b852ad29","size":1000,"data":"","first_seen":"2025-07-24T17:54:35.907091Z","last_seen":"2026-04-20T16:00:39.996717Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/3611-a058c9990ec2e9ef.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01aa0e01fe08e252bc419345f79300e","sha1":"40b359458d4c6ac8b3482809faa85ac882fee007","sha256":"7e2693d418e330fcf150fb72f6425940b325726fec24f4069dddd67ae32c1221","sha512":"4c983eeb368ccb4b1f71bb0bc4e791d116823a2586e8a971c211f8152efeb9a7ecc73f3fe29a09f495367ad1c728e0f2b13a37fe2a20419b71a4ab9de0ee658b","ssdeep":"192:hmKtRkmgUycgDcDUMLZ3dfkrKjumF85KHKKwrunKSfF2vB2Vavec//eofqu:hLRkmgUyxSk0X5m0KStYW8HeoJ","tlshash":"4c22e8b637007076e3ef438fc04f4219b3ba555624075418e6688ca6be307b652e7fe9","size":10191,"data":"","first_seen":"2025-10-04T18:50:54.523774Z","last_seen":"2026-04-06T17:44:48.446923Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/7317-fd9c5c7039994e69.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8927cf845110ce3501f4c1d1a4394e7f","sha1":"1ca6c13af686f69310e714cf8ff25db94c24211a","sha256":"0af414749813b7b5b396b8a0ad9021567f2daabaafb2178d8ce1ce4c1c98f77c","sha512":"5b6b87d5e08f10f33ed2e3aba6eeac8817adc8ed0b0f3e8f756b2572ea3ada45e89398b40934c883fc102f7b22cf558eaf6227647a4a90182b2b718c861597ab","ssdeep":"3072:X7ojqEWVDDC0pyE700yCMkhMYLPHd0+GpTm/d/VAv:UzWk0pN706PHd0+kml/VAv","tlshash":"78e36c61621879f6287e2cdbc2af740c726df79428110980f1faec9c941ab9972477fd","size":151366,"data":"","first_seen":"2026-03-09T11:27:51.139254Z","last_seen":"2026-03-17T19:33:37.997892Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"312c6e2f5dfa013fa2ee4d619be3e8be","sha1":"f0456f3ac2c7abcfbfb86ee7e85e56febc40e93a","sha256":"a54e0d2c3c454aedb862f007b828853f47071c21e09e25c82a1627e87cf57df2","sha512":"0d17f00d3ace98fc8f6ac5686f15da8b2a300de322810fa9e9edf23c5915dedaaf4023fa02537ddd372ee8c67e4ca1985065d68663d106cb532cd972950a1f30","ssdeep":"","tlshash":"1ff059a876517a6643fa155b24aedaa9fb391dc130443014e438e09335a4d2b81e2ea1","size":496,"data":"","first_seen":"2025-02-21T18:39:22.925959Z","last_seen":"2026-06-02T09:30:58.795059Z","times_seen":1191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/pages/_app-aab664118a6eac26.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8137952832d1b65834c333061927398","sha1":"4f4dff71f4d2eb1ef927305f086340af9598d657","sha256":"f084cba489094a9fd7c5be1a04dd5707974c8a629998ebc378c5646823dc845d","sha512":"825eb9c8afeca8eb6c2b73029416a8738d7f23d771e2bf6f0d2244c390a52bb1cda70a63aa9957f149ccb771e61e8598edd09ded85c3c9e9b50d708c00404ff7","ssdeep":"","tlshash":"91110e1976e3f0ac0be311d800b1c941f3251be424ae58fee92840cb35aad4d6532fa0","size":1000,"data":"","first_seen":"2025-12-25T15:11:23.775135Z","last_seen":"2026-04-16T07:50:35.585567Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/7500-93111ff80911a077.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e050fb78d5bc5d924b368f8a63e0c79","sha1":"ec4adc5c9b191b2be04e91867a6430730bfc9fa1","sha256":"2e10020075f0af5fec1c68af182aa74c94217a59f9314bf4142a9342127a67d1","sha512":"21ca220ca44ddcf778a5d1b2f3e5fb098822bf4338976f5dd1bacef87b800703533db295f577e67dc83a6f65f1606a9fc3d842ff2b1fafdd313d5dcf85724323","ssdeep":"1536:1xUixFYWhU8gGogHn4mGj7kuS/yiI4ceD7cHayVb10k+eUHkJ0q/e/mVo8fKEJRx:IOFYKd9hT72NVb10k+eUHkJ0q/9nf5H","tlshash":"46c319e63602b571d7df01aba0b70429e33e254d30094128f9799cee35b9958a1f7f3a","size":120980,"data":"","first_seen":"2026-03-05T02:07:31.841044Z","last_seen":"2026-04-02T03:32:57.870993Z","times_seen":188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/9500-f2b2265e623bce81.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"75c656f09c0ed33f52108d8b068dab21","sha1":"87a70f4abf1693f4af35f43b17cae6526f42454d","sha256":"994f9e1e01d0936d12831c4cb219c9a9c758c2add3a6275b3443327978a3c5fe","sha512":"e2f7cc3ddff2482273cbe68956e8c5cf686235b302121a3e42002108154aab0b1064db86a4464eaa0f6ba37bbb9017bc95b802cbd4a18203209f175a96b0dd59","ssdeep":"192:LWj0TFLV43L2ZSFqn8B0b2pNYLtiMbgMnYxCl4f9x61uBgoRxCl4f9Gx0gMCHV4e:LhTFO3L2Z+qn8OSYLYIgMnY628sgoR6L","tlshash":"1d32eac0b048befdab8758d6c06f408ef2de0945cc0d9986b5d0ec7116e6748763b799","size":11933,"data":"","first_seen":"2026-03-05T22:41:54.202169Z","last_seen":"2026-04-13T08:24:53.668346Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/3865-0383d3bbae55a786.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6c1f376cd348c7668888bc6a9d9f403","sha1":"22a32863197d833ca5449a8332413ac79d53fdaf","sha256":"962c8e300638e46dfa464900ef8b9d1ae56bf8173bb16fe63101a04eebf595b5","sha512":"751c560c2c48e422e324128b3c4f2330bbf3061b08c3cea028924256c07c444422b76986b7740b8d38c78c5c876cba036c206f7ea39efb8c9179479015c55d0a","ssdeep":"192:38xhXjwVVRfS4PkOJKAiYXwA7bR2rTgt/UsR:3UgVRfS4loYXwA7byTgt/ZR","tlshash":"e512ea95b1467ce1cfbe4686d07f505df266e2086c4c4460b135a8ac26db2e5f31bf8b","size":9474,"data":"","first_seen":"2025-06-24T10:48:48.129143Z","last_seen":"2026-04-20T16:00:39.97787Z","times_seen":843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"52da136ca6f28bf1c017ce38b76906a3","sha1":"6ecfbbd758e0842cd51f35e7a48714a885f3366b","sha256":"886b4fd4f1f7ed5978ee8942417074755a5423e8cd30cad2d426222b17862e72","sha512":"3aa7c9ce716969a3e98d3afbb3cd30401d709dc09972faf98624567b0278ddf5f60710b9d0c059c80ed2b3a2e774ba194462bb7c91d7aebe3e6c7a1ad3ac27df","ssdeep":"192:2HhXMCTLn4OX94IDIYMsIP8iWeSyd/2qdNgPxrFVBo1z/GR8E:6MCYSUpp9w","tlshash":"23e1f29cf2dfb4e30eef2a0b252e912063b68a56301d054ae449a443353dde694fdf75","size":6794,"data":"","first_seen":"2026-01-16T17:17:46.58011Z","last_seen":"2026-05-11T06:17:40.797125Z","times_seen":654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/8337-336dff1545b887cb.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"50f627ba15b148196cc957c6273dcf81","sha1":"e578d4d2c20ec938a04ab9284212855df43a78c9","sha256":"4815a6aad0c0980ddebd23a4937269daed82a2b842b1566db5104c1839f2141d","sha512":"5b43b40cb2b4507b783cb688a30e3133ef05efe63fd133024b6f6cf91a104ba3313db6329f9c01a00e34c5c762e2d7f610275ffd3ced3db012930adbe1cc1713","ssdeep":"768:R6lWR/HNaRBH6YyjCeTrYXeE3bjVOjHfYw0bpC7EwtB+7QCxWjxZssD1u0mkhT9c:R6loHNXYgrYXZ3bjVOjYw0bp6EwtB+79","tlshash":"702309f03600b46adfdf41efa0664419a3bd3a19640b4924f129ecfd21a4bd471a7f79","size":48300,"data":"","first_seen":"2026-01-27T12:41:40.068563Z","last_seen":"2026-04-02T03:32:57.850623Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/9983-1f6c0125db1c641a.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc1cedd27f38b3b286cc6340e515fd83","sha1":"0a7af28944d9af2119736398c22858ed620515b8","sha256":"ff294ad275e2bf3dad776839dfc73b6a78d29009eeaf11578c910df95a4cc086","sha512":"aae3889cc06cda172715ab627a9ef758f854adc602cbc0316756bc8d840d6398f904f33cd33eb235996bc54b0c23fdc3727dc6455890cf9742e25c7ab9fb6450","ssdeep":"192:fz6288qMsqVx7hIMy1HnG/NumR48eb6tLgVZIWz61MR+2T2o+NTae6VpTU:fGl8q5q/elO88ebXVZvz61M8q2GNU","tlshash":"f42209f473817485d78b02e2c17f011ef7796d94280f482cb668bcdb26a506566ebf39","size":10626,"data":"","first_seen":"2025-07-15T10:36:22.704442Z","last_seen":"2026-04-06T17:44:48.480078Z","times_seen":718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"iseawave.com/kxnr/79/80","fqdn":"iseawave.com","domain":"iseawave.com","tld":"com"},"ip":{"addr":"91.218.50.173","port":443,"asn":6698,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T04:48:11.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"iseawave.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 04 Feb 2026 00:00:00 GMT","end":"Tue, 05 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:85:87:14:17:24:A9:49:00:00:EB:AC:C8:E4:69:46:6C:A3:79:9D","sha256":"AC:C1:C1:C8:5A:F3:36:FA:95:EE:3D:85:14:52:3C:E9:5A:92:3A:1F:1C:0F:C3:AE:28:D7:CB:7A:16:F4:31:1D"}}},"request":{"raw":"GET /kxnr/79/80 HTTP/1.1\r\nHost: iseawave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://playtglecode.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie/1.7.0\r\ndate: Sat, 14 Mar 2026 04:48:11 GMT\r\ncontent-length: 0\r\nreferrer-policy: no-referrer\r\nlocation: https://duckduckgo.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie:1.7.0","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":390066,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":164,"dns":1,"connect":40,"send":0,"wait":41,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/framework-676ac3c731e183b1.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/framework-676ac3c731e183b1.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2ca02\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182786,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2cb7e8a302bd25515c30a0fa7acf9cc6","sha1":"b54b72dcb108df5b1a50a4abb55c6af07405243f","sha256":"d92557e5c9ebb62f7cb3127334dd55fdd5c08d9fdb79db8be57a1bc70f13859c","sha512":"85fa435a02aa1f8f5206ae7b1b6534147d8f464144f5a64613165ceb94e37ab1ba228aec5fd875ba377e053c62a7602cc745210494f9e33398dd688609bc2a58","ssdeep":"1536:S+oWdMwBpecEir4zCslI6yvGwR5q34rO9SBt3KwthQqi45GY4bCiwzFeroAAzTFb:S8ecqzCokjMz9SBtpthwGB3TFb","tlshash":"7e04fae83955f5526eb312b700af2803737c262b280d4d60a211fd9db5b845eb17bf9e","first_seen":"2025-06-24T10:48:48.116118Z","last_seen":"2026-04-20T16:00:39.988595Z","times_seen":855,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/main-e01866fd58586c66.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/main-e01866fd58586c66.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-1d1c6\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119238,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"4086b7aa3c8fe1e2f9d5f78a56e0824d","sha1":"aa2f025254c1a61564b3a7fa9a7587bb6c09ae09","sha256":"27d897b169e5138092365e4db123f357093350ce0ca5cd41b87ec23d717bc520","sha512":"6ef866209d9edb6cb6bad9e5c5cde40fe52799afce120c485f9f8346ba22a6d82da55e6dbc5202ff9384759d7df458781431fdff45627577039dd1bd2951ebac","ssdeep":"1536:s29fc4IJFB5Gg+RWdqcZNkXMr4F/NRvEDS6V6Ect:sDT5MWLPkXMMNRvEDTIt","tlshash":"1ec31ab672d1fda2039741d4883b0007f3691cba146e7095b3eadcd6b49099ea0f6f76","first_seen":"2025-12-12T17:06:26.295804Z","last_seen":"2026-04-20T16:00:39.954805Z","times_seen":697,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/6064-cac277ce2e1c41ce.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/6064-cac277ce2e1c41ce.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-72f5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29429,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (29429), with no line terminators","md5":"f30e0b64d00895f141a8034c290d872d","sha1":"db7cf89f75311ce93d8d9122f2db6e896a95e8db","sha256":"cc7cc872571971ce8208f35d0fb71149cc5ecd5416b6ee58e3151143eac0bf0b","sha512":"aab530e95746fa9e66f462ed5b7f74543b9e0d2cb0d376e83fb752fedb5ca0d262263b6cd25bc4d0cbcf0d2298c60f62bcee6dd66777087b6487d09e3f1aa015","ssdeep":"384:SRKqGQuDQuLUl/xQumIWl2QunqY8SLUizgrc3FoEQulb2xcYYJn/gxtJAkWPY2V3:SKqVzcgCFIWjIqeFojYj1wJAkY","tlshash":"d4d2d7d43334ba9e4dcf586ddebe2909b35dadacb468c140e1cdc87490a7bd4e207a64","first_seen":"2026-03-02T12:45:12.712029Z","last_seen":"2026-04-06T17:44:48.452196Z","times_seen":248,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-2-layer3-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-2-layer3-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 96567\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-17937\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"90d1ee150721466060b3049bc201abb1","sha1":"5df47efd82606f9b4b700079b0d5bd08760d35ad","sha256":"14abd9f548bd352524a4a078fe45c256e2484309e7515112a0897bab425cf54e","sha512":"9ce64565e743637cd75a20ecd48dc422307296759c0b552c2c583628cea709888f55baf78047d8fb90de597d3d621fb05d165e1cc65f8a673a2d60b4cbfc33f1","ssdeep":"1536:cWNAgvJOu8X3Xlw3kxIoz1UjuPimgeMr/BqPs460QDp4prH8eoLvZmH6Pv27bmL1:cWNAg4u8n1Jd1FPimgeMr/Bqi0cC4Lvj","tlshash":"bd9302c1966ae24bf152d4b9a7d94e1f31bc2d70ef71ccca938835f2a8361d03369548","first_seen":"2025-06-24T10:48:48.091778Z","last_seen":"2026-06-05T16:13:44.915127Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/quote-avatars/avatar-cnet.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/quote-avatars/avatar-cnet.