{"report_id":"4e5a9d9d-b99b-4781-b767-568eeccfec69","version":6,"status":"done","tags":[],"date":"2026-01-19T22:50:14Z","url":{"schema":"https","addr":"duckduckgo.com/anomaly.js?sv=lite","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"title":"DuckDuckGo","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"duckduckgo.com/anomaly.js?sv=lite","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"52.142.124.215","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-23T22:50:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"duckduckgo.com","ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2007-11-11","domain_rank":522,"first_seen":"2012-05-24T01:23:28Z","last_seen":"2026-01-19T15:09:25.618326Z","alert_count":0,"request_count":25,"received_data":525315,"sent_data":12721,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/3825d536cb03464ebddd8d5671e8713c.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/3825d536cb03464ebddd8d5671e8713c.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21477\r\nlast-modified: Thu, 31 Oct 2024 00:22:28 GMT\r\netag: \"6722cdc4-53e5\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21477,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"File source: http://commons.wikimedia.org/wiki/File:Male_gorilla_in_SF_zoo.jpg\", baseline, precision 8, 220x246, components 3","md5":"31d04ff754edc7d95a73a540595a6856","sha1":"7e899e122f16b2f7f39a44ad0b2c8ae0e1fdbb66","sha256":"28a6fec0434a0bd9f1784a038ae52be4e1f7bc5b34c78de7f9b248f59a74755f","sha512":"8ee7c34e1c31d8e5dbef5a82403e154e47dde5f555ca83ee95579149cc5d37c0167f8aa5d07103a7a181e74ea46c9d23e482b6f073e3c19fbc32fa0d02a85680","ssdeep":"384:qEYNg7uNWGK4Dyq4IZWVz7p2twm1ZmJuGVnQ2ElLnnx4YOJuBlovIaor:qEYyCNWGKq4yUgwmujOlLnOWov7or","tlshash":"95a2e05fb2e16059e1faff3a679537a250f47730e6ed8add1a8d47c814b02f0488908a","first_seen":"2026-01-19T22:50:15.454928Z","last_seen":"2026-01-19T22:50:15.454928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/b15ef466aca542cc8d922eddb8f6cccc.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/b15ef466aca542cc8d922eddb8f6cccc.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5769\r\nlast-modified: Thu, 31 Oct 2024 00:22:28 GMT\r\netag: \"6722cdc4-1689\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5769,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 177x200, components 3","md5":"b6d11566421df4aac7551314cb522c53","sha1":"7baacce2f4e9acaedd767ed8f7ff5c7a9d7547cf","sha256":"716f59f5c07e75cc89f381b9d1bbc97832d08e96e38f2962c273edec098d7894","sha512":"b396a91b3ac83a5829c8f3b8461e5ffe3c550c5ae4581dc4cbc5a69e4bfae87966d3d423567449eaddee6d87fb92f3e01b383a36a5b725d7562f7718d90e9716","ssdeep":"96:FEgApqMSuuqLDAW4lTzodHr6i2H0C/u0W1HvxTSRRVy77w7dyPzYi6UwhUUAIL:FfMSuunJTzYm500wpTSRRVyKQ8JAIL","tlshash":"fcc19f2333a2b500a922d9f9f90325c1f29faf57f9505fee347501aca84aec8486e354","first_seen":"2026-01-19T22:50:15.458169Z","last_seen":"2026-01-19T22:50:15.458169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/d9a34a82af2f40b2b09e501ff8fe8bf4.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/d9a34a82af2f40b2b09e501ff8fe8bf4.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34857\r\nlast-modified: Thu, 31 Oct 2024 00:22:29 GMT\r\netag: \"6722cdc5-8829\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34857,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 320x320, components 3","md5":"8064488dea79df2d1e444ff7288ff095","sha1":"184fe63db2cc8e36f91b0555fec11a58f9314233","sha256":"2cea4398ce6bd4ae439fb458745d429a254586179ff3d8607e86f5e91cb586f3","sha512":"20c0f6dbaccc6d9aedd6c7d5d228025175d7af975c55572b6742c8c6a4f47df4ffdd15525d9932c29fcdf4d734d689cee88bcad49dfcc1b1dfcdc92cfacbd926","ssdeep":"768:8ufyFiRuFRvWhBrLahwZUaTajm/oJvnPlo9hZFR7IzD:81oR04XewZUASgoJV231qD","tlshash":"b7f2f289fe4161e13a6f0f71425e2b1828d7d77e698cb29be5c3b13849356edf138281","first_seen":"2024-12-13T07:31:50.119466Z","last_seen":"2026-01-19T22:50:15.460933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/anomaly.js?sv=lite","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-19T22:49:53.