Report - 6wmikv.experwea.cc/

Report Overview

Submitted URL
6wmikv.experwea.cc/
IP
80.66.64.251
ASN
#57416 LLC South Internet
Submitted
2023-05-31 09:48:06
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
5
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
6wmikv.experwea.cc	unknown	2023-05-01	2023-05-05	2023-05-15	391 B	233 B	80.66.64.251
duckduckgo.com	1519	2007-11-11	2012-05-24	2023-05-30	11 kB	399 kB	40.114.177.156
improving.duckduckgo.com	7346	2007-11-11	2018-08-02	2023-05-30	1.0 kB	4.2 kB	40.114.177.156

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-31 09:47:47	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-05-31 09:47:47	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-05-31 09:47:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-05-31 09:47:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-05-31 09:47:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	duckduckgo.com/tl7.js	103 B	2023-03-07	2023-07-11
Pretty URL duckduckgo.com/tl7.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:21 Last Seen2023-07-11 18:15:40 Times Seen620 Hash 8952029fa2c7ccb186758f6d7984f165 de37058a8a7e56224e5520a25e2f57e222e280e3 1bc65f87ba8c4e94de14d0d24defaac11f59babaa643485910a5e548e91c0338 Loading...

	duckduckgo.com/b211.js	29 kB	2023-05-30	2023-06-02
Pretty URL duckduckgo.com/b211.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-30 21:41:36 Last Seen2023-06-02 08:37:44 Times Seen32 Hash 1aee9bacd662f34da61d3453223885f3 d42579478c80ee8fc559cd315df2b09e30fe8e15 cc69efb8105ab7e1a79df5e87fdd995ccd6ac00391c62520ba8d1f9e3361ce0a Loading...

	duckduckgo.com/locale/en_US/duckduckgo14.js	505 B	2023-03-07	2023-12-20
Pretty URL duckduckgo.com/locale/en_US/duckduckgo14.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:21 Last Seen2023-12-20 09:30:16 Times Seen636 Hash 560fbe36973296f36b68610e5b564142 874f8244589d9dce37b364c4485491113429190c 790f083d45a4a716dbec546771888883690e58379526146fc429cf310df9a49f Loading...

	duckduckgo.com/ti6.js	578 B	2023-05-11	2023-06-02
Pretty URL duckduckgo.com/ti6.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-11 19:45:40 Last Seen2023-06-02 08:37:44 Times Seen244 Hash a108344a26180fe4becd0de7ac0a5725 e3e3f5df596a0975669fd6e320f1eccb7ba1b1ab aa9cede06c4ab870ac6fb789d833cba92977d311264fb3d4e89491c5950cae3f Loading...

	duckduckgo.com/p104.js	297 B	2023-03-07	2023-12-20
Pretty URL duckduckgo.com/p104.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:21 Last Seen2023-12-20 09:30:16 Times Seen562 Hash 81061861e28008b28cf6b4bbc3265dd2 5f167e01c02fb1bb2f15e1762dc294814d14aa6e 6c7334db0f46b3c0b430ee760bb0ceedbfdae65522a5f1d30c9fcd447b5066e6 Loading...

	duckduckgo.com/lib/l132.js	141 kB	2023-03-09	2023-07-11
Pretty URL duckduckgo.com/lib/l132.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 03:47:17 Last Seen2023-07-11 18:15:40 Times Seen620 Hash d7e519347aaf7f83bb64942cbfb24660 6532edd391fda596f94067b8f32e3405cb646a56 f2772a6d1bfbbc13342defc944208e6ad851044afb23ad591d04bf8d63442432 Loading...

	unknown	169 B	2023-04-11	2023-12-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:53:16 Last Seen2023-12-20 09:30:16 Times Seen314 Hash 0510c92e726f5678ff161f69b48765d7 f527c14fe5f61d70f89916097dadea14a90b1067 b784abc3341533fe3e782231f764cb4f6a783250b2ece584a927a3a73a668cda Loading...

	duckduckgo.com/util/u715.js	116 kB	2023-05-27	2023-06-02
Pretty URL duckduckgo.com/util/u715.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-27 00:49:58 Last Seen2023-06-02 08:37:44 Times Seen43 Hash 8aff055fefc9bde3d760a0584419fc53 59d560d7cdd1c53e7e9c9b871305fd6a3f178a05 34b392a3757c69a6b4172dee05d50d32baeddcb34320303a2530eb42f28e0e4d Loading...

	duckduckgo.com/d3217.js	450 kB	2023-05-30	2023-06-01
Pretty URL duckduckgo.com/d3217.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-30 21:41:36 Last Seen2023-06-01 18:33:20 Times Seen26 Hash 6d303d5d883d48520ccf4ec1e045e0cc e223e281aba9dbd2d209bc9578d83505ccc25f5a 50c849a841b3a16a265458a15f4bfcdaa2bac13d8bcb986a8366c730de33a150 Loading...