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2402\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-962\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"0c0ae51475775a8ebbd5cd271bb2a384","sha1":"1f09a185526a2e71a4c90da4da5d93a4979b50fb","sha256":"52f47751d6fce0c59757fd13669d52470c202a0cc27f0dacea3fbd1e9df5bae1","sha512":"ebd8a3b03d56a4ec0fd90f888feb871f48329044d639f5fd1edeb5b34f6cdb5d03a1f24f2fbb561ef557a22e454f7a88b45cf874ae10050f091407bf423a43d8","ssdeep":"","tlshash":"bd415bc307864cef9bbfa83d25252dbc282556f047aa128e4918f168d70eaa6f0cd195","first_seen":"2025-06-24T10:48:48.102647Z","last_seen":"2026-06-08T03:40:53.739038Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/icons/animated-download-icon-light.gif","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/icons/animated-download-icon-light.gif HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2842\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-b1a\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2842,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 48 x 48","md5":"f53123fddd1590cc0bc6696183a0c722","sha1":"296f6406ab10fed62c23d23d4d21db39a39e21bd","sha256":"57f0d77b82b5d325b6ba1f21c212af4c1cec2628eaabf9505cd2d44e0ba1d925","sha512":"443054ac522db8a74ed1895a868387faf7de6588cd9f5725e93ca9f73c676cd8a8ea48f6045b99b38d93faf061262b73e218ab6241652712bea392aa4ad73cb8","ssdeep":"","tlshash":"2651dd263a0b244ce48683b4278706f9697a1ae9de1f2b4c5dd657fd7d334de438c089","first_seen":"2025-06-24T10:48:48.119262Z","last_seen":"2026-04-13T08:24:53.642457Z","times_seen":794,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-1-layer1-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-1-layer1-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 48258\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-bc82\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"7b5b54d9c5e0015e387735cf516d72ad","sha1":"aec0ba413e899d65933cf9a6e2c2aaf200a99700","sha256":"df7e6c0ca1a2eb6264c300f62ecc5237a733d4d291b9e8f854497089fc69355a","sha512":"4df587adcfff740fbac09a24bf30194a59ffd94d5039c8a9cec5b882449f03dc8ab99a47b7ad63de84bc132376b47109bcc60d741dbd9e95d3b2cf45e869a801","ssdeep":"768:TvwvxIm/Li5uJ9UmkvlxkqdzredBj0xSqZChdEIu2iTi4fhrk+DCI5FKIpWv:TvQjcYUm0/kOAqohdNR5whFOGKd","tlshash":"69230235f02f764cc19e0e7a0465ff2860620e7bff5ca2065468eb1b756e3079d23668","first_seen":"2025-06-24T10:48:48.125981Z","last_seen":"2026-06-05T16:13:44.884429Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/font/ProximaNova-Reg-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/font/ProximaNova-Reg-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-a3b4\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41908,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41908, version 1.0","md5":"bdb39d03661910c1be4309004950b17b","sha1":"55beed31d58fb78b5762faf86428e0f6e1adeda8","sha256":"f3a4b4d740f3bc6fc9be76520559135be004bf72ea54e4dd2412889c46a032d0","sha512":"e42ca00ab2eaa3faf99c53e0d0d324994c33925d806bc7a41cc53a070386015bd3e30673169dad5d3c7fe55f20b6013c3c592b44f0320994d7666f8f9382e475","ssdeep":"768:sKB9Zsq8Ebw51cRBuHek03kXiG+Al1uC0YI+8cwAbRTo++2agBI+AZ:sKdsq8EbQcRMHef3kyG+y15L8cw0U0aD","tlshash":"8a13f1a23605c10ee9445164c68e4bba2f8f19627e476d9c27704b8f01f7af63a8d736","first_seen":"2024-04-05T15:02:48Z","last_seen":"2026-06-05T16:13:44.924697Z","times_seen":1798,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/207-c27bc7bf41eb0c47.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/207-c27bc7bf41eb0c47.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2bf9c\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":180124,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"27bc3501f3935d26ac3af145c17f53cb","sha1":"a8e909fa783a05910721756515416d75c6ace9b0","sha256":"8e9a944a04242730de31fd0efe71b2bf8e1b46cba31a37b7ec355bcb712e5e3f","sha512":"f467b32f330913926c7cf4a7cb3ee50fe542a88d2184f6205f96af39a3a31446ba6919799b21dd0464c6445f4a872a63d906e7fe4a19ca32ff3ed6fd6ea1f855","ssdeep":"3072:SdxkoEWxLDpf4kvV3/RFQnKLdRG7AR5nwzUR:Sj5/qKLdDG4R","tlshash":"dd045c99b224babf6c6b088dd57f640c736f69a8a4444c60b1fcdc2c6065bd4f307ba5","first_seen":"2026-03-05T22:41:54.149037Z","last_seen":"2026-03-15T18:06:53.357255Z","times_seen":58,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/page_home_tagline_impression?8338611\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"POST /t/page_home_tagline_impression?8338611\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sat, 14 Mar 2026 04:48:11 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T12:37:23.003556Z","times_seen":367083,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/showcase-desktop-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/showcase-desktop-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 156399\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-262ef\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3600 x 1740, 8-bit colormap, non-interlaced","md5":"69dd865ef2f281ffe7b39c338a4aba3e","sha1":"1a646c64d15e858e5ea506e690473e41b63a421a","sha256":"87c029324365e41fc1153023f026d6a579a7e90832f2500f9253aad2ece85f97","sha512":"2db4eb75cad849e0167688abfb14dcc018215cf37d120746d04f4b03a1bdd5f16823f6ee28a7178f96d9a0cd826c5f576e6e6789b9455232d3c5b133ac6a68c0","ssdeep":"3072:USDdZNsaBWvmE9n8aGJCPMur2/GwCwTARf3kqDBmTFda6H6:UU3yV8a4OwrTmvkqFmRYC6","tlshash":"8be3124f00da927bccccce5ba833992b9f544a8cd7e03558406db5b4421ea7c4886fee","first_seen":"2025-06-24T10:48:48.108643Z","last_seen":"2026-06-05T16:13:44.885522Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/page_home_impression?3148068\u0026theme=light\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows\u0026atb=v525-4\u0026pre_va=_\u0026pre_atbva=_\u0026atbi=true\u0026i=false\u0026locale=en\u0026origin=funnel_home_website","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:13.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"POST /t/page_home_impression?3148068\u0026theme=light\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows\u0026atb=v525-4\u0026pre_va=_\u0026pre_atbva=_\u0026atbi=true\u0026i=false\u0026locale=en\u0026origin=funnel_home_website HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sat, 14 Mar 2026 04:48:12 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T12:37:23.003556Z","times_seen":367083,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"playtglecode.com/","fqdn":"playtglecode.com","domain":"playtglecode.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T04:48:11.181Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: playtglecode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":28,"connect":35,"send":0,"wait":0,"receive":0,"ssl":42},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-14T04:48:12Z","timestamp":1773463692,"ip_dst":{"addr":"172.18.0.4","port":45334,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"157.90.33.73","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1","source":"{\"timestamp\":\"2026-03-14T04:48:12.380160+0000\",\"flow_id\":760122918545970,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"157.90.33.73\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":45334,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2036300,\"rev\":3,\"signature\":\"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2022_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Significant\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_04_27\"]}},\"http\":{\"hostname\":\"playtglecode.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":758},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1536,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1250,\"start\":\"2026-03-14T04:48:11.305714+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-14T04:48:12Z","timestamp":1773463692,"ip_dst":{"addr":"172.18.0.4","port":45334,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"157.90.33.73","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3","source":"{\"timestamp\":\"2026-03-14T04:48:12.380160+0000\",\"flow_id\":760122918545970,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"157.90.33.73\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":45334,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2036302,\"rev\":3,\"signature\":\"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2022_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Significant\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_04_27\"]}},\"http\":{\"hostname\":\"playtglecode.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":758},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1536,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1250,\"start\":\"2026-03-14T04:48:11.305714+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T04:48:11.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 56067\r\nvary: Accept-Encoding\r\netag: \"69b48393-db03\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sat, 14 Mar 2026 04:48:10 GMT\r\ncache-control: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390066,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"b004d9db08d0184b16a19fec6b131604","sha1":"d410e8c47f9b14d9f69b62f511918a082be110bf","sha256":"963cfca9666d3f5249e1590e5b3dcce51fa379e1724381fd85eae6a428e6b5e1","sha512":"84a703e3fd429bdda77b36e6d15411bd261c49b932515b4f479b9f22fd0e0bf468558f6470152d0d249a1846e3705ad551e8d452a82a9c427044f28a1dbe9bc4","ssdeep":"6144:07qI8F7qI8nWBKnWBKNE/l/o0pA0pa7q7vRsElEbwH:xTUE9/vRAbwH","tlshash":"f2842b22511e75732a3a3caadbd7344d7148f1da8ca202c0f099c9f8d99fe6625077ed","first_seen":"2026-03-13T22:43:19.396957Z","last_seen":"2026-03-15T18:06:53.347922Z","times_seen":8,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":71,"dns":26,"connect":20,"send":0,"wait":20,"receive":40,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/1492-8b6c7836dca20e24.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/1492-8b6c7836dca20e24.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-3bbd\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15293,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15293), with no line terminators","md5":"87435ad889f4a28a018e9eba41ec912a","sha1":"57a408b0901fe03707c59fc88102654b391ba971","sha256":"a96b906382b821e1c681ada209e12ad006954bbc484c45bce3cea6ba9c0b77cd","sha512":"929fa59c27f264d240ce5c0b8fb8f468846c78cbb6a65a11cfe3f83f2b91bdf64281856573f90df470bf526752365167f8bebdfc3a2815b990ebcb6182e0f96f","ssdeep":"384:voAKajj/yXooYCh5n9J14vNk1aYqw/6qLmEcCF8BYtW3/Y:QLDXoYF5H12Bz3/Y","tlshash":"466219d1a209bae7293e2cdfc0fe600d721e764844555184f1f6a8b8547a3e933577bc","first_seen":"2026-03-05T22:41:54.197544Z","last_seen":"2026-03-31T02:37:23.386624Z","times_seen":168,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/1226-0ed94c22ba2926f5.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/1226-0ed94c22ba2926f5.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-7fc6\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32710,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32710), with no line terminators","md5":"7a82b301a041561b650525229b7bc335","sha1":"07dd6b1e01939580d54b8b52b0e914812c285a26","sha256":"81a189fa0670d1b3204b5233c496c9cd282e1ced8fe334b8b4ba2e85df10fd19","sha512":"5a8886902d0fa4958c421f46c12512a84797ceeea503b380f343d99460cce44582dc24802eeac0e71b0ad6c21415651e91996f4b0236856fd8299e2a1e3ccdb6","ssdeep":"768:3UciHSf872BbcQQDl4sn2mOBT7Dhc9zeOTBM:3U172FcumO7OqOTBM","tlshash":"f9e2d87c9288e3bc5843e6acc77fd410330e54adf1aa86946efec7b0a0976d4e117895","first_seen":"2026-03-05T22:41:54.138091Z","last_seen":"2026-03-18T13:28:14.691753Z","times_seen":68,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/media-logos/engadget-light.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/media-logos/engadget-light.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-8ba\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2234,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb31d0343d0d5e4c69af374b3baf4a09","sha1":"bc003f81b1d46b04797f6c84f27d218575d84847","sha256":"25af871962fe0225e85acfeee4991622de29a9e212d9a022d32ebdf2e75a1fbb","sha512":"9f7c5f78b8ace67876fa9224324de9934ab71a623a15de35f58524d5c74a79ce54f168b67033b446dfc5603d88053831f6f9f206f6cdb25695eb487905190208","ssdeep":"","tlshash":"2f41f0f5f38125f979c6df4cc3e2d8f47c1510b62666ca88cbf628a6338472c42d8655","first_seen":"2025-06-24T10:48:48.112648Z","last_seen":"2026-06-08T03:40:53.694592Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-2-layer2-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-2-layer2-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 106405\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-19fa5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"0390574ce2e7f0fbd4feee852fa8e72b","sha1":"18a6761b5b68ea964b70d53edc83978c3450db18","sha256":"5b755ef4ccdb699530f50bd25fd05e9a7504ef9004ca624266406dced64b477e","sha512":"6c70784ac8bd89cbad7a31c6482d5b77e361618706ef44d86366a8a80bfef36a85883a555fc46d02a8a28426f342c80ecab7fc8af241abf5ca358b88a7a9f84e","ssdeep":"3072:Pu4KENDD3KqJ0YJpCgFdzUnBub6SSUZ92GL/e99Xv7JH:7KEN3T7pCgFlUaT92ee9ZN","tlshash":"fca312eeb2b72684fa659cb4c7c24b57e948c64408c84dae37456a0624b319d9bdf720","first_seen":"2025-06-24T10:48:48.110923Z","last_seen":"2026-06-05T16:13:44.862981Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-3-layer1-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-3-layer1-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 177572\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-2b5a4\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":177572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"df97e8ae69410c4dc1320e35246b350c","sha1":"91bf64e7c9fbd3d23c5f1a62efa0daf731d2f51d","sha256":"2ea11f7828f11245c0e309425ea1104c8a21e85b4774f170339e540ab3b1e2b8","sha512":"c50e272c51c91cec8a06539e388ec480f68cb21f148f276bcdcdf3dbea82f9e86be2f782bf5d224648e85333027b90f82d660302ab71a3047749d09447a30142","ssdeep":"3072:82yxoVHn4kseyiESV4mcOAUw1fWmBV2mxYBUNtb8y6+qjgWa5G6RD9yuv2yxJ3:rftnGSGmdAUsPL2oY8tjbT5T9uQF","tlshash":"0804122b479c66c8496c363fd3300617d0461ec95e54b89a361aaaf9bda3db53a1c338","first_seen":"2025-06-24T10:48:48.104629Z","last_seen":"2026-06-05T16:13:44.904925Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/backgrounds/app-gradient-bg-light.