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /anomaly.js?sv=lite HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Accept-Encoding\r\nserver-timing: total;dur=25;desc=\"Backend Total [n]\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Mon, 19 Jan 2026 22:49:52 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3931,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (398)","md5":"35609ed3bd0c7dde032e3d2e5885f493","sha1":"cd83c4b9f17ce3022b9fb11cec72d77b99ea3ed2","sha256":"46a6c6d90fcda7d552097b263c7e6f4111eb825b86d59dcc148d5cea8f914ba9","sha512":"bbd758d1091fb281772c0fb7d7e2d861e6a8a2851696faa9e30141de61e02fb1028ee3611a1009ec7e51debfd8dcb8d4393f89ed107db4a75e9b7566bd2602c3","ssdeep":"","tlshash":"4381945218f6640a22729bc5ba956fa3dc42914bce5d7c80706e16a34fd1f6f8c236b2","first_seen":"2026-01-19T22:50:15.464496Z","last_seen":"2026-01-19T22:50:15.464496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":43,"dns":6,"connect":18,"send":0,"wait":46,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/font/ProximaNova-Reg-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /font/ProximaNova-Reg-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-469c\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18076, version 1.0","md5":"9cb812c72d169a407787679df65e85ed","sha1":"cf02893a196b2a6b9581060446b7dcb2f6ac8c74","sha256":"c219a877eb2c47380ba959748793187f3aaed9533061abace5461024cd7d0704","sha512":"92d9e7961ba716191541e1f738f81675d19225772552a374cb9df102bcfdbabc00206ee56a25701df264a47d63b3471106446820ef1c139e04da67be1b2b1579","ssdeep":"384:Hfsuo9tTd6OiE9BjRP3I2WrPKMN7SUaquPjqNrAwh1QDh+tP:Hf92clE9xRvI2WrPKesqubU8ty","tlshash":"a982dfd8c66ded868669e3334081b1caa94c84c757720cf6f625fdd92cec0ac2547b91","first_seen":"2023-04-13T12:57:28Z","last_seen":"2026-02-06T22:44:10.237214Z","times_seen":365,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-46ec\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18156, version 1.0","md5":"8a71415883fd28980f0c81d0cc6dd3b1","sha1":"45446bf1f1c2d17e4a28b00ce81f9963f43dda9a","sha256":"42c30588d9adaeee4cea28af0afda91efc7484528c6eea2ce7d591d927fd1a69","sha512":"70500c02c9955944522686bc4935d6f737802cd27f5351b0efac16b7ca4e704a4ac54277974fad83c93240d74c9de5bc0a49710e20ef2297a2b6f9e64933a78a","ssdeep":"384:lWsLI4pNAV7jA2yrgbB5hOFqMym+B7GPDfnnXLK8oGZNH:fpNA2hc1J7G7XW8o2H","tlshash":"8682d085c687a1274697723cae6b8dc2431c8a330c9ec635fb31305f9e751b09f1ca5a","first_seen":"2023-04-05T23:24:02Z","last_seen":"2026-02-06T22:44:10.243221Z","times_seen":373,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/l.dedf9a21e97bacda4782.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /dist/l.dedf9a21e97bacda4782.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 353\r\nlast-modified: Mon, 28 Apr 2025 13:23:22 GMT\r\netag: \"680f814a-161\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (787)","md5":"8a9505c9d6a8a067151ce12c8667da42","sha1":"d5c08557c5fd9177e108c8932f53e61ab1a918a3","sha256":"f69a8856cc2d14226ad304ea79da993941e6c321ea901bc69b795dc2aae3029d","sha512":"6c047324976c9671f6907c8e8f0db54c1708b1edf7ce64c089a54e937c8d3be6e16244065e3af9c590adb09aa2f4ac4cd8dc58d403bac1f5bc87c8ed469e92fa","ssdeep":"","tlshash":"c001f173aa15306e38775927f44078ea71b86113776b6bd4e590b424cbd03b22f23b8c","first_seen":"2025-06-05T02:14:31.785407Z","last_seen":"2026-02-25T18:36:38.189261Z","times_seen":9,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/lc.ddfa8c0ba43459a9159a.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /dist/lc.ddfa8c0ba43459a9159a.