	duckduckgo.com/h34.js	117 kB	2023-05-02	2023-06-01
Pretty URL duckduckgo.com/h34.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-02 23:26:05 Last Seen2023-06-01 18:33:20 Times Seen342 Hash a738b7f4345d6c092fe209875cf8c2c4 710521691975a35f38ce48e834933f1868ccb93e 5f578c57bb7b982aec82526fbdeb2283d2ccac2db9d26f8c1c5b57feb055451e Loading...

	duckduckgo.com/	0 B	2023-03-07	2024-04-25
Pretty URL duckduckgo.com/ IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-25 02:10:11 Times Seen37052703 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (27)

	URL	IP	Response	Size
	6wmikv.experwea.cc/	80.66.64.251	302 Found	0 B
URL User Request GET HTTP/1.1 6wmikv.experwea.cc/ IP 80.66.64.251:80 ASN #57416 LLC South Internet File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: 6wmikv.experwea.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Date: Wed, 31 May 2023 09:47:48 GMT Server: Apache/2.4.38 (Debian) Access-Control-Allow-Origin: * Location: https://duckduckgo.com Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8`

	duckduckgo.com/s2161.css	40.114.177.156	200 OK	37 kB
URL GET HTTP/2 duckduckgo.com/s2161.css IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 37 kB (36975 bytes) Hash 95bd81a071e37db9d15f76e56b9d10be 9114ed04b47f433463a12d6e197811df86b6f89f 7d51c9b1a827a273005c5906f8398d6ba16e1ae0bdf4d46105af03f53cdc5811 HTTP Headers `GET /s2161.css HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: text/css content-length: 36975 last-modified: Wed, 31 May 2023 01:16:47 GMT etag: "64769fff-906f" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/o2161.css	40.114.177.156	200 OK	7.5 kB
URL GET HTTP/2 duckduckgo.com/o2161.css IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (44857) Size 7.5 kB (7548 bytes) Hash 6bb24c27ae84fbd1cc1fb54d3e5a77ef be180bed83fe5832c3730b807335f21358723e63 39068a3a84e4eafa36a4bf9d720a24979a9c7b7af55c43e352fc79a9c9f8f09d HTTP Headers `GET /o2161.css HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: text/css content-length: 7548 last-modified: Wed, 31 May 2023 01:16:47 GMT etag: "64769fff-1d7c" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/tl7.js	40.114.177.156	200 OK	69 B
URL GET HTTP/2 duckduckgo.com/tl7.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with no line terminators Size 69 B (69 bytes) Hash 8952029fa2c7ccb186758f6d7984f165 de37058a8a7e56224e5520a25e2f57e222e280e3 1bc65f87ba8c4e94de14d0d24defaac11f59babaa643485910a5e548e91c0338 HTTP Headers `GET /tl7.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 69 last-modified: Thu, 11 May 2023 21:49:56 GMT etag: "645d6304-45" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/b211.js	40.114.177.156	200 OK	8.0 kB
URL GET HTTP/2 duckduckgo.com/b211.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (28928) Size 8.0 kB (7989 bytes) Hash 1aee9bacd662f34da61d3453223885f3 d42579478c80ee8fc559cd315df2b09e30fe8e15 cc69efb8105ab7e1a79df5e87fdd995ccd6ac00391c62520ba8d1f9e3361ce0a HTTP Headers `GET /b211.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 7989 last-modified: Tue, 30 May 2023 17:23:30 GMT etag: "64763112-1f35" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/lib/l132.js	40.114.177.156	200 OK	47 kB
URL GET HTTP/2 duckduckgo.com/lib/l132.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (49018) Size 47 kB (47208 bytes) Hash d7e519347aaf7f83bb64942cbfb24660 6532edd391fda596f94067b8f32e3405cb646a56 f2772a6d1bfbbc13342defc944208e6ad851044afb23ad591d04bf8d63442432 HTTP Headers `GET /lib/l132.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 47208 last-modified: Thu, 27 Oct 2022 19:44:44 GMT etag: "635adfac-b868" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/locale/en_US/duckduckgo14.js	40.114.177.156	200 OK	282 B
URL GET HTTP/2 duckduckgo.com/locale/en_US/duckduckgo14.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (504) Size 282 B (282 bytes) Hash 560fbe36973296f36b68610e5b564142 874f8244589d9dce37b364c4485491113429190c 790f083d45a4a716dbec546771888883690e58379526146fc429cf310df9a49f HTTP Headers `GET /locale/en_US/duckduckgo14.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 282 last-modified: Fri, 26 Mar 2021 01:54:15 GMT etag: "605d3ec7-11a" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/util/u715.js	40.114.177.156	200 OK	35 kB
URL GET HTTP/2 duckduckgo.com/util/u715.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 35 kB (35123 bytes) Hash 8aff055fefc9bde3d760a0584419fc53 59d560d7cdd1c53e7e9c9b871305fd6a3f178a05 34b392a3757c69a6b4172dee05d50d32baeddcb34320303a2530eb42f28e0e4d HTTP Headers `GET /util/u715.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 35123 last-modified: Fri, 26 May 2023 17:20:35 GMT etag: "6470ea63-8933" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/h34.js	40.114.177.156	200 OK	36 kB
URL GET HTTP/2 duckduckgo.com/h34.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type Unicode text, UTF-8 text, with very long lines (65470), with no line terminators Size 36 kB (35774 bytes) Hash a738b7f4345d6c092fe209875cf8c2c4 710521691975a35f38ce48e834933f1868ccb93e 5f578c57bb7b982aec82526fbdeb2283d2ccac2db9d26f8c1c5b57feb055451e HTTP Headers `GET /h34.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 35774 last-modified: Tue, 02 May 2023 19:09:29 GMT etag: "64515fe9-8bbe" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/ti6.js	40.114.177.156	200 OK	326 B
URL GET HTTP/2 duckduckgo.com/ti6.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (578), with no line terminators Size 326 B (326 bytes) Hash a108344a26180fe4becd0de7ac0a5725 e3e3f5df596a0975669fd6e320f1eccb7ba1b1ab aa9cede06c4ab870ac6fb789d833cba92977d311264fb3d4e89491c5950cae3f HTTP Headers `GET /ti6.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 326 last-modified: Thu, 11 May 2023 17:36:20 GMT etag: "645d2794-146" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/d3217.js	40.114.177.156	200 OK	89 kB
URL GET HTTP/2 duckduckgo.com/d3217.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 89 kB (89217 bytes) Hash 6d303d5d883d48520ccf4ec1e045e0cc e223e281aba9dbd2d209bc9578d83505ccc25f5a 50c849a841b3a16a265458a15f4bfcdaa2bac13d8bcb986a8366c730de33a150 HTTP Headers `GET /d3217.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 89217 last-modified: Tue, 30 May 2023 17:23:30 GMT etag: "64763112-15c81" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png	40.114.177.156	200 OK	3.6 kB
URL GET HTTP/2 duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type PNG image data, 152 x 152, 8-bit colormap, non-interlaced\012- data Size 3.6 kB (3576 bytes) Hash 25c443fd913d8172af12119396c494e3 543937df02caa63dc86aa31ee5743052d803268a f6e52a35e8854ebf14c9b8442302f6f7d5d0063f0215b7210edf4676d7fd7369 HTTP Headers `GET /assets/icons/meta/DDG-iOS-icon_152x152.png HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/png content-length: 3576 last-modified: Mon, 08 May 2023 17:25:03 GMT etag: "6459306f-df8" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000, public accept-ranges: bytes X-Firefox-Spdy: h2