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/backgrounds/app-gradient-bg-light.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6077\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-17bd\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6077,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x800, components 3","md5":"a110f0b843740b512f0a21a92424b1ba","sha1":"354891bd0dd5ef5fc975b2b9236bb0d2d37f53f4","sha256":"23d3b9f515aadd1e6cd59cf7e66061aa2345b4e2e93ba9eb6796bc7f98f6d2b8","sha512":"ab1d79ec26b6c02b359f2106a4907e967308d222d67ccd3522c6b4206cbf9db7c89e22732d95ca50a44155543938ebc1a8e239172ed5507e66698e9a48ee29c3","ssdeep":"48:2RTcRTaEEJyy0kIrWgL26EMJ5AZm+yIo0t7Yilo5L+5Cvd3leNfsHlgl9CDtRxVd:qEabohPZJ5AI70dYiG5+5o1Dgl9wYe","tlshash":"dac1f853ef00f2a1ea6a3f3248db1719735c7575536c9a86aaca2d3410733b03d5eb81","first_seen":"2025-06-24T10:48:48.113904Z","last_seen":"2026-06-05T16:13:44.907457Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/2242-69005bb590293c0d.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/2242-69005bb590293c0d.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-16fbf\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94143,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0c4f7a2271a7760007ae0d57312d4be2","sha1":"4ceba152d50babb9b1260250bb3deb2058443d1e","sha256":"1d8ae0b42fdc6f09d0abbe70aeca5008804197569b776d243a6f1ea9288171d7","sha512":"145aaba0ea64b7d2ba6d5943c3110da9069d1c608d0c2a81917237397e8dc3090ba338c341adb9f541910f5fd8e6be9983245e62fcf4cd844a2ebdec7113fc6b","ssdeep":"1536:tOrYtYQ0SNvBIKOXHllRzCDGZ5gX0RkhFGjgnRntqMF7C/02axahc5xRmc:tOrYtYQ0SlBIzDRzCDw5AXGjgnRntqMJ","tlshash":"ba933b23964a3a7a1e6d1caec5bfacccf10da34414a111d4faedda58801a7ad71473fc","first_seen":"2026-03-05T22:41:54.208042Z","last_seen":"2026-03-18T13:28:14.795769Z","times_seen":69,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/Fz9lBMmGkCovwf0b1GXew/_ssgManifest.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/Fz9lBMmGkCovwf0b1GXew/_ssgManifest.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838e-2210\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (8720), with no line terminators","md5":"9e993a25a0ccdb6501d65abdfaea49ec","sha1":"a7aebef7836af03187d02902a4cd495da34f30e5","sha256":"f7f29c07534592efb2706fac758e4c57e551201a011e17703897e2903ea73a62","sha512":"f52b0a38c7a6c7a6bd303d98d881fc3b161f95a7b47dfeea75f15e90865f9458da8154d9d998236d265eadbbb6d4ce71eece565f4dfa4dd4f7744189ff6e4f13","ssdeep":"48:CFZQtSBggZosjbmxvjzPtKidLVnY3Qg2VA79gHgwgBKgBC7gBbgB44gtOtvDVJtx:CGoo8yxLzFXG2VbAHj/eqtOtvntJ/","tlshash":"f802f3929b55bc896063a8602df6ff2f87f9bc40c64e891b52c6d82dc1b0f8dee47541","first_seen":"2026-03-05T02:07:31.877303Z","last_seen":"2026-03-18T06:15:36.11204Z","times_seen":74,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-3-layer4-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-3-layer4-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 13990\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-36a6\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"deed74ef1b5bd4b662e06b3d2eae1735","sha1":"3100ff58fbc87ac1038e469a477c2df931a340cb","sha256":"f3968654a8ba5cd4d8223c82b44754c682cb0ca55574253d081caf8aa488a3a4","sha512":"4db96638bd451c80f988d546fe56498eb3a8b2ce9257e0a0ff5278cdb53f1f112668e8e1926e0bdde7c722be17624b5bf251acc3e440b5673c4a20bb496fdd66","ssdeep":"384:SdK1zYoiPJD8VoLF19IdsN3rPJ7mHfOIAnFinN1:65ogNmoLF1yKO/uFiN1","tlshash":"b752af85d618f12af4890d3194a89c99cafb2ff85c3f06f087f1f29e414186da47a2d9","first_seen":"2025-06-24T10:48:48.084479Z","last_seen":"2026-06-05T16:13:44.869465Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/media-logos/google-play.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/media-logos/google-play.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-3bb\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"072d04961c7b80eb3e75cd8906666bc4","sha1":"9710e5f3336fd0f07935862a60a3c952cd4aced2","sha256":"50b90468481ffd7b370ef14d93b17c6cd917677b20360a5010690d9f07a32f67","sha512":"5de0cb3fb7238f6cd36182e998330911fa060ef0a254ccea993388fdde00550d0429e3dbd7fcaad57bb177ecb2c990e733b30a3b830d8f619e0614a6c0569069","ssdeep":"","tlshash":"361144f930f423357952d775ba2dd8b7261620f93a76e18fa9905e8031910b708de6c3","first_seen":"2025-06-24T10:48:48.123559Z","last_seen":"2026-06-08T03:40:53.702771Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-3-layer2-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-3-layer2-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 169146\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-294ba\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"ecb78e0b9cce08cbf57622a5e92820a9","sha1":"5868a71ea49a7b90e13745aae594a3ca56fbccbe","sha256":"7812d55a3830e80d14856a6c411e19ab877066ddc22a4ef46c7b0508f707dd20","sha512":"68e4d3d1242c6c653a32865a8554b227afed49c11cfd1ba748c8ad2e9326ce1824380d39fb7caf2aa3c660a056d3ea87a7c6d7936f5c032d29899d3f5b464417","ssdeep":"3072:itRveXhaPp3nn9UCNc3F9CkbHuht7qq72W5FqDzoUKOpHvXf5oE4gPdK0QL:GWXhuXIEkLct7qYB5F1gHPmkcnL","tlshash":"04f3123ea80c6accf1fa0af86551512edde41a4c8e361fdd2fe0b502336711e6639396","first_seen":"2025-06-24T10:48:48.118559Z","last_seen":"2026-06-05T16:13:44.912432Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/sad/firefox/firefox-2-light-en-US.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/sad/firefox/firefox-2-light-en-US.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 10054\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-2746\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 400, 8-bit colormap, non-interlaced","md5":"313462c882214a84b047f5f46302b894","sha1":"2054beea7c27166d732f021d355acf48b24e2ace","sha256":"33d1417ff9f088de136d2bb41323632a5403abed65b44feb7433192cd0ac6799","sha512":"d4b0597689e1cc2c144657f2961a627cbd944990171be4eb51e988e7e96644ad5a161c4da870afcab5416f4b98cce4f6f12226b09e9b05ae1054a9ee351ac9b4","ssdeep":"192:wPcFX+9HITN4wXD3nVxZ4PGXwlsKwppmYGEElQfLZzqlADAyZP5Wh0nt9:+cFu9HVwXD3njIw9X/HtWlpyZPS0nt9","tlshash":"5f22bf3921dcc31af76447716f3d5591cba6c801adb407d092afc92c6b0ad6027ed87d","first_seen":"2026-01-13T19:12:51.017951Z","last_seen":"2026-06-08T03:40:53.684769Z","times_seen":886,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/sad/firefox/firefox-3-light-en-US.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/sad/firefox/firefox-3-light-en-US.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 8880\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-22b0\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 400, 8-bit colormap, non-interlaced","md5":"094a5bad60a551bc0fc6965db002f2f0","sha1":"91fc8d3103376b4420b3c749f2cce6fdbc59732f","sha256":"e205fdf6aafedb59698da9e442241e0e008a0f8968b4380a25366fa00042bbda","sha512":"76793b02d1c650edf2168a50bfd4fe4b732d3c531009701820c69be327c747a9eaaaa853aa1c673eeade3e43b8e572ced3707a1581138e508cadc62ec77b0a8c","ssdeep":"192:1fDxYiByli0BUuB1Z8oebC6Czn26mOP6ZvX/hVxM5NPy:1fDeiBei0Bh5UC6GpbK/xMTPy","tlshash":"9002af26c61083ddf4ec47f7039eba34f8468a9acb82c11b9bd0d325b5830545bf9a9d","first_seen":"2026-01-13T19:12:51.004744Z","last_seen":"2026-06-08T03:40:53.736171Z","times_seen":886,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/atb_home_impression?2385251\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows\u0026atb=v525-4\u0026pre_va=_\u0026pre_atbva=_\u0026atbi=true\u0026i=false\u0026locale=en\u0026origin=funnel_home_website","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:13.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"POST /t/atb_home_impression?2385251\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows\u0026atb=v525-4\u0026pre_va=_\u0026pre_atbva=_\u0026atbi=true\u0026i=false\u0026locale=en\u0026origin=funnel_home_website HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sat, 14 Mar 2026 04:48:12 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T12:37:23.003556Z","times_seen":367083,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/webpack-2abeac151a6f61b1.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/webpack-2abeac151a6f61b1.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2d8e\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11662,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11662), with no line terminators","md5":"6d8bc5fd5bdc8ddf4e57de43074ea27b","sha1":"1b38bbe188472f65cdba6617639c395dcb01d6ee","sha256":"1938c35820655cf725861552c17f9237a9e28e6fa075eae45fda19cfa366c9da","sha512":"47c4fc6a283495566388fc2dca6dec755a8368c3e1689c245333b9bd78285785497b0d6308e8da2f0a2e4792142487bd296b5013e66bd32e97e90e489f6388bc","ssdeep":"192:ghwBvx6+tbXq/jwlFpM6BfwQiksRF8ofxmiMvJjU1:ghy6+tDq/joM6Bfwj9AofxmiMxjo","tlshash":"d8329559fa2e9c7e6e643fa0fc7413906f04521be9f7bc7381088568687aded611db20","first_seen":"2026-03-05T22:41:54.166554Z","last_seen":"2026-03-18T06:15:36.104195Z","times_seen":68,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/3865-0383d3bbae55a786.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/3865-0383d3bbae55a786.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2502\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9474,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (9474), with no line terminators","md5":"e6c1f376cd348c7668888bc6a9d9f403","sha1":"22a32863197d833ca5449a8332413ac79d53fdaf","sha256":"962c8e300638e46dfa464900ef8b9d1ae56bf8173bb16fe63101a04eebf595b5","sha512":"751c560c2c48e422e324128b3c4f2330bbf3061b08c3cea028924256c07c444422b76986b7740b8d38c78c5c876cba036c206f7ea39efb8c9179479015c55d0a","ssdeep":"192:38xhXjwVVRfS4PkOJKAiYXwA7bR2rTgt/UsR:3UgVRfS4loYXwA7byTgt/ZR","tlshash":"e512ea95b1467ce1cfbe4686d07f505df266e2086c4c4460b135a8ac26db2e5f31bf8b","first_seen":"2025-06-24T10:48:48.129143Z","last_seen":"2026-04-20T16:00:39.97787Z","times_seen":843,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/6707-0dd9568a0a8c5490.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/6707-0dd9568a0a8c5490.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-13ea0\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81568,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"45b55d6979301fda16278228522d194a","sha1":"ea704a2c3990eccbdae95022575122a813f93d75","sha256":"a338e28a1d3fcc1bffdbc309c150e01e8981960a1f5b6ea1f58b0235ee60d51f","sha512":"90f58ff8bf207b58043703612db902361d0a9c69b2f56118b6ced93d6dc40e70af1ca86d4b02f48fb41e8a2e0e1b66361d174cc3ee8df1c8dc3033e2163fee0f","ssdeep":"768:dVloGOVz5w8IbaHL7LK0kwJUX8+LEhoelaZIsBMb:dHbaH6FLZI2C","tlshash":"79831b94b164a6fd8d87058dc93f880cf31f76ac746c8594a9acca747092fd8f21bb94","first_seen":"2026-03-10T13:32:16.974158Z","last_seen":"2026-03-17T19:33:38.031617Z","times_seen":25,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D/home/desktop-135605efb5076bf2.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/pages/%5Blocale%5D/home/desktop-135605efb5076bf2.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-13f1\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5105,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5105), with no line terminators","md5":"d4b30023048f29c0cfc0457e7ce6f0cb","sha1":"0beaf12daaf0012b35dcbec4056f899d1a8a93b7","sha256":"c40f668e6544205919a770001b13058505d39fef2c87735bb1b55162f435c7cb","sha512":"386a320937e266f7f8812b4a2a66d443fad7f4cb9b055e166e2fd2a901ddb6261124efe04a0e92cf2bd4e9e39add046492eddd5af77c37a49e2b569bc86eebb9","ssdeep":"96:10NLMWCbkoev/zFP5PrkPPoH0uxx8mwXMtvfa3AJ03w8rfYVTTH6:uMWWvev/pp4PPoHRiXMtvC739f+TTH6","tlshash":"f3b1515edad4a86c7a395c8cf97fc04cf7ec2c6997b91890b5eca85404996c12212fce","first_seen":"2026-03-05T22:41:54.151331Z","last_seen":"2026-03-18T13:28:14.802138Z","times_seen":65,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/page_home_searchbox_ai_impression?2425298\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows\u0026atb=v525-4\u0026pre_va=_\u0026pre_atbva=_\u0026atbi=true\u0026i=false","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"POST /t/page_home_searchbox_ai_impression?2425298\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows\u0026atb=v525-4\u0026pre_va=_\u0026pre_atbva=_\u0026atbi=true\u0026i=false HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sat, 14 Mar 2026 04:48:11 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T12:37:23.003556Z","times_seen":367083,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/media/macos.e15f833d.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/media/macos.e15f833d.