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 1270\r\nlast-modified: Mon, 28 Apr 2025 13:23:22 GMT\r\netag: \"680f814a-4f6\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4914,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4913)","md5":"1b0be30ef394a1d8dbdfdbfbafd98f38","sha1":"1129dba66701051b6e0225c334462caf2487f4f1","sha256":"33185ff18a034a5a5f2745a23194f18b3440591c7a54588d68f5073f6356f194","sha512":"0547efe5aa269b96d6099b11e269397987c36090e46fe19ac5988e2863d267626ad6aaa22b38657b2292af146950136c5d59fa6fe3dbc6245aaea5fe8cdcc20a","ssdeep":"48:VRWCIJP1YL1Qqp6+N1JoJ1Fm9CB5uUoYC3vK129w4csYPhWGKc4eysbzFfw+eC:VRWETN1JonFm9w5uUo7JjAWt3JsbzheC","tlshash":"2ba127392db8213ca46fca4636d90edb3019c017d9325ae7de717e30cbc765e1962395","first_seen":"2026-01-19T22:50:15.475337Z","last_seen":"2026-02-06T22:44:10.235946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/033a5dec3c14481ab12f4ae4250dd628.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/033a5dec3c14481ab12f4ae4250dd628.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51013\r\nlast-modified: Thu, 31 Oct 2024 00:22:28 GMT\r\netag: \"6722cdc4-c745\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51013,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 356x400, components 3","md5":"0d4c1c5d14610668fb8859564f260904","sha1":"10d5b7cea7d61a8016ca6a89e057ffcc2b239cb5","sha256":"1fd29e48ab8a9b1bde8f47948a74c4469b91d522038f12d9db9870a87789801f","sha512":"2c1850f3dd28f6e10ccf503ade03b1eb5896a51691be935980b98cb3f51cb5db00e0d430b8c00a2655e1b69199489ee94a1a113d98c8aacdea400be777cfb58b","ssdeep":"1536:UUZDHAfM5ioWp3Y9on4j/ygH5FXDDReJThyKeyJK5uPyKsPEr:9VAIm4ZH3QJCOkuNDr","tlshash":"e63302901e1785db232e846102db2eca17e5a70a37df4e6dbcd370de3056a0690e497f","first_seen":"2026-01-19T22:50:15.477644Z","last_seen":"2026-01-19T22:50:15.477644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/fa19bf9cb7c04c279d9201410defba41.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/fa19bf9cb7c04c279d9201410defba41.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54458\r\nlast-modified: Thu, 31 Oct 2024 00:22:29 GMT\r\netag: \"6722cdc5-d4ba\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x320, components 3","md5":"0984c2fe545751c06e1237a8e3e47d5d","sha1":"def8482d1d1c2e38089996604792da375ce73d28","sha256":"341657ee4d1c59f1a445d267a4bba2ca23d812f4e2e9f0b20eb6567f9bde3d9d","sha512":"4a15594029fa8a2bf8ab5973e9fe7281f0494a82fad38e7b215bad470f0806b134f20789617eb406a1b7b0124a38e01373896a80c22bde3bc4ed549945238c71","ssdeep":"1536:KLMpYLeVQCg9ZiFRulbw7Y50wDfso1v/zQh:AIYLeCCg9ZijuqY5RUo1kh","tlshash":"203301160298994d397b3840d7a8bc2e8c9c20d47c7d9aea4c9f910b9c9c7efc873172","first_seen":"2026-01-19T22:50:15.479995Z","last_seen":"2026-01-19T22:50:15.479995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/t/tqadbr?1749712\u0026s=lite\u0026c=mta\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026sc=1\u0026r=INC\u0026e=0\u0026i=3","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite","date":"2026-01-19T22:49:53.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /t/tqadbr?1749712\u0026s=lite\u0026c=mta\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026sc=1\u0026r=INC\u0026e=0\u0026i=3 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nx-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/\r\nexpires: Mon, 19 Jan 2026 22:49:52 GMT\r\ncache-control: no-cache\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:30:56.188899Z","times_seen":326538,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/favicon.ico","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite","date":"2026-01-19T22:49:53.