{"report_id":"2441b845-843d-439a-9ff9-1eb6c8491a52","version":6,"status":"done","tags":[],"date":"2025-09-26T07:38:58Z","url":{"schema":"https","addr":"duckduckgo.com/ac/?q=com.sun.xml.ws+ma\u0026type=list","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"https","addr":"duckduckgo.com/ac/?q=com.sun.xml.ws+ma\u0026type=list","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-31T07:38:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"duckduckgo.com","ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2007-11-11","domain_rank":522,"first_seen":"2012-05-24T01:23:28Z","last_seen":"2025-09-23T08:36:30.621777Z","alert_count":0,"request_count":1,"received_data":2800,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"duckduckgo.com/ac/?q=com.sun.xml.ws+ma\u0026type=list","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-26T07:38:37.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 26 Aug 2025 00:00:00 GMT","end":"Fri, 19 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A4:A6:DD:AD:8B:48:80:38:BC:52:7D:8F:DC:F1:30:3F:5D:49:E4:B9","sha256":"5D:BD:67:C1:EF:74:89:AC:1A:B9:20:1A:B4:3E:0D:EC:3B:73:17:E5:7E:A0:B2:A3:E7:A7:96:C9:6B:12:E4:3E"}}},"request":{"raw":"GET /ac/?q=com.sun.xml.ws+ma\u0026type=list HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 26 Sep 2025 07:38:37 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Fri, 26 Sep 2025 07:38:36 GMT\r\ncache-control: no-cache\r\ncontent-disposition: attachment; filename=\"ac.json\"\r\nx-duckduckgo-privacy-random-ac: 3PrBzg9TufYoLM8aclgez29LF8zfqJvBLIbSRj8gRVuf6fwiTbQg1lLMVSRKmUtHE1zLspT7boeRI46gdLAt0xlMF9jqO9WGyMBk3FY5taNI7K8JWoH5zBvhXf6VFm2fuC7ARSbAX9KUdmBqUQ4YG93aeQ9sskkVshphVkH1yehTO81EaTTWdNuEyoO52AGC3fapgOqDYAwBTyfmKRjyMFBtTQhNyE0tAlFL9cZlKnxHt9Dek1QR1ggcteSVQiNNbN67Jrseu1FYJtslwnoDUH9jORuZlfVXYKFKiKORPs8Evb\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JSON text data","md5":"e8c52c87ae36798aa9946e1b0a77136a","sha1":"bacedfae0f33e22127a6ef50e9a09c91b5d51635","sha256":"372fa2b09850faa165a8927d9536997db816de2d3d28098c2a1ddf44529a214c","sha512":"98124e94696d83f00955a5b5eb9d22a86a23a557d0eb47498572cabac3ad129ed5a043fb95f9b6a95b9170a64edd72287f8854ccda421e2b9fff63d3ad775382","ssdeep":"","tlshash":"5ca001a382c3b73812d9108a629c439500c580c219864d1c7abf789eaa8c0d5022fa33","first_seen":"2025-09-26T07:38:59.689046Z","last_seen":"2025-09-26T07:38:59.689046Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":46,"dns":2,"connect":18,"send":0,"wait":80,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}