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2741\r\nlast-modified: Fri, 13 Mar 2026 21:37:18 GMT\r\netag: \"69b4838e-ab5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"5933f53a169cee3712560f2ea8475b06","sha1":"c05f67f13c027e0ef4f7045eabc814af49fd9026","sha256":"8816b10847b5a12dad56ae87a5348b9c8a61f674d3bd9a25908bbd5285148b8e","sha512":"9d6ded484923f16f98f73d67cd6c4ff88c89cdf32ba8f86afbe4edc9e816f2b15ba7b03bea97fb52b50d0b3a037d2aa51317989136edaf7f37d8d1fa6727fed6","ssdeep":"","tlshash":"64515bb2e2fceca54ced69285170ab23180ec869415109be50081a13671e0eccfbf2ec","first_seen":"2025-03-05T18:07:33.03685Z","last_seen":"2026-06-05T16:13:44.923474Z","times_seen":1223,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/favicons/DDG-iOS-icon_152x152.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:13.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/favicons/DDG-iOS-icon_152x152.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 3576\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-df8\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:13 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit colormap, non-interlaced","md5":"25c443fd913d8172af12119396c494e3","sha1":"543937df02caa63dc86aa31ee5743052d803268a","sha256":"f6e52a35e8854ebf14c9b8442302f6f7d5d0063f0215b7210edf4676d7fd7369","sha512":"910dc04b6422aae52a4d5294fbf9ae87e65bf678ba36c2ddfcab60cc21f0e37f25a6a01e78a2c0edf9356ec1035166c4f5ec47a5e2ed5a7263a917ece1b6b1d9","ssdeep":"","tlshash":"04714dfd8390593dc0b7a8ff985e8645d49d612089b4fdf1b741bafd84ae5db006150c","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-06-08T03:40:53.728498Z","times_seen":2322,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/7991-fda16686d13b7cb4.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/7991-fda16686d13b7cb4.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-756b\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30059,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (30059), with no line terminators","md5":"721ebaffcfbf1ec06ca3c78828e2ba93","sha1":"24db80d76a7b94ce179053db26bf3c4d55bc2ce9","sha256":"5dc85de04fb34e21d3072fef64e88855a46448de6f64bd125b4722dcdd864278","sha512":"d3061e957863088d1ee4cb280e564ec41bf7fa588eed0e1a66728c1c35a19e4598f6eeeca008bf14ccfaf1981f4938d8773aebaf9fdf748c9bc000c4a0738fd5","ssdeep":"384:JSZGI4v9mS3I0Vg+RCCmVROU/JvFM2bgjOpHR36GtGxNFgyH1:YGIA5g+RCCWsstoOpHZ67rFpH1","tlshash":"88d2b3d8b292b0368ad7a4e9507f514eb33f3a56249d5050e02ae0d83d78ecdc673e9d","first_seen":"2025-06-24T10:48:48.100364Z","last_seen":"2026-04-20T16:00:39.99565Z","times_seen":843,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/3611-a058c9990ec2e9ef.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/3611-a058c9990ec2e9ef.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-27cf\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10191,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (10191), with no line terminators","md5":"a01aa0e01fe08e252bc419345f79300e","sha1":"40b359458d4c6ac8b3482809faa85ac882fee007","sha256":"7e2693d418e330fcf150fb72f6425940b325726fec24f4069dddd67ae32c1221","sha512":"4c983eeb368ccb4b1f71bb0bc4e791d116823a2586e8a971c211f8152efeb9a7ecc73f3fe29a09f495367ad1c728e0f2b13a37fe2a20419b71a4ab9de0ee658b","ssdeep":"192:hmKtRkmgUycgDcDUMLZ3dfkrKjumF85KHKKwrunKSfF2vB2Vavec//eofqu:hLRkmgUyxSk0X5m0KStYW8HeoJ","tlshash":"4c22e8b637007076e3ef438fc04f4219b3ba555624075418e6688ca6be307b652e7fe9","first_seen":"2025-10-04T18:50:54.523774Z","last_seen":"2026-04-06T17:44:48.446923Z","times_seen":672,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-2-layer2-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-2-layer2-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 106405\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-19fa5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"0390574ce2e7f0fbd4feee852fa8e72b","sha1":"18a6761b5b68ea964b70d53edc83978c3450db18","sha256":"5b755ef4ccdb699530f50bd25fd05e9a7504ef9004ca624266406dced64b477e","sha512":"6c70784ac8bd89cbad7a31c6482d5b77e361618706ef44d86366a8a80bfef36a85883a555fc46d02a8a28426f342c80ecab7fc8af241abf5ca358b88a7a9f84e","ssdeep":"3072:Pu4KENDD3KqJ0YJpCgFdzUnBub6SSUZ92GL/e99Xv7JH:7KEN3T7pCgFlUaT92ee9ZN","tlshash":"fca312eeb2b72684fa659cb4c7c24b57e948c64408c84dae37456a0624b319d9bdf720","first_seen":"2025-06-24T10:48:48.110923Z","last_seen":"2026-06-05T16:13:44.862981Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/font/ProximaNova-Sbold-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/font/ProximaNova-Sbold-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-a358\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41816, version 1.0","md5":"4d5698622d8fb4000a4114f204a22904","sha1":"41df913c2c8d5e453720376a842f1cd5028cc2a3","sha256":"d4ffa5e62dd2b9dcb4ed73998595529b1d4f89b265e21d951d2e73d783a673a1","sha512":"f38c07f5bc83348ffed6d52b9a625077760ace0d756c0c6b0cacfee13a4cf98909356ffd1666a968eb67e63674ee7c65d60824034d2092fa572f9ad20bddebcf","ssdeep":"768:gYl8POMQzty0ZGkL/TCeLwIF3N1mWUhY8AdRw/SplV//:/82dZyVkfCeLwA3V3OSV//","tlshash":"8b13f177460d2a85fd691433601ce6bacdbba2b90f74d0bb2e36053dca27e65b1b0146","first_seen":"2024-04-05T15:02:48Z","last_seen":"2026-06-05T16:13:44.924086Z","times_seen":1814,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/css/6cc531d9c87d1f5b.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/css/6cc531d9c87d1f5b.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-10d00\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68864,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5c4169a170e7c58b078dca6459c3ab79","sha1":"e7270d3a8e1b5696b7930d19789ad00839a89348","sha256":"c347008d8374cef7338158ab857832cc22b2dfbd9646851e20b2bdaa5c29651e","sha512":"074848eda05390074408a90b70338af6e5b55a0fb91df7659531dc29103f7991ffaebb33e1aac57a29abfa769754614c20526ff028b8732bdad8e3327105d47c","ssdeep":"768:xQ+Z0T3UNDvf9amHxKao5VzWc2TY+1Y8JGl+:eTERvVCDTzWc2T1Qc","tlshash":"f163c6a8f955713ddc279a7ec688ff1d721479b1ab132af37412f4418ac7aa201bc94c","first_seen":"2026-03-05T02:07:31.870078Z","last_seen":"2026-03-19T03:36:55.170405Z","times_seen":52,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/1938-f781b33edddaa06a.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/1938-f781b33edddaa06a.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-3c997\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":248215,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4430d6f19de85ac8dc315dcd7ec5a8d0","sha1":"279e1d0474be6b6841d63f2d64d17dbd817bbcb2","sha256":"77b5c2d8f70c8d725f7f1b8e193197dc5aa1e458fded2685bbd8315104c31a46","sha512":"2a568912b95e1eadf0d38bcf3936047fd0ca3919c64178fea3be9fff2c5dd189115b9d2da52716b2323cf70f423daa14abbe87a224f53cbf8bfc785cbc818dc7","ssdeep":"6144:24LIpOTvam9sAZlLb2/B76QzpRgXXQHarmtb2aNxwtLCaVSw/2:24LIAa2/2","tlshash":"3f34d6d82374a3ce598fa15ecf7eed48634e60ad3475c0914adec76ca06bac0f61b560","first_seen":"2026-03-05T22:41:54.146536Z","last_seen":"2026-03-18T13:28:14.752531Z","times_seen":69,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/privacy-pro-eligible.json","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /privacy-pro-eligible.json HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 150\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"7f077f1fce3d566040b0d69eb1f27d8f","sha1":"28d9c5f6b214c5cdbe7f7e55d6ed5e82080dea01","sha256":"487ad0d2cf075f4328a1adf57ef428759ad4e2c873a8ebd2ad9653990829c9cf","sha512":"fb93af3733dfb08f18ecc4dccf2fbf035ac0be66d8abf5715d7716fe27979c349b33994055093a5dcc8852b8305cd0ac8ab468fdfdf136f2904b38256cc8d739","ssdeep":"","tlshash":"d7c02bb735923c0cc56331340bc3fb44e0f082a2ba5849310000488771c31078ec37d5","first_seen":"2023-04-05T13:56:31Z","last_seen":"2026-06-08T07:07:01.058898Z","times_seen":6428,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/media/firefox-lg.c4379281.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/media/firefox-lg.c4379281.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2ccb\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11467,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2f58da01253d23d23275e400b369c9e","sha1":"7e6500000e692ccd5f37169d642f07af6c5258e7","sha256":"e8caceb71ac515488354aca8628b25d636b9677e6d90e567f7a5cdf82a4d901c","sha512":"a137d64aa863709daa40c2d4c5c3215f4709d4412a53a1d1cc3cd22dc70e00836b9f9ffe31722678350b2e8285c110ab13ed1a4505446004fa1e17dcf0147476","ssdeep":"96:k2KNC1A1ZJVJ6+5EivfNSQivfNP6M5mt5mnlQ3IgzUXLiBQp0CmLbc1x9NNC2qHH:619JducolkzqcMGuc0gJZkHkpZ","tlshash":"7732ff6983f8a2bed44b935dca5298103b1c51a736c08240b5fecf9e5f1998a9d4f7e0","first_seen":"2025-10-29T23:11:46.088869Z","last_seen":"2026-06-05T16:13:44.889394Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-1-layer1-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-1-layer1-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 48258\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-bc82\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"7b5b54d9c5e0015e387735cf516d72ad","sha1":"aec0ba413e899d65933cf9a6e2c2aaf200a99700","sha256":"df7e6c0ca1a2eb6264c300f62ecc5237a733d4d291b9e8f854497089fc69355a","sha512":"4df587adcfff740fbac09a24bf30194a59ffd94d5039c8a9cec5b882449f03dc8ab99a47b7ad63de84bc132376b47109bcc60d741dbd9e95d3b2cf45e869a801","ssdeep":"768:TvwvxIm/Li5uJ9UmkvlxkqdzredBj0xSqZChdEIu2iTi4fhrk+DCI5FKIpWv:TvQjcYUm0/kOAqohdNR5whFOGKd","tlshash":"69230235f02f764cc19e0e7a0465ff2860620e7bff5ca2065468eb1b756e3079d23668","first_seen":"2025-06-24T10:48:48.125981Z","last_seen":"2026-06-05T16:13:44.884429Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/quote-avatars/avatar-theverge.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/quote-avatars/avatar-theverge.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 1810\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-712\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"d30fb85b9f87feb1c19f29bdc5ecadef","sha1":"6386e4dbee4b53e1bf6deef884763c24d8414183","sha256":"cebc17ad0dcebf8763210844837addb600c37fde105f7a151ac52c019ba78ab4","sha512":"6fa15cf16fe8c308861514f07be16fc8bac77e58d11fbefeed5992e495e211b41428d353cee7fb0b4cfc7f57a290961ed884b5b4435f7288f235d2aaa52da187","ssdeep":"","tlshash":"7d312de1d4743875951105124648c9dfc5ac530fc205e4df5a62a921c9be1be45c1d93","first_seen":"2025-06-24T10:48:48.130635Z","last_seen":"2026-06-08T03:40:53.733637Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/quote-avatars/avatar-engadget.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/quote-avatars/avatar-engadget.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2403\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-963\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"c615b1f4c1f75f90761b8a5d677041ba","sha1":"a59099deb403c6ca49b81aacc6bbfad099cbd8c1","sha256":"1f96add52fa709765f4bcf874eae9b7273316d12ea89c28e8512a82b332f97f6","sha512":"45f7cb7cb6c71d95931af7923184fc4ee8dac8c12bf4e31e358c676fa7423ccf11eed18f1b6437a81228391eecad263260903adc4e0c06ecc9fb969e787279ac","ssdeep":"","tlshash":"05415beff76173fc628b0b306c8f35942f16402c47b62c8a8a360420083347e96a2599","first_seen":"2025-06-24T10:48:48.094536Z","last_seen":"2026-06-08T03:40:53.666598Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/pages/_app-aab664118a6eac26.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-aab664118a6eac26.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-578fd\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358653,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (33808)","md5":"1f18f0f7b951e9c21138923668cfc197","sha1":"cce0d448aa879b207a49d2550ab93bcb67cf4c6b","sha256":"b3b90647bfd980a36ebd3f59e0638c5bbb83ae234e76b865e7bc89b4c99f2817","sha512":"50329b5e57d3693ccadd4f2e8798193b606bc5aeb80cf497e9fa9acebaf9f778e6303754b56c8e3a43736f5d117200ede834f365bc68ebef089dd00246af6d24","ssdeep":"6144:fCx5uSSTHDJHDCmgUZWhLz3NV8WnvGUxIFO3hg31GZzi+t98:6qHDJHDkUIhrxp2j","tlshash":"41742a8d7be1a0b54b8f11b1702f3407f3391a84d9685985f29accdd28dcd4a64f27ba","first_seen":"2026-03-13T22:43:19.408925Z","last_seen":"2026-03-16T23:07:00.654885Z","times_seen":9,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/icons/animated-download-icon-light.gif","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/icons/animated-download-icon-light.gif HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2842\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-b1a\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2842,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 48 x 48","md5":"f53123fddd1590cc0bc6696183a0c722","sha1":"296f6406ab10fed62c23d23d4d21db39a39e21bd","sha256":"57f0d77b82b5d325b6ba1f21c212af4c1cec2628eaabf9505cd2d44e0ba1d925","sha512":"443054ac522db8a74ed1895a868387faf7de6588cd9f5725e93ca9f73c676cd8a8ea48f6045b99b38d93faf061262b73e218ab6241652712bea392aa4ad73cb8","ssdeep":"","tlshash":"2651dd263a0b244ce48683b4278706f9697a1ae9de1f2b4c5dd657fd7d334de438c089","first_seen":"2025-06-24T10:48:48.119262Z","last_seen":"2026-04-13T08:24:53.642457Z","times_seen":794,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/media/firefox-extension.8e658fcd.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/media/firefox-extension.8e658fcd.