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-aef\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 20 Jan 2026 22:49:53 GMT\r\ncache-control: max-age=86400\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2799,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"0a362a1a0cf4cc6bc56d65db8049dd6f","sha1":"ebfd1b824377525e1588719e935bf4b06349cddf","sha256":"d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd","sha512":"9bc3349815f97884a92965f5936a7abc4ee937232f305148bd6d791de0d0199c51c5a314e6f4f5efbcac925a860c8da4da6e94472471f36db7725caf4b49ac8b","ssdeep":"","tlshash":"5c515e6372d0083ae64fa6f1d7f77fc1e5a4c4285ae36e5943a825742d07780a897382","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-04-04T01:38:41.296391Z","times_seen":1822,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite","date":"2026-01-19T22:49:53.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/icons/meta/DDG-iOS-icon_152x152.png?v=2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 3576\r\nlast-modified: Thu, 31 Oct 2024 00:22:29 GMT\r\netag: \"6722cdc5-df8\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:49:53 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit colormap, non-interlaced","md5":"25c443fd913d8172af12119396c494e3","sha1":"543937df02caa63dc86aa31ee5743052d803268a","sha256":"f6e52a35e8854ebf14c9b8442302f6f7d5d0063f0215b7210edf4676d7fd7369","sha512":"910dc04b6422aae52a4d5294fbf9ae87e65bf678ba36c2ddfcab60cc21f0e37f25a6a01e78a2c0edf9356ec1035166c4f5ec47a5e2ed5a7263a917ece1b6b1d9","ssdeep":"","tlshash":"04714dfd8390593dc0b7a8ff985e8645d49d612089b4fdf1b741bafd84ae5db006150c","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-04-04T01:38:41.337856Z","times_seen":1836,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-19T22:50:00.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"POST /anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://duckduckgo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpires: Mon, 19 Jan 2026 22:50:00 GMT\r\ncache-control: no-cache\r\ncontent-encoding: br\r\nexpect-ct: max-age=0\r\nx-duckduckgo-locale: en_US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13202,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (421)","md5":"80048f5f25e5ab71e23028041241eca9","sha1":"935235157c8d277046bd7393e5c6a234724f7ac7","sha256":"e8fd9a2bea062c4974d0e2b64b005b205232e43bb5a04819646082fdc5d5f99b","sha512":"0466646204cf528646964b4e642484188365fd73b4aed923b24b920b0758acf5329b8c52da5c33765d66089efeb3d07f67bf68a58c30a198ce1418827077fa0f","ssdeep":"96:4woG54fsWzhFtAT5GTeZqfzGlbfGjkVfLFMIBE9Qezfdp3BfrS8wLfbWfs+JE1fc:4M54fsWzF6R9+c7dZ0CfLu","tlshash":"2c5244111cfa244f210bc7d936972f535c51e65f8b98be8036bc0ab68f81e2e5c63576","first_seen":"2026-01-19T22:50:15.485969Z","last_seen":"2026-01-19T22:50:15.485969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/93ebd2d44bdf4852be420ccc6c89bee8.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/93ebd2d44bdf4852be420ccc6c89bee8.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 56242\r\nlast-modified: Thu, 31 Oct 2024 00:22:28 GMT\r\netag: \"6722cdc4-dbb2\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=15, height=679, bps=194, PhotometricInterpretation=RGB, manufacturer=Canon, model=Canon EOS 10D, orientation=upper-left, width=544], baseline, precision 8, 240x300, components 3","md5":"6a934a39ccb685412b02e6ec69cdf1e5","sha1":"f281bc8512a7ae19a46e26348b91aca623b79a34","sha256":"cf31256ab301715dfc990c1cdb595cc5a0f60434fa3e10645553a2285bb5b9de","sha512":"b820d94f4926f1b0f49def8191f6528f521007602861e08d8a725ce850a6400c861e300e878aee74b2f01e409d96be34cdd6a7a8f7eaa35876c366226aa0717d","ssdeep":"768:Ku8AJSiIDT98AJSiIDOYymf4rDn9WLzrRwHChm7Z4zTfpwqfeWLiZAlBd0GwkTun:WTaOSfaKzusmyffpJfNLOAHd02um+","tlshash":"9643d02ca760ec93f4d5a2b8f4e2d3b976b13b18b2a3152370ad574b3b311918e55b43","first_seen":"2026-01-19T22:50:15.48831Z","last_seen":"2026-01-19T22:50:15.48831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/01dbdff0fda649e6a2d0933d89e97ed0.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/01dbdff0fda649e6a2d0933d89e97ed0.