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838e-4906\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18694,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9946a5b4360b8cd06991061769f8b3e2","sha1":"b013852c325a789d7ab23ac66bf630de298453d4","sha256":"20b79af5a0707f000d25afeafd0983ae8adafaeff17ddfad4cc4d29b1759f6ce","sha512":"cad3ecf4c30a70f58553ffe9b01352efe02e919cc779cee5be03599b95c447b16b2876f3c97c63a32facd4dabc995c50f3444dd91ea2b8dc9195caf96a94481d","ssdeep":"192:BAd7jaLXL5qUY2qUYEcHVIIU4V1k/v9dlL9aAQHk3/MXTZqHYo1ApL+SNJHfFmN/:3nY2nY91IW1CjKAQqc8HYo1O7NJS/","tlshash":"548213d582bc95aee44bc21dcb55d450371d91e736c08280b1aecf6e4ff95898d1bbe0","first_seen":"2023-11-27T19:54:18Z","last_seen":"2026-06-05T16:13:44.891137Z","times_seen":1922,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-3-layer3-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-3-layer3-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 36864\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-9000\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"a02ef7974fee4a7dce5fd4fbd4beb805","sha1":"fe813b89c248c1dc2f43c17f5dd9bef27c154ed3","sha256":"54c8038ad3c35c3d7bcd3df482212dce5aa546580747e55350ca09971abede08","sha512":"2031ca209eece93a26dff7905fbf6186500cc7ce6967043d17430d37d0f53a690230882be9e6a02fa7d08ae0dd5bdcda477494d6d50938d5c4dfa43b026347a1","ssdeep":"768:j0706qVLekIMSCkgSxzx0k+DnOpg6pI33HSLNZQs:Y70jVmCXLzOHuMNZQs","tlshash":"d8f2f257415a1ae4e1b84b7f706544f9b3fb58388f2720ed37771f16e852c1a4680d8d","first_seen":"2025-06-24T10:48:48.092532Z","last_seen":"2026-06-05T16:13:44.876495Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/sad/firefox/firefox-1-light-en-US.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/sad/firefox/firefox-1-light-en-US.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 14572\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-38ec\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 400, 8-bit colormap, non-interlaced","md5":"a74949359104cf314aa32ece25ceef83","sha1":"141a35fa8c752ffe621a044af15827420aa17b74","sha256":"457c5318d4fc9ed9e904ef5fe4bce9a603f7a8f76e6fe9cc562c22328010627f","sha512":"e3888fda83a8cb22332d6fa942f68eda5d068a81e73ab76de54566cfad4751dfe5c84098f4ace806fc57dbe4edc5b63d9ecd7208fbd50fb1422bfbb232ef7cd0","ssdeep":"384:3ISLnX5isBdthW75bmn858fEWjPjkL8Yspo9gy:3nXvvth2lrxq0Xspty","tlshash":"7962c018b5872d1eba852d3f211cd16c021442666797baead17bca7daca4d7748832c8","first_seen":"2026-01-13T19:12:50.977716Z","last_seen":"2026-06-08T03:40:53.732779Z","times_seen":886,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/wide_event_homepage_load-homepage?global.platform=Windows\u0026global.type=web\u0026global.sample_rate=1\u0026context.name=homepage\u0026feature.name=load-homepage\u0026feature.status=SUCCESS\u0026feature.data.ext.duration=1573\u0026app.name=Static+Pages\u0026app.version=unknown\u0026app.form_factor=desktop","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:13.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"POST /t/wide_event_homepage_load-homepage?global.platform=Windows\u0026global.type=web\u0026global.sample_rate=1\u0026context.name=homepage\u0026feature.name=load-homepage\u0026feature.status=SUCCESS\u0026feature.data.ext.duration=1573\u0026app.name=Static+Pages\u0026app.version=unknown\u0026app.form_factor=desktop HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sat, 14 Mar 2026 04:48:12 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T12:37:23.003556Z","times_seen":367083,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/css/dea7528ccdc495e5.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/css/dea7528ccdc495e5.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-19d5a\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105818,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"be0483d72b3f5a254d3c73261dad2510","sha1":"38c92aa04eeb251cd38874ff3133f54dacf9fa24","sha256":"9de0fd81c459031f7343c2a9433009cf055bb16244a3a911de05fc2509e58c9f","sha512":"82c59698c24c8fca64025255a7605817a31417afe0ad8e4f1e42134edaa91ade97e3dce566a128e3909f7004bc3f520c5f6b8bf094d9bd9630ac5e267a2775c2","ssdeep":"768:Z7Uu89OhiF+feuzZcT0zGFqbfBNoVcrwVW2Ydu4DQqZ6:ZnfekOT0zIqbfnoVcrwVWVu4DQqZ6","tlshash":"30a361e5fa225076193f093f8149fa3f6a16fc84af152ecbf71516c039c2aeb02b5615","first_seen":"2026-03-05T22:41:54.200578Z","last_seen":"2026-03-18T13:28:14.674093Z","times_seen":70,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/css/1c5de297f88acfc5.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/css/1c5de297f88acfc5.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-13bf8\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80888,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (65536), with no line terminators","md5":"4178fa238a011811c79a5397f8d2f7af","sha1":"00cace50c67342695c3a43a7aaffe6c685f8e83b","sha256":"a554a31f85070a8e25cd35f0d73de49d889db9715c9b788ad0421d4b791df145","sha512":"6f0d25374a1db7703d68fc05a92073e8b35e4eb0cc8c0c55646645ff264ea209adf51c503697c1508ba9cc5d212848b67a96c40465a8715c2f1d46e49a070113","ssdeep":"1536:J+gPutADDKE3FKP8JR8J1vf8JJ8JlLT8JE8JYyz8Js8Jo+X8JG8JKkh8Ju8JaQfm:3LQP8JR8J1vf8JJ8JlLT8JE8JYyz8Js1","tlshash":"e383a6f58530663c783b5927764a778d72f4fc806e113aa9fa21a0dd44c3ff5226b24a","first_seen":"2026-03-05T22:41:54.173533Z","last_seen":"2026-03-18T13:28:14.700514Z","times_seen":70,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"playtglecode.com/","fqdn":"playtglecode.com","domain":"playtglecode.com","tld":"com"},"ip":{"addr":"157.90.33.73","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T04:48:11.306Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: playtglecode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Angie\r\nDate: Sat, 14 Mar 2026 04:48:11 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Security-Policy: script-src 'nonce-DdoMsizPQMYAUjYk+AzVsQ=='; style-src 'unsafe-inline'\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":1536,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1190)","md5":"5dbbb67efa226efac0f3feac9ab36143","sha1":"ba6f665b8cedb365ab56c3ddca900092bdbe6c6f","sha256":"c7074e7ef57f45df0f91351b27c36f7256a909a97eccacf41e9635ca781ad4f8","sha512":"bfb67dfaed8454dbef7c94ce03c2138496b7aaf9a42534892344dbe51d40af4cf8ac89d78efbb60c3bad9f168c147ae1c282605b1f446288f6a8adbae3e2e4b3","ssdeep":"","tlshash":"e531de9421d2d40f37fd9727aa2337cee6a627580841ec1b4e04f05ae5d124ff5e5674","first_seen":"2026-03-14T04:48:52.159199Z","last_seen":"2026-03-14T04:48:52.159199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":38,"dns":0,"connect":37,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-14T04:48:12Z","timestamp":1773463692,"ip_dst":{"addr":"172.18.0.4","port":45334,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"157.90.33.73","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1","source":"{\"timestamp\":\"2026-03-14T04:48:12.380160+0000\",\"flow_id\":760122918545970,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"157.90.33.73\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":45334,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2036300,\"rev\":3,\"signature\":\"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2022_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Significant\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_04_27\"]}},\"http\":{\"hostname\":\"playtglecode.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":758},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1536,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1250,\"start\":\"2026-03-14T04:48:11.305714+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-14T04:48:12Z","timestamp":1773463692,"ip_dst":{"addr":"172.18.0.4","port":45334,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"157.90.33.73","port":80,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"severity":"low","alert":"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3","source":"{\"timestamp\":\"2026-03-14T04:48:12.380160+0000\",\"flow_id\":760122918545970,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"157.90.33.73\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":45334,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2036302,\"rev\":3,\"signature\":\"ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2022_04_21\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Significant\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_04_27\"]}},\"http\":{\"hostname\":\"playtglecode.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":758},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":1536,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1250,\"start\":\"2026-03-14T04:48:11.305714+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/css/913868609bb223b5.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/css/913868609bb223b5.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-13a0\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5024,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5024), with no line terminators","md5":"bd2308e80e1cd623bce612b9e7b33974","sha1":"cc499d4068e634b24f0493b789abad843a349d7e","sha256":"d7bc1107778f28f9276ad2386aa51e43e645bc04599f1ee400d12716411dbd6b","sha512":"98b66dd81a9fe38766fd54bc6ee55c41f5fdd91a222ec578ca00c9a39297b119e2c6edc4b85785d6ae1257279d38ff2eddb7e324e0f1573bb0c8bb3e23dd1def","ssdeep":"48:gn1ddJKubmicdVqCNJONlbggcCIbJKYccdVsCTzDszQ/ba8N77kCvBWMVUY4VIrn:QVSdkbgDndd1bHN77kiWMuYiQ+u1","tlshash":"bea1238ed9308169593b2c18f6bb622eaf6c7ca16bc73c85dbdd5ec439c26c60145f09","first_seen":"2026-01-31T15:23:17.305216Z","last_seen":"2026-03-18T13:28:14.79514Z","times_seen":215,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-3-layer2-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-3-layer2-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 169146\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-294ba\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"ecb78e0b9cce08cbf57622a5e92820a9","sha1":"5868a71ea49a7b90e13745aae594a3ca56fbccbe","sha256":"7812d55a3830e80d14856a6c411e19ab877066ddc22a4ef46c7b0508f707dd20","sha512":"68e4d3d1242c6c653a32865a8554b227afed49c11cfd1ba748c8ad2e9326ce1824380d39fb7caf2aa3c660a056d3ea87a7c6d7936f5c032d29899d3f5b464417","ssdeep":"3072:itRveXhaPp3nn9UCNc3F9CkbHuht7qq72W5FqDzoUKOpHvXf5oE4gPdK0QL:GWXhuXIEkLct7qYB5F1gHPmkcnL","tlshash":"04f3123ea80c6accf1fa0af86551512edde41a4c8e361fdd2fe0b502336711e6639396","first_seen":"2025-06-24T10:48:48.118559Z","last_seen":"2026-06-05T16:13:44.912432Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/media-logos/the-verge-light.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/media-logos/the-verge-light.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-c35\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3125,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55e33d05b356c83388b61424c259ea5e","sha1":"83a217260e1203db9a8c4e1586273b05f9420959","sha256":"a2219243834f320c71289ccea53cc10efac79f0cb3cc4c242989f400fae8cc1f","sha512":"437760c808a478181952ba35c8dc8bdfb91d91e15e729863a8cd8a37c726bdb494d45bc722218202533183e284122f048b97e88133cd6adca290203719f36e2b","ssdeep":"","tlshash":"6b5142ed53d816b0ec06e3d59914c8b0768368fa3d30f7b08a656db5b24685d9569c02","first_seen":"2025-06-24T10:48:48.136551Z","last_seen":"2026-06-08T03:40:53.739846Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/css/bb168526d20aca9a.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/css/bb168526d20aca9a.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-1ddcc\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122316,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"17dcab1e3e3dbd171877ec61864e5e78","sha1":"52b69195eb956c8f1c0da5e4690f16e3d6734e1a","sha256":"6cb36c7eb9f6a38281995a0b834a2b2fafb7dbba0d5d1d1bb96ac64becd56c97","sha512":"f0bf02e28c52724f194ecde501b1acb89b259654e2dd6d88994a9ee5a07dbf678e540bbf1d282c52c671b1b67c3118dee3541b16329e06f43ecd81b716179593","ssdeep":"1536:o/tIi2FgctFdpEJXn9nqyc8OXdkKaZztWuP5caJ:o1Ii1cs39ac","tlshash":"1cc3b8e9c930953da43b182a67ce710c65b9fca0ff123cdbb66550859ac3bf9117b206","first_seen":"2026-03-05T02:07:31.821311Z","last_seen":"2026-03-19T03:36:55.120302Z","times_seen":83,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-1-layer2-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-1-layer2-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 123605\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-1e2d5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"1c95594467bfe2babda3852a113fdf8f","sha1":"ae2b81f16bcdf4a0063152866e632260fb97e1eb","sha256":"218c680560dc66ad386c570c5579a42c2388b38911b7bcb1a3a8a702f0a6844d","sha512":"35a74b4bc3535c99effc55778db527e30600870a1a9a84534a6cd02c70a20fa2ae4cc61414a74db84eb0c5112701957beaca531e729561f0d94a8bd7cc6ca901","ssdeep":"3072:L9dWsjsVaoIsnjGpwANpBrFAGer/PJlaRcQ:Lbzs4oZu/3AB4RcQ","tlshash":"91c312fc239e6172da4396f0d1a9287425cc086bdf9e6bf58c60042de1a797c6b9c271","first_seen":"2025-06-24T10:48:48.101136Z","last_seen":"2026-06-05T16:13:44.887712Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/media-logos/techradar-light.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/media-logos/techradar-light.