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23535\r\nlast-modified: Thu, 31 Oct 2024 00:22:28 GMT\r\netag: \"6722cdc4-5bef\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23535,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 257x320, components 3","md5":"03c8de05568280623cb39e2ead3bcb0a","sha1":"289794a363ab4cfd053359d2fb5c50e4840ad8e6","sha256":"67ea84a7feef10e4bd6a25523ce978b6daff77f7848afa835d22039c9bae3ef3","sha512":"77c6d1b6c1931ac7e890345c3e9bc8fe789b91b29b065d46e1a9b700a0326baf90d983f973cdd6e3b990e386306fafa933ba2b0dfa8d85392484b184f9260d3a","ssdeep":"384:009LSPMHxcZ8A9BvtqYIXmo+8MvaeVYYsOeZZ5M27NCw2GyGMGD+nSQuGtsPIqHg:vNSGcZbBlDIXmRHVVYYsOUM27ZyDmGtL","tlshash":"45b2e0278a3217d6cfe5fcb26adb2d7953e9c289d674035bc8fc1a0ba096c727950019","first_seen":"2026-01-19T22:50:15.490115Z","last_seen":"2026-01-19T22:50:15.490115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/favicon.ico","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-aef\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 20 Jan 2026 22:50:01 GMT\r\ncache-control: max-age=86400\r\nx-duckduckgo-locale: en_US\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2799,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"0a362a1a0cf4cc6bc56d65db8049dd6f","sha1":"ebfd1b824377525e1588719e935bf4b06349cddf","sha256":"d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd","sha512":"9bc3349815f97884a92965f5936a7abc4ee937232f305148bd6d791de0d0199c51c5a314e6f4f5efbcac925a860c8da4da6e94472471f36db7725caf4b49ac8b","ssdeep":"","tlshash":"5c515e6372d0083ae64fa6f1d7f77fc1e5a4c4285ae36e5943a825742d07780a897382","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-04-04T01:38:41.296391Z","times_seen":1822,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite","date":"2026-01-19T22:49:53.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-46ec\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:49:53 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18156, version 1.0","md5":"8a71415883fd28980f0c81d0cc6dd3b1","sha1":"45446bf1f1c2d17e4a28b00ce81f9963f43dda9a","sha256":"42c30588d9adaeee4cea28af0afda91efc7484528c6eea2ce7d591d927fd1a69","sha512":"70500c02c9955944522686bc4935d6f737802cd27f5351b0efac16b7ca4e704a4ac54277974fad83c93240d74c9de5bc0a49710e20ef2297a2b6f9e64933a78a","ssdeep":"384:lWsLI4pNAV7jA2yrgbB5hOFqMym+B7GPDfnnXLK8oGZNH:fpNA2hc1J7G7XW8o2H","tlshash":"8682d085c687a1274697723cae6b8dc2431c8a330c9ec635fb31305f9e751b09f1ca5a","first_seen":"2023-04-05T23:24:02Z","last_seen":"2026-02-06T22:44:10.243221Z","times_seen":373,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/lc.ddfa8c0ba43459a9159a.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite","date":"2026-01-19T22:49:53.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /dist/lc.ddfa8c0ba43459a9159a.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: text/css\r\ncontent-length: 1270\r\nlast-modified: Mon, 28 Apr 2025 13:23:22 GMT\r\netag: \"680f814a-4f6\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:49:53 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4914,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4913)","md5":"1b0be30ef394a1d8dbdfdbfbafd98f38","sha1":"1129dba66701051b6e0225c334462caf2487f4f1","sha256":"33185ff18a034a5a5f2745a23194f18b3440591c7a54588d68f5073f6356f194","sha512":"0547efe5aa269b96d6099b11e269397987c36090e46fe19ac5988e2863d267626ad6aaa22b38657b2292af146950136c5d59fa6fe3dbc6245aaea5fe8cdcc20a","ssdeep":"48:VRWCIJP1YL1Qqp6+N1JoJ1Fm9CB5uUoYC3vK129w4csYPhWGKc4eysbzFfw+eC:VRWETN1JonFm9w5uUo7JjAWt3JsbzheC","tlshash":"2ba127392db8213ca46fca4636d90edb3019c017d9325ae7de717e30cbc765e1962395","first_seen":"2026-01-19T22:50:15.475337Z","last_seen":"2026-02-06T22:44:10.235946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/icons/meta/DDG-iOS-icon_152x152.png?v=2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 3576\r\nlast-modified: Thu, 31 Oct 2024 00:22:29 GMT\r\netag: \"6722cdc5-df8\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 152, 8-bit colormap, non-interlaced","md5":"25c443fd913d8172af12119396c494e3","sha1":"543937df02caa63dc86aa31ee5743052d803268a","sha256":"f6e52a35e8854ebf14c9b8442302f6f7d5d0063f0215b7210edf4676d7fd7369","sha512":"910dc04b6422aae52a4d5294fbf9ae87e65bf678ba36c2ddfcab60cc21f0e37f25a6a01e78a2c0edf9356ec1035166c4f5ec47a5e2ed5a7263a917ece1b6b1d9","ssdeep":"","tlshash":"04714dfd8390593dc0b7a8ff985e8645d49d612089b4fdf1b741bafd84ae5db006150c","first_seen":"2023-05-08T19:59:54Z","last_seen":"2026-04-04T01:38:41.337856Z","times_seen":1836,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/font/ProximaNova-Reg-webfont.woff2","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite","date":"2026-01-19T22:49:53.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /font/ProximaNova-Reg-webfont.woff2 HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 31 Oct 2024 00:22:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc6-469c\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:49:53 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18076, version 1.0","md5":"9cb812c72d169a407787679df65e85ed","sha1":"cf02893a196b2a6b9581060446b7dcb2f6ac8c74","sha256":"c219a877eb2c47380ba959748793187f3aaed9533061abace5461024cd7d0704","sha512":"92d9e7961ba716191541e1f738f81675d19225772552a374cb9df102bcfdbabc00206ee56a25701df264a47d63b3471106446820ef1c139e04da67be1b2b1579","ssdeep":"384:Hfsuo9tTd6OiE9BjRP3I2WrPKMN7SUaquPjqNrAwh1QDh+tP:Hf92clE9xRvI2WrPKesqubU8ty","tlshash":"a982dfd8c66ded868669e3334081b1caa94c84c757720cf6f625fdd92cec0ac2547b91","first_seen":"2023-04-13T12:57:28Z","last_seen":"2026-02-06T22:44:10.237214Z","times_seen":365,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/dist/l.dedf9a21e97bacda4782.css","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite","date":"2026-01-19T22:49:53.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /dist/l.dedf9a21e97bacda4782.css HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: text/css\r\ncontent-length: 353\r\nlast-modified: Mon, 28 Apr 2025 13:23:22 GMT\r\netag: \"680f814a-161\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:49:53 GMT\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding, Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":788,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (787)","md5":"8a9505c9d6a8a067151ce12c8667da42","sha1":"d5c08557c5fd9177e108c8932f53e61ab1a918a3","sha256":"f69a8856cc2d14226ad304ea79da993941e6c321ea901bc69b795dc2aae3029d","sha512":"6c047324976c9671f6907c8e8f0db54c1708b1edf7ce64c089a54e937c8d3be6e16244065e3af9c590adb09aa2f4ac4cd8dc58d403bac1f5bc87c8ed469e92fa","ssdeep":"","tlshash":"c001f173aa15306e38775927f44078ea71b86113776b6bd4e590b424cbd03b22f23b8c","first_seen":"2025-06-05T02:14:31.785407Z","last_seen":"2026-02-25T18:36:38.189261Z","times_seen":9,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/failure-icon.svg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite","date":"2026-01-19T22:49:53.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/failure-icon.svg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:49:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 31 Oct 2024 00:22:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722cdc4-1f2\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:49:53 GMT\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":498,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d25ad43529aaf43be83280f1dccce64","sha1":"bf6099a3cf5aa3959f622a5679c415d92ab797c0","sha256":"c5358f5aee9ed142283ae48bf83c2a53f3ec5381886189999abe7afb4cd66785","sha512":"1485bb0ab9d8c3d74e64ae9a83b7fbace0ca40bc609b7e116b7eaf8a118a013d062ffba5b9447eb07071c74c1559e5f49d50de14bfd118e3a0eb14b083e40345","ssdeep":"","tlshash":"03f059586154891c7250cbe8ff1cb075b432304b71c9114454651a3b2176feded338e8","first_seen":"2026-01-19T22:50:15.492099Z","last_seen":"2026-01-19T22:50:15.492099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/ae96c2d7208140c2a70eefa1fcfc665e.