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-2361\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9057,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8a2e5db2b7589dfd712c5ec6b5dfca0","sha1":"5a61a273b2aa3414d1ca38e749c2e868c8776a07","sha256":"cb89363b5abd650d0be2350e5662221b4027ee8819c127ea2f98bd429da4aadd","sha512":"189d0c5ff218199f418810d8095ab0ed75692dc44deb84b73f8211986b47ab832cf865a5dc99b5097999d4ade609e5d57e1a28c69e5b7e3587b1c1b0c534925f","ssdeep":"192:Q3Pd6t5lyJQ72miObC8n+6JGgceB4fq/wk1GwEATzGC5fN5z7oWq:PTYqiLEC8nS914R3o7","tlshash":"4212a7ce73a9b3f4e044f3d6c7a750757a2a20fa6a23ce3487959e58f80141ed898cc5","first_seen":"2025-06-24T10:48:48.103414Z","last_seen":"2026-06-08T03:40:53.670845Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/quote-avatars/avatar-techradar.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/quote-avatars/avatar-techradar.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2408\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-968\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"3c9597425e915817fa27e414ab5b0ad8","sha1":"f7b71a5c4d8bed32cde881ad96f2010e0ebbe21a","sha256":"6e575e852ebb51e8dd935c1d15761e233342b295100fc4f0fef58a314087d07e","sha512":"0c461b0b857ab680cedf6cef8f50d5964a26f1d2e2812565f9809511f1c51bf2bcab1f0ea600af2d6377683849d959d85b64c591a8bbd0efd4cacc32413f3dc3","ssdeep":"","tlshash":"38413b7e02ea5f7d95c531e3b27163ba19415af30fa185abc2309f2c889833545f1b46","first_seen":"2025-06-24T10:48:48.086078Z","last_seen":"2026-06-08T03:40:53.716488Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-1-layer2-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-1-layer2-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 123605\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-1e2d5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"1c95594467bfe2babda3852a113fdf8f","sha1":"ae2b81f16bcdf4a0063152866e632260fb97e1eb","sha256":"218c680560dc66ad386c570c5579a42c2388b38911b7bcb1a3a8a702f0a6844d","sha512":"35a74b4bc3535c99effc55778db527e30600870a1a9a84534a6cd02c70a20fa2ae4cc61414a74db84eb0c5112701957beaca531e729561f0d94a8bd7cc6ca901","ssdeep":"3072:L9dWsjsVaoIsnjGpwANpBrFAGer/PJlaRcQ:Lbzs4oZu/3AB4RcQ","tlshash":"91c312fc239e6172da4396f0d1a9287425cc086bdf9e6bf58c60042de1a797c6b9c271","first_seen":"2025-06-24T10:48:48.101136Z","last_seen":"2026-06-05T16:13:44.887712Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/e","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:13.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"POST /e HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 272\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":272,"data":"{\"global\":{\"platform\":\"Windows\",\"type\":\"web\",\"sample_rate\":1},\"context\":{\"name\":\"homepage\"},\"feature\":{\"name\":\"load-homepage\",\"status\":\"SUCCESS\",\"status_reason\":\"\",\"data\":{\"ext\":{\"duration\":1573}}},\"app\":{\"name\":\"Static Pages\",\"version\":\"unknown\",\"form_factor\":\"desktop\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:13 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sat, 14 Mar 2026 04:48:12 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/favicon.ico","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:13.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:13 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 04 Nov 2024 06:45:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67286d78-aef\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 15 Mar 2026 04:48:13 GMT\r\ncache-control: max-age=86400\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2799,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"0a362a1a0cf4cc6bc56d65db8049dd6f","sha1":"ebfd1b824377525e1588719e935bf4b06349cddf","sha256":"d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd","sha512":"9bc3349815f97884a92965f5936a7abc4ee937232f305148bd6d791de0d0199c51c5a314e6f4f5efbcac925a860c8da4da6e94472471f36db7725caf4b49ac8b","ssdeep":"","tlshash":"5c515e6372d0083ae64fa6f1d7f77fc1e5a4c4285ae36e5943a825742d07780a897382","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-06-08T03:40:53.68342Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/media/macos.e15f833d.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/media/macos.e15f833d.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2741\r\nlast-modified: Fri, 13 Mar 2026 21:37:18 GMT\r\netag: \"69b4838e-ab5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"5933f53a169cee3712560f2ea8475b06","sha1":"c05f67f13c027e0ef4f7045eabc814af49fd9026","sha256":"8816b10847b5a12dad56ae87a5348b9c8a61f674d3bd9a25908bbd5285148b8e","sha512":"9d6ded484923f16f98f73d67cd6c4ff88c89cdf32ba8f86afbe4edc9e816f2b15ba7b03bea97fb52b50d0b3a037d2aa51317989136edaf7f37d8d1fa6727fed6","ssdeep":"","tlshash":"64515bb2e2fceca54ced69285170ab23180ec869415109be50081a13671e0eccfbf2ec","first_seen":"2025-03-05T18:07:33.03685Z","last_seen":"2026-06-05T16:13:44.923474Z","times_seen":1223,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-1-layer3-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-1-layer3-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 29213\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-721d\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29213,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"9b4890cfb3a9c75f4181bc1fc44d012d","sha1":"a297acda3c4de0c21ab86607b5e63ee8ab7ff883","sha256":"60eac38bd055d8688266cab218a0ca2287631598f39f7a9400b36d7ac80955bb","sha512":"a7a5324009ae5493c61bf263636efc59ae0620f72de64e44ba2003ecf9efcc67e53be60a37aace8a54e07108c9fcef42de563ef8dc35c754603ef903eb664a7d","ssdeep":"768:J2bVRcIHerv9fzxy3l8GbqhCYab7y0faVHiNSbFC6fK4:oITpzxp3hCfbO0fqHiN8Cy","tlshash":"d4d2e11ec60a5455f336a43b46fb03a8c33906765218a9cee644e10f757fb1ba3183ca","first_seen":"2025-06-24T10:48:48.087316Z","last_seen":"2026-06-05T16:13:44.906256Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-1-layer4-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-1-layer4-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 27025\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-6991\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"732f0105b36109bfd6d4465ab2e65a98","sha1":"f33dadd2171d5351740d932386c087d19f2dd874","sha256":"8c22a1369c12cca5ba02f90eae447ad0f13d448934b43ae9a62f51d801ce57cc","sha512":"4df2c3ddc9e3ace2792035a8be3e82860101e1c6798b714ae69a7142a870b8c54966bfb33e624c6392e3fcf5b6d70e69c4885557ec6c26d067079baa94cd31ed","ssdeep":"768:TEr5fdpCqMFnOQn/+o5Y80ZJ7BtGSk1+QwvcU6mbF03C:u7SOsKJ7uSrQvmbFL","tlshash":"04c2e121875cfa95e417bc3e59693f6005e424b7a2b087e095753ffdbc18664e878c88","first_seen":"2025-06-24T10:48:48.117834Z","last_seen":"2026-06-05T16:13:44.922876Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/9983-1f6c0125db1c641a.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/9983-1f6c0125db1c641a.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2982\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10626,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (10626), with no line terminators","md5":"cc1cedd27f38b3b286cc6340e515fd83","sha1":"0a7af28944d9af2119736398c22858ed620515b8","sha256":"ff294ad275e2bf3dad776839dfc73b6a78d29009eeaf11578c910df95a4cc086","sha512":"aae3889cc06cda172715ab627a9ef758f854adc602cbc0316756bc8d840d6398f904f33cd33eb235996bc54b0c23fdc3727dc6455890cf9742e25c7ab9fb6450","ssdeep":"192:fz6288qMsqVx7hIMy1HnG/NumR48eb6tLgVZIWz61MR+2T2o+NTae6VpTU:fGl8q5q/elO88ebXVZvz61M8q2GNU","tlshash":"f42209f473817485d78b02e2c17f011ef7796d94280f482cb668bcdb26a506566ebf39","first_seen":"2025-07-15T10:36:22.704442Z","last_seen":"2026-04-06T17:44:48.480078Z","times_seen":718,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/8770-7000586f490a9dc2.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/8770-7000586f490a9dc2.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-1a409\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107529,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (41871)","md5":"6652c67bf5b7107b4b2a67f4a8321465","sha1":"4489f755cb19e748a8143e1566362949538f7b40","sha256":"5f75654214d597b05d8454d53c89f5196e33447e8eb29a87e3cc00bed2ed70de","sha512":"721893717b78432900cc5c95ba8e7da98b5b2071a25e64c3dff1ff66958d5a7382a412b65c0bd5bef79877d8a4c65294d065c02caf1a0cf63cb0b33a30e1abec","ssdeep":"1536:q+gYwF8g/tZFtJwH9UkxawyHgxMFSURUcEg+B5bA5hy2U5tAO:+F8ghrw+dSKUckbA5rktAO","tlshash":"f1b309e53291b4a6c3db01eac06f4446e37a1a9d280e443cb7b9dcda215584c72fbf79","first_seen":"2026-01-27T12:41:40.043169Z","last_seen":"2026-03-31T02:37:23.373953Z","times_seen":326,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/7500-93111ff80911a077.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/7500-93111ff80911a077.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-1d894\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120980,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1e050fb78d5bc5d924b368f8a63e0c79","sha1":"ec4adc5c9b191b2be04e91867a6430730bfc9fa1","sha256":"2e10020075f0af5fec1c68af182aa74c94217a59f9314bf4142a9342127a67d1","sha512":"21ca220ca44ddcf778a5d1b2f3e5fb098822bf4338976f5dd1bacef87b800703533db295f577e67dc83a6f65f1606a9fc3d842ff2b1fafdd313d5dcf85724323","ssdeep":"1536:1xUixFYWhU8gGogHn4mGj7kuS/yiI4ceD7cHayVb10k+eUHkJ0q/e/mVo8fKEJRx:IOFYKd9hT72NVb10k+eUHkJ0q/9nf5H","tlshash":"46c319e63602b571d7df01aba0b70429e33e254d30094128f9799cee35b9958a1f7f3a","first_seen":"2026-03-05T02:07:31.841044Z","last_seen":"2026-04-02T03:32:57.870993Z","times_seen":188,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-2-layer1-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-2-layer1-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 69256\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-10e88\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"660ded28fd749ce7f20a3b413bfeee83","sha1":"cf91eb9fe94b640eb477c495faf810bf9ef4734b","sha256":"5b9ed91023b486a7e9baf40e36452f237a4efde8f1922bc8ff48566b4afd0a33","sha512":"e0799ab183c90853d90ec30800a88ecf869b4593001b6233e7ffd7e4e087b7df6e47b480be474c5b97188f13ad69b6bb919c7e6a2cc01577ad36a1ed8b771e90","ssdeep":"1536:DmnCyL25QNNYDjkljOkip7rrZ/Dz5W60mypm4Lu3J6gi38TxCQ:DEL25E28ljOhdrFWwypmb1d","tlshash":"ea6302659510afc9f38698be168ae64bfaf508e54e263337d21a4fe5e207180436d01b","first_seen":"2025-06-24T10:48:48.091034Z","last_seen":"2026-06-05T16:13:44.906837Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/font/ProximaNova-RegIt-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/font/ProximaNova-RegIt-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-a628\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42536,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42536, version 1.0","md5":"64fbb6107105770ad34cf8aeab88c0d1","sha1":"216fa8f176527d06dd5bbd247feea54637df587d","sha256":"4f9572518c6f22e97dde811faf185b6bbd07d5098d089b173976805b38f92ce3","sha512":"4f888804fbb622223483a5dd350d34fe84f0d66dd5dc6865ab47c57ba6222d17136fd1f6ece78b5eede522c03d4c7d846e0ea4553146830fdcfcc048b11e663f","ssdeep":"768:3L4aOGt0ByMNElccT+Mh9iZh3Qy3hk5KD1TFRcHNzhVQ23I/oTYCodmLcJJ:3DOnyMNicK9ygyxXD1pKH62QaodjJJ","tlshash":"1d1302b7ca711183f324a1e513cad6b79be177ea41924144cb3c3b4dbab717917ea220","first_seen":"2024-04-05T15:02:48Z","last_seen":"2026-06-08T03:40:53.708795Z","times_seen":1823,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/country.json","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /country.json HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 15 Mar 2026 04:48:12 GMT\r\ncache-control: max-age=86400\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ae2ccb22f0dfd32ac4b9e0c8177b80eb","sha1":"c725bda1762fd5d24ae63391c755cc22e5b7f59b","sha256":"ef8937900364f0b2b22d339df5a758404c5f17c8abb8c263a196dbb15f04d9b8","sha512":"64c72b285b32e8211f5769effb1ea0b3a0266d7f99f487201e45f2728938972eb77c026c2ba917c723724e29313bfff726f21814b633ba29b0afd43ae8049ed0","ssdeep":"","tlshash":"d860000800200a088820820820022000008ac2000202200280c0320882000c80000008","first_seen":"2024-04-24T00:29:19Z","last_seen":"2026-06-08T03:40:53.690566Z","times_seen":1642,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/media-logos/apple-appstore-40.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/media-logos/apple-appstore-40.