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/ae96c2d7208140c2a70eefa1fcfc665e.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58787\r\nlast-modified: Thu, 31 Oct 2024 00:22:28 GMT\r\netag: \"6722cdc4-e5a3\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58787,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 320x317, components 3","md5":"ac10964b3d883bbc59512efb8127593f","sha1":"a8707657bdb20836b18c65ef991bd312d18102f4","sha256":"2fa97960223aa7e210e92e9070d2a10518043bb1fd8f6377b0f09f44be35366b","sha512":"1c6e5eb7c7a81836435fa9dfb8f21d77f128fd067eda0ad0bb336491f3e6fb34ee749049d827a64e61bfe6e00719e2d35b3e888031c4c55746645875f29b127d","ssdeep":"1536:HAPQwvGSoNX8sF/0EnsVzVTL5IU4mDU+5:gPQymxzF72zVCJmoM","tlshash":"90430268e6233e89ffdb1c37d48c7452446329d39a54dfc9c01279c2af112b6d2b650e","first_seen":"2026-01-19T22:50:15.494157Z","last_seen":"2026-01-19T22:50:15.494157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duckduckgo.com/assets/anomaly/images/challenge/9b67c45f0e3b4288a05b5cfca2da9c26.jpg","fqdn":"duckduckgo.com","domain":"duckduckgo.com","tld":"com"},"ip":{"addr":"40.114.177.156","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duckduckgo.com/anomaly.js?sv=lite\u0026cc=\u0026gk=\u0026p=ae96c2d7208140c2a70eefa1fcfc665e-93ebd2d44bdf4852be420ccc6c89bee8-033a5dec3c14481ab12f4ae4250dd628-3825d536cb03464ebddd8d5671e8713c-01dbdff0fda649e6a2d0933d89e97ed0-fa19bf9cb7c04c279d9201410defba41-b15ef466aca542cc8d922eddb8f6cccc-d9a34a82af2f40b2b09e501ff8fe8bf4-9b67c45f0e3b4288a05b5cfca2da9c26\u0026q=\u0026rt=1\u0026r=INC","date":"2026-01-19T22:50:01.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.duckduckgo.com","organization":"Duck Duck Go, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Sun, 20 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E0:61:DA:F1:2C:9A:55:56:AB:A5:77:87:C1:68:4D:9B:7B:CC:9F:C5","sha256":"C2:80:82:8B:6B:F2:2B:E2:9C:60:0D:03:24:5C:D2:F8:93:A5:67:AA:11:23:EB:38:DE:DA:CA:7E:13:76:D0:F3"}}},"request":{"raw":"GET /assets/anomaly/images/challenge/9b67c45f0e3b4288a05b5cfca2da9c26.jpg HTTP/1.1\r\nHost: duckduckgo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duckduckgo.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 19 Jan 2026 22:50:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38682\r\nlast-modified: Thu, 31 Oct 2024 00:22:28 GMT\r\netag: \"6722cdc4-971a\"\r\nstrict-transport-security: max-age=31536000\r\npermissions-policy: interest-cohort=()\r\ncontent-security-policy: default-src 'none' ; connect-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob:  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action  https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1;mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin\r\nexpect-ct: max-age=0\r\nexpires: Tue, 19 Jan 2027 22:50:01 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38682,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: \"File source: http://commons.wikimedia.org/wiki/File:Giant_Panda_at_Chengdu_Panda_Base.jpg\", baseline, precision 8, 440x380, components 3","md5":"fa13be4fa68fe5fa529e2098eea33d2d","sha1":"f17a7004e9ad0e3c978a598de29ba5c70570258f","sha256":"5d0e945341aad95da60010a7caba63fcc3f1d93b32256871cb4ff01f9fed4628","sha512":"9a177ed4267d430f7cc979c74fe577133bd1fd987fc68d2bad9c4fdb663d40dec14e67a7f42d303e73bd4168ef44143c5d79eace4d1d416768e0fd9a19706bc2","ssdeep":"768:OY+fLWn/pztp9jnt45INbQPAgEsPr7YFyd+BbcBqOXH1JPas:4LYh9jm5aUPNEGYO+BIbHR","tlshash":"6003e1eb7c0429e9e0f4be7122f536bd0e2e5307eae6d1bf1161784ddb694a22c0b441","first_seen":"2026-01-19T22:50:15.495806Z","last_seen":"2026-01-19T22:50:15.495806Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}