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-39b\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":923,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2363cb9dd6e90200848f4321d678bb9","sha1":"0778e0c29283a79fb01fd2e2d0ae22ed20a1a867","sha256":"c7cb744a1b6276b806ef5ffb784e9f2f0f07df405d17629be3d2b0957ce102f9","sha512":"e3602cbfe0b697a69a541723a36b22c23a8a0488f4abebc631d84c368e7062007408b5d94ed5125910c0c8e2f14fbf60cf640d19878d75e2ebf7d1da119296f4","ssdeep":"","tlshash":"161104fcc21cecddce194258fe7983c1532df24da1cc0364ad9d463178816c2d59e964","first_seen":"2025-06-24T10:48:48.107946Z","last_seen":"2026-06-08T03:40:53.707953Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-2-layer3-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-2-layer3-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 96567\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-17937\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"90d1ee150721466060b3049bc201abb1","sha1":"5df47efd82606f9b4b700079b0d5bd08760d35ad","sha256":"14abd9f548bd352524a4a078fe45c256e2484309e7515112a0897bab425cf54e","sha512":"9ce64565e743637cd75a20ecd48dc422307296759c0b552c2c583628cea709888f55baf78047d8fb90de597d3d621fb05d165e1cc65f8a673a2d60b4cbfc33f1","ssdeep":"1536:cWNAgvJOu8X3Xlw3kxIoz1UjuPimgeMr/BqPs460QDp4prH8eoLvZmH6Pv27bmL1:cWNAg4u8n1Jd1FPimgeMr/Bqi0cC4Lvj","tlshash":"bd9302c1966ae24bf152d4b9a7d94e1f31bc2d70ef71ccca938835f2a8361d03369548","first_seen":"2025-06-24T10:48:48.091778Z","last_seen":"2026-06-05T16:13:44.915127Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iseawave.com/kxnr/79/80","fqdn":"iseawave.com","domain":"iseawave.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T04:48:11.508Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /kxnr/79/80 HTTP/1.1\r\nHost: iseawave.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://playtglecode.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":27,"connect":43,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/css/a56f6312d3511adb.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/css/a56f6312d3511adb.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-6a84\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27268,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (27264), with no line terminators","md5":"47e3e0df5ea7da3e629d1c5e846b7dd5","sha1":"702bc66170a738d2a5a2e89892580e2874f00c5a","sha256":"16056cff0b3d069ba099609d180f1988b0569a61764b77d9cec84c6b3abfa48e","sha512":"2cb58d1f614f6b2b4242e05674d029a7fd831d6149a5ba3af1a9dc3ef247947fc03915b36db4e6a5545018c15851991735ce3eceb160230549665e8b1692e4a5","ssdeep":"384:OZ+qei+NMua+68neEa8Amyrggk9j8sXL2QSuAQisZgVmC9Hse:8T4n08AgWwcmi","tlshash":"bac295e12d64d13dec2fa616228d986cf214fc289b1779eb68f6725843c33e18d6571c","first_seen":"2026-03-05T02:07:31.868638Z","last_seen":"2026-03-19T03:36:55.119767Z","times_seen":83,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/8337-336dff1545b887cb.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/8337-336dff1545b887cb.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-bcac\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48300,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (48300), with no line terminators","md5":"50f627ba15b148196cc957c6273dcf81","sha1":"e578d4d2c20ec938a04ab9284212855df43a78c9","sha256":"4815a6aad0c0980ddebd23a4937269daed82a2b842b1566db5104c1839f2141d","sha512":"5b43b40cb2b4507b783cb688a30e3133ef05efe63fd133024b6f6cf91a104ba3313db6329f9c01a00e34c5c762e2d7f610275ffd3ced3db012930adbe1cc1713","ssdeep":"768:R6lWR/HNaRBH6YyjCeTrYXeE3bjVOjHfYw0bpC7EwtB+7QCxWjxZssD1u0mkhT9c:R6loHNXYgrYXZ3bjVOjYw0bp6EwtB+79","tlshash":"702309f03600b46adfdf41efa0664419a3bd3a19640b4924f129ecfd21a4bd471a7f79","first_seen":"2026-01-27T12:41:40.068563Z","last_seen":"2026-04-02T03:32:57.850623Z","times_seen":338,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/9500-f2b2265e623bce81.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/9500-f2b2265e623bce81.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2e9d\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11933,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11933), with no line terminators","md5":"75c656f09c0ed33f52108d8b068dab21","sha1":"87a70f4abf1693f4af35f43b17cae6526f42454d","sha256":"994f9e1e01d0936d12831c4cb219c9a9c758c2add3a6275b3443327978a3c5fe","sha512":"e2f7cc3ddff2482273cbe68956e8c5cf686235b302121a3e42002108154aab0b1064db86a4464eaa0f6ba37bbb9017bc95b802cbd4a18203209f175a96b0dd59","ssdeep":"192:LWj0TFLV43L2ZSFqn8B0b2pNYLtiMbgMnYxCl4f9x61uBgoRxCl4f9Gx0gMCHV4e:LhTFO3L2Z+qn8OSYLYIgMnY628sgoR6L","tlshash":"1d32eac0b048befdab8758d6c06f408ef2de0945cc0d9986b5d0ec7116e6748763b799","first_seen":"2026-03-05T22:41:54.202169Z","last_seen":"2026-04-13T08:24:53.668346Z","times_seen":296,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/7317-fd9c5c7039994e69.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/7317-fd9c5c7039994e69.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-24f46\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151366,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8927cf845110ce3501f4c1d1a4394e7f","sha1":"1ca6c13af686f69310e714cf8ff25db94c24211a","sha256":"0af414749813b7b5b396b8a0ad9021567f2daabaafb2178d8ce1ce4c1c98f77c","sha512":"5b6b87d5e08f10f33ed2e3aba6eeac8817adc8ed0b0f3e8f756b2572ea3ada45e89398b40934c883fc102f7b22cf558eaf6227647a4a90182b2b718c861597ab","ssdeep":"3072:X7ojqEWVDDC0pyE700yCMkhMYLPHd0+GpTm/d/VAv:UzWk0pN706PHd0+kml/VAv","tlshash":"78e36c61621879f6287e2cdbc2af740c726df79428110980f1faec9c941ab9972477fd","first_seen":"2026-03-09T11:27:51.139254Z","last_seen":"2026-03-17T19:33:37.997892Z","times_seen":34,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/8969-e67496c82efd0c1a.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/8969-e67496c82efd0c1a.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-9cc3\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40131,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (40131), with no line terminators","md5":"8cf4897a4c1824af47d17bd9e896813b","sha1":"aa77571326004e79d66c8242a1737ed01a9d460c","sha256":"b86213320f03614cd898cb6bb1e032238bfdbdb923dbb23f7b13a43d9b85029c","sha512":"f96a37d78d03c8167aaeac08f83353e5c6c2a7b2203ecab851799212e7efa036d064260cb2c9f5d9a65ba0bf088f0f3682488ec55013ada7fc4b54026c05efc6","ssdeep":"768:nOiDURWBCEjrNlkZDnIn/lqTvyWWNbnz062Jnbnz062JcIf10Z+SS:zDdBCEjp1n/lpWWNrzWtrzWVNf","tlshash":"b00396228a5e71f1193c3cafc3ea784d154cf2a155931784f5bb6ca5e45b33b284b2ac","first_seen":"2026-03-05T22:41:54.176005Z","last_seen":"2026-03-18T13:28:14.723146Z","times_seen":68,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/Fz9lBMmGkCovwf0b1GXew/_buildManifest.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/Fz9lBMmGkCovwf0b1GXew/_buildManifest.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838e-9189\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37257,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (37257), with no line terminators","md5":"1526ab4e9bdd096640965a5acb36d757","sha1":"7b85895687905206f4504bc3742d8233d5efff7d","sha256":"01a5a5195cb886d0279f19b7e5230bb816e2c99ccbbd479384d7429e69e8dccd","sha512":"51a46b478620d4a56418424f06b665640591034195a119589bfa9cd51ba6d9ba8714487037ff056f38fd0237d76572b22b07af492db4f29b1fea57e391ee0fef","ssdeep":"384:EuCdNYk8biX7Ru2OHTXdyP+TBRDPxFWQGklT1bzqxwiQCi6Z4:ONf7Ru2OHTXdyGxFWQGi1bYwiJi6Z4","tlshash":"a5f2eb07a882f15224e3dce53e7fa35698b1dd71543515c8eace1c399250bfcab8f09a","first_seen":"2026-03-13T22:43:19.434449Z","last_seen":"2026-03-15T18:06:53.323173Z","times_seen":8,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/quote-avatars/avatar-wired.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/quote-avatars/avatar-wired.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2391\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-957\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"cd874726b07fcc6b740c6234b76f9ef6","sha1":"805dfcbd43129935c966f4ae47c4e6965c050f6f","sha256":"fe57e12ad174897ee961e250085d13486e9a3f0c68829682a98e4718547ce094","sha512":"3ae39cab306847812a9aa862e2752d4e7f57ae1a6cd2a39dc0e5eb4730a3375c33f0d47f6d44c885dcadce3836580fc8b75867f90f674d2854c77373947781eb","ssdeep":"","tlshash":"ee415d92d2551c29cf944d45d9b7b1ab8e00f506f1c5cb75cccf01128f343c9ca6d219","first_seen":"2025-06-24T10:48:48.126733Z","last_seen":"2026-06-08T03:40:53.665639Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/font/ProximaNova-Bold-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/font/ProximaNova-Bold-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-a598\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42392, version 1.0","md5":"398e125f54e0d48e16ca0809fbfaf1cb","sha1":"73ac6e1000bfaf013b5c5e3b1bb717142ed21e45","sha256":"fed15393dbd651cc99ca78f5b0a39a721f143aa61c5ebecec69e520b3a48507f","sha512":"cef6ac7a845d4d4878998c242d9d5ef7259dcbd5ec6d42131b1c7d6519e485b5570e25e36dfba8466f05f596c2609a815f803e2e26ecd6420ce392357a6e368e","ssdeep":"768:Zt2yUGekovibq8kQ2NwDvOaee4uMZ9yQpDCvR8eWS6N:yGfovAkRNwrOBvZw0yLN6N","tlshash":"2d1302120107a88dbc5dbc75f6a60f933c3c862926116b71d79e751fc7ab5b07ce1642","first_seen":"2024-04-05T15:02:48Z","last_seen":"2026-06-05T16:13:44.925277Z","times_seen":1813,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/9720-794129366f312d04.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/9720-794129366f312d04.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-32e9\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13033,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13033), with no line terminators","md5":"d45e7af79144d129bfeeb230b9477f8f","sha1":"f7e193d669fa9eddb98f70ee99bd02028b250c31","sha256":"fc13d203bdcba111ce6d1d3c003fa686815750a137b20d9366daa204f4152883","sha512":"0b3a6018ac78d79baca29573a59a87cf92b39b5bf53212e934db64245ef8fca9c6a0a5dc2e7cedca45ccdec51ee5b61931609b77347f9a6e438b78a3f6bdc1e9","ssdeep":"192:EBpfBCyLS9ZGjxSOXQCyLd9GOBu4N9smjPCyLM9a5HtCyLi97zCyLqm99O3BCyL6:ETf1CGMOqCMd3PboTq2k1GyqIKI1GF","tlshash":"ef42a5e43364abae0d8f245dc9be244d735da97c605c8085e1cdd8b494b2fe4f213ae5","first_seen":"2026-03-05T22:41:54.227843Z","last_seen":"2026-03-18T13:28:14.796429Z","times_seen":69,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/media-logos/cnet.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/media-logos/cnet.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-665\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c05ce80fd42ab43027ed0859883a3d3","sha1":"c5f27ac0af867a722af8399d60b15ec1eda64160","sha256":"4e0cbdecbb029df4fd82e09695c86427abb99302983822d7b92669782967f7d0","sha512":"dfbb4548828a6a16074269b7211e77cdd9fe2e68067376baf20cd6878cc91fe3f274d09f5250f445b50828e3ef336fdfc168768bf9e1d1f968d5646d770c1b57","ssdeep":"","tlshash":"b531a8c7f2e8f3fc5a0493925b7e0616111f20f97b9142a8e7c6f9157d5914f6e6c480","first_seen":"2025-06-24T10:48:48.085322Z","last_seen":"2026-06-08T03:40:53.734554Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/media/firefox-lg.c4379281.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/media/firefox-lg.c4379281.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2ccb\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11467,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2f58da01253d23d23275e400b369c9e","sha1":"7e6500000e692ccd5f37169d642f07af6c5258e7","sha256":"e8caceb71ac515488354aca8628b25d636b9677e6d90e567f7a5cdf82a4d901c","sha512":"a137d64aa863709daa40c2d4c5c3215f4709d4412a53a1d1cc3cd22dc70e00836b9f9ffe31722678350b2e8285c110ab13ed1a4505446004fa1e17dcf0147476","ssdeep":"96:k2KNC1A1ZJVJ6+5EivfNSQivfNP6M5mt5mnlQ3IgzUXLiBQp0CmLbc1x9NNC2qHH:619JducolkzqcMGuc0gJZkHkpZ","tlshash":"7732ff6983f8a2bed44b935dca5298103b1c51a736c08240b5fecf9e5f1998a9d4f7e0","first_seen":"2025-10-29T23:11:46.088869Z","last_seen":"2026-06-05T16:13:44.889394Z","times_seen":1066,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-1-layer3-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-1-layer3-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 29213\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-721d\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29213,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"9b4890cfb3a9c75f4181bc1fc44d012d","sha1":"a297acda3c4de0c21ab86607b5e63ee8ab7ff883","sha256":"60eac38bd055d8688266cab218a0ca2287631598f39f7a9400b36d7ac80955bb","sha512":"a7a5324009ae5493c61bf263636efc59ae0620f72de64e44ba2003ecf9efcc67e53be60a37aace8a54e07108c9fcef42de563ef8dc35c754603ef903eb664a7d","ssdeep":"768:J2bVRcIHerv9fzxy3l8GbqhCYab7y0faVHiNSbFC6fK4:oITpzxp3hCfbO0fqHiN8Cy","tlshash":"d4d2e11ec60a5455f336a43b46fb03a8c33906765218a9cee644e10f757fb1ba3183ca","first_seen":"2025-06-24T10:48:48.087316Z","last_seen":"2026-06-05T16:13:44.906256Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-1-layer4-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-1-layer4-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 27025\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-6991\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"732f0105b36109bfd6d4465ab2e65a98","sha1":"f33dadd2171d5351740d932386c087d19f2dd874","sha256":"8c22a1369c12cca5ba02f90eae447ad0f13d448934b43ae9a62f51d801ce57cc","sha512":"4df2c3ddc9e3ace2792035a8be3e82860101e1c6798b714ae69a7142a870b8c54966bfb33e624c6392e3fcf5b6d70e69c4885557ec6c26d067079baa94cd31ed","ssdeep":"768:TEr5fdpCqMFnOQn/+o5Y80ZJ7BtGSk1+QwvcU6mbF03C:u7SOsKJ7uSrQvmbFL","tlshash":"04c2e121875cfa95e417bc3e59693f6005e424b7a2b087e095753ffdbc18664e878c88","first_seen":"2025-06-24T10:48:48.117834Z","last_seen":"2026-06-05T16:13:44.922876Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-2-layer1-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-2-layer1-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 69256\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-10e88\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"660ded28fd749ce7f20a3b413bfeee83","sha1":"cf91eb9fe94b640eb477c495faf810bf9ef4734b","sha256":"5b9ed91023b486a7e9baf40e36452f237a4efde8f1922bc8ff48566b4afd0a33","sha512":"e0799ab183c90853d90ec30800a88ecf869b4593001b6233e7ffd7e4e087b7df6e47b480be474c5b97188f13ad69b6bb919c7e6a2cc01577ad36a1ed8b771e90","ssdeep":"1536:DmnCyL25QNNYDjkljOkip7rrZ/Dz5W60mypm4Lu3J6gi38TxCQ:DEL25E28ljOhdrFWwypmb1d","tlshash":"ea6302659510afc9f38698be168ae64bfaf508e54e263337d21a4fe5e207180436d01b","first_seen":"2025-06-24T10:48:48.091034Z","last_seen":"2026-06-05T16:13:44.906837Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-3-layer4-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-3-layer4-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 13990\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-36a6\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13990,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"deed74ef1b5bd4b662e06b3d2eae1735","sha1":"3100ff58fbc87ac1038e469a477c2df931a340cb","sha256":"f3968654a8ba5cd4d8223c82b44754c682cb0ca55574253d081caf8aa488a3a4","sha512":"4db96638bd451c80f988d546fe56498eb3a8b2ce9257e0a0ff5278cdb53f1f112668e8e1926e0bdde7c722be17624b5bf251acc3e440b5673c4a20bb496fdd66","ssdeep":"384:SdK1zYoiPJD8VoLF19IdsN3rPJ7mHfOIAnFinN1:65ogNmoLF1yKO/uFiN1","tlshash":"b752af85d618f12af4890d3194a89c99cafb2ff85c3f06f087f1f29e414186da47a2d9","first_seen":"2025-06-24T10:48:48.084479Z","last_seen":"2026-06-05T16:13:44.869465Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/font/ProximaNova-ExtraBold-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/font/ProximaNova-ExtraBold-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-a6c4\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42692, version 1.0","md5":"41bea1a5bf9f18151ebac78d52bfe8f1","sha1":"ca03133d7684ab526ae40f89c9a1153b59a8b397","sha256":"2f1247934be433d70d54fc6496101f636dca8eba95b2bc02434645ff171e8787","sha512":"b670b23a9686631a362a91ff96b65f8f81fe7cf5ba40121f42ea72b9b2509425e926872c45bd6cbc2c4f0db4822ac8e0c22ffbbfc13465127ead1991ac34c666","ssdeep":"768:ttgCAyVLsrAOon38JyYxq2fnE45Ip6tOOO1eNFuAYTzMvAs/lZdGU+5U6:BAY2Ar8rnEDt8NFjA2lZdT6","tlshash":"4f13f116304ded97cf4e4ef3756071a06f91ef7c181876feb5c2a43805a3864aa22ea4","first_seen":"2024-04-05T15:02:48Z","last_seen":"2026-06-05T16:13:44.920168Z","times_seen":1785,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-2-layer4-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-2-layer4-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2611\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-a33\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"691515d8fbadea78dd443d275ec5b4a2","sha1":"8143d4763142894a5fb815a816ae288ca8952272","sha256":"40766edde8f5f82bdec49d6ca82540015d27f52fbc98dc78406fc4d5d487581c","sha512":"d77c858ea88eb0f4ae118e5d4d9588174539c03297c43580479d9db08e97e711546cb2f2644ba6f8362fc9c9a82e0464532c971dc0fc0f549e9f7046c74cba72","ssdeep":"","tlshash":"a75186d6f4241ba0fd86d2b586200d78c7db1d3112ad0ac52435fb8b5bb380e5b36972","first_seen":"2025-06-24T10:48:48.093714Z","last_seen":"2026-06-05T16:13:44.891889Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-3-layer1-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-3-layer1-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 177572\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-2b5a4\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":177572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"df97e8ae69410c4dc1320e35246b350c","sha1":"91bf64e7c9fbd3d23c5f1a62efa0daf731d2f51d","sha256":"2ea11f7828f11245c0e309425ea1104c8a21e85b4774f170339e540ab3b1e2b8","sha512":"c50e272c51c91cec8a06539e388ec480f68cb21f148f276bcdcdf3dbea82f9e86be2f782bf5d224648e85333027b90f82d660302ab71a3047749d09447a30142","ssdeep":"3072:82yxoVHn4kseyiESV4mcOAUw1fWmBV2mxYBUNtb8y6+qjgWa5G6RD9yuv2yxJ3:rftnGSGmdAUsPL2oY8tjbT5T9uQF","tlshash":"0804122b479c66c8496c363fd3300617d0461ec95e54b89a361aaaf9bda3db53a1c338","first_seen":"2025-06-24T10:48:48.104629Z","last_seen":"2026-06-05T16:13:44.904925Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/backgrounds/grain.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/backgrounds/grain.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 11383\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-2c77\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11383,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"280dd35f5047bd46ec2afbeea0fe6c23","sha1":"de3a40ef70627fe05b54e44c68e7834686d0d388","sha256":"d4692fb34e947c099a267ac1fbbdbfcdaec064642385836ff2792e2506ec7d4c","sha512":"a4b900b2289598424d9724b4ed21a753eb6e6bb2f6186fd0f4ee7642946db93c454a458d5f9f0270c64b1dc6ca09c1050c00348c89d78ace25e484594c99df24","ssdeep":"192:uSJhs0bwoV6+IU110b60wnbkKwSWi8nvEX+votDnD40C/gB/Lg0EEfyHDKzjNNel:RJ20bwS6+I+0b64KbWi8nvEgotzywjgj","tlshash":"7e32bf9093f162561821dda853e5b39dde1f6a343b369b5818fc26330adb02edec147c","first_seen":"2023-07-01T10:51:31Z","last_seen":"2026-06-05T16:13:44.942237Z","times_seen":1155,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"improving.duckduckgo.com/t/atb_home_download_impression?3375653\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows\u0026atb=v525-4\u0026pre_va=_\u0026pre_atbva=_\u0026atbi=true\u0026i=false\u0026locale=en\u0026origin=funnel_home_website","fqdn":"improving.duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:13.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"POST /t/atb_home_download_impression?3375653\u0026b=firefox\u0026d=d\u0026l=en\u0026p=windows\u0026atb=v525-4\u0026pre_va=_\u0026pre_atbva=_\u0026atbi=true\u0026i=false\u0026locale=en\u0026origin=funnel_home_website HTTP/1.1\r\nHost: improving.duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Sat, 14 Mar 2026 04:48:12 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T12:37:23.003556Z","times_seen":367083,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/data/Fz9lBMmGkCovwf0b1GXew/about.json","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:13.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/data/Fz9lBMmGkCovwf0b1GXew/about.json HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\npurpose: prefetch\r\nx-nextjs-data: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:13 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 13 Mar 2026 21:37:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838e-21a6\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:13 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8614,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ab7a79cad97fe6b19e9bf86f765087c2","sha1":"a82148ddc9f63b56ac326f570d8efdaf28eee1bf","sha256":"d9f6f77834f8c46baa95114a03acf85376b65691f2de1d2b66c70299f5841629","sha512":"921489910382a83605cab57953b85f7c5559c07fcbd03119d793dacad23126ca46927d9333476a9215d408d87b46989366aa85b8907edec0a61227560f18880e","ssdeep":"192:WQQPgd3BQJvpKiSZWpD84zYItpMP+mftql9q3VWtSIFP0pqu0Z9fSzWqdms/mVe3:uK9iLpo/QPnuquQ69","tlshash":"c002dc5aa1269a773a239440bdc36192f451109cddb548e0f448c2beffcdc996b23bde","first_seen":"2026-02-12T01:52:15.276344Z","last_seen":"2026-03-18T13:28:14.826252Z","times_seen":153,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":14,"dns":1,"connect":18,"send":58,"wait":18,"receive":-1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/24-5fc89d62cfbd6a34.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/24-5fc89d62cfbd6a34.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-2faf5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195317,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2147314b234f3cd4a949d02bf1383b8c","sha1":"cfd886fc03fbd0c8a756ffa8d0ffa9c7fe559a14","sha256":"ddae8d6ec8647cbabcd402121fddbbcede4a4d6ef1000c3c4842a55b2308b951","sha512":"d69cf6d05ccbcbc7b6dd4cff1956ee7cf964be18882e0ecc48a9b1ba2bbd84580bfddedf285ff8ea700f9624ecc16c766a0a131f1f27ab82b6b28e60d3b9bc2f","ssdeep":"3072:ZsVNjJTbTE+95ygIEK138s2wZnbOQfLkcMUwluA/XMHDJb0VfU:sJTNs2wRbOKL/7A/8HDJ4BU","tlshash":"16145c82a31865af5e3a09dfc62f590cb34db784e5a48890f4dcdd2c805abd4f2577b8","first_seen":"2026-03-05T22:41:54.186194Z","last_seen":"2026-03-15T18:06:53.370206Z","times_seen":58,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/_next/static/chunks/8000-23ea083b0d420490.js","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /_next/static/chunks/8000-23ea083b0d420490.js HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Mar 2026 21:37:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838f-10114\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65812,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"69d58fd90b9eb86a70d485ed4ace34ae","sha1":"3fffe08d7d265e85b91130454deb0e216bdfbb50","sha256":"60010ea41c76b7c77b414a95b364915f744c239ed1a69d251124522e9a2e619a","sha512":"fe42b3fe0eadcd4af83960bf8d7b033b34933e927a40952867744dbb0f1ec6a9ab5dceb128ca55bc523f9a688ec71716a14a8fb53608898255057a555917c084","ssdeep":"1536:ZNJgoCjfY89hcuXt1cg/L0oNu4dr3WwScnBKQj:Zco/8j17FdbWwSWBKQj","tlshash":"6153c9278b0f75b21d383df796db3c896048b2c34c9367c8f5ea59e4c46a26e14492ed","first_seen":"2026-03-05T02:07:31.856243Z","last_seen":"2026-04-06T17:44:48.470995Z","times_seen":226,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/country.json","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /country.json HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 15 Mar 2026 04:48:12 GMT\r\ncache-control: max-age=86400\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ae2ccb22f0dfd32ac4b9e0c8177b80eb","sha1":"c725bda1762fd5d24ae63391c755cc22e5b7f59b","sha256":"ef8937900364f0b2b22d339df5a758404c5f17c8abb8c263a196dbb15f04d9b8","sha512":"64c72b285b32e8211f5769effb1ea0b3a0266d7f99f487201e45f2728938972eb77c026c2ba917c723724e29313bfff726f21814b633ba29b0afd43ae8049ed0","ssdeep":"","tlshash":"d860000800200a088820820820022000008ac2000202200280c0320882000c80000008","first_seen":"2024-04-24T00:29:19Z","last_seen":"2026-06-08T03:40:53.690566Z","times_seen":1642,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-3-layer3-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-3-layer3-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 36864\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-9000\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"a02ef7974fee4a7dce5fd4fbd4beb805","sha1":"fe813b89c248c1dc2f43c17f5dd9bef27c154ed3","sha256":"54c8038ad3c35c3d7bcd3df482212dce5aa546580747e55350ca09971abede08","sha512":"2031ca209eece93a26dff7905fbf6186500cc7ce6967043d17430d37d0f53a690230882be9e6a02fa7d08ae0dd5bdcda477494d6d50938d5c4dfa43b026347a1","ssdeep":"768:j0706qVLekIMSCkgSxzx0k+DnOpg6pI33HSLNZQs:Y70jVmCXLzOHuMNZQs","tlshash":"d8f2f257415a1ae4e1b84b7f706544f9b3fb58388f2720ed37771f16e852c1a4680d8d","first_seen":"2025-06-24T10:48:48.092532Z","last_seen":"2026-06-05T16:13:44.876495Z","times_seen":1151,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/media-logos/wired-light.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/media-logos/wired-light.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b4838b-851\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2129,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b23be58cd10ff191ead98d5a8bc58137","sha1":"c78007a16826429cfb3678878283abc1c2c2cdaf","sha256":"ef129e3821c0d8d1192482f795d02e1ec692b052d628ea51b55e2036c5424a85","sha512":"a42f582d6c992cef57008b3f4744e8fc62f7154bfbe6eb0b6d1449ab8cd32ff1fb280cd0cb18ceebfb07014138c198377ef70908531cbcfe01f26578b7d6fd55","ssdeep":"","tlshash":"134132d9d6e0b1e0974ca3f4156b599dba5b28ecbd72cb14cee73e00ba211be540c894","first_seen":"2025-06-24T10:48:48.101947Z","last_seen":"2026-06-08T03:40:53.742053Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/static-assets/image/pages/app/feature-image-2-layer4-light.png","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/","date":"2026-03-14T04:48:12.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /static-assets/image/pages/app/feature-image-2-layer4-light.png HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 04:48:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 2611\r\nlast-modified: Fri, 13 Mar 2026 21:37:15 GMT\r\netag: \"69b4838b-a33\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Sun, 14 Mar 2027 04:48:12 GMT\r\ncache-control: max-age=31536000\r\nx-duckduckgo-locale: en_US\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1680 x 880, 8-bit colormap, non-interlaced","md5":"691515d8fbadea78dd443d275ec5b4a2","sha1":"8143d4763142894a5fb815a816ae288ca8952272","sha256":"40766edde8f5f82bdec49d6ca82540015d27f52fbc98dc78406fc4d5d487581c","sha512":"d77c858ea88eb0f4ae118e5d4d9588174539c03297c43580479d9db08e97e711546cb2f2644ba6f8362fc9c9a82e0464532c971dc0fc0f549e9f7046c74cba72","ssdeep":"","tlshash":"a75186d6f4241ba0fd86d2b586200d78c7db1d3112ad0ac52435fb8b5bb380e5b36972","first_seen":"2025-06-24T10:48:48.093714Z","last_seen":"2026-06-05T16:13:44.891889Z","times_seen":1153,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