	duckduckgo.com/p104.js	40.114.177.156	200 OK	157 B
URL GET HTTP/2 duckduckgo.com/p104.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/post3.html Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with no line terminators Size 157 B (157 bytes) Hash 81061861e28008b28cf6b4bbc3265dd2 5f167e01c02fb1bb2f15e1762dc294814d14aa6e 6c7334db0f46b3c0b430ee760bb0ceedbfdae65522a5f1d30c9fcd447b5066e6 HTTP Headers `GET /p104.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: application/x-javascript content-length: 157 last-modified: Tue, 19 Oct 2021 20:21:23 GMT etag: "616f28c3-9d" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/assets/add-to-browser/cppm/mobile.svg	40.114.177.156	200 OK	741 B
URL GET HTTP/2 duckduckgo.com/assets/add-to-browser/cppm/mobile.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1508), with no line terminators Size 741 B (741 bytes) Hash a06ac2178ae93c30c3b3115ebf4856e3 e68016cca9ad6c08bdb88ec99dd5260c27ba53dd 91762ec30f3c6fbb5bd01a6e9351b1580ce2fd8e3fc34a863f4f258900178820 HTTP Headers `GET /assets/add-to-browser/cppm/mobile.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/svg+xml last-modified: Fri, 26 Mar 2021 01:54:11 GMT vary: Accept-Encoding etag: W/"605d3ec3-5e4" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/home/landing/icons/search.svg	40.114.177.156	200 OK	2.3 kB
URL GET HTTP/2 duckduckgo.com/assets/home/landing/icons/search.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2358), with no line terminators Size 2.3 kB (2288 bytes) Hash 518bca1b671ef50db850bde937eae994 7e9a331da72a8ca40e55806bdfee4ab166049fdd 64a66da50c5f4a550c8d9c42184349d1b4034d4e6e855cad83e6711eb8555bbf HTTP Headers `GET /assets/home/landing/icons/search.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/svg+xml last-modified: Fri, 26 Mar 2021 01:54:11 GMT vary: Accept-Encoding etag: W/"605d3ec3-8f0" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/add-to-browser/cppm/laptop.svg	40.114.177.156	200 OK	2.0 kB
URL GET HTTP/2 duckduckgo.com/assets/add-to-browser/cppm/laptop.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2033), with no line terminators Size 2.0 kB (1969 bytes) Hash 9b7fb9aa5571994734cab2ef9fbe382d 47429a5e3090cdaaf757611fbfd8692e0e45ea10 72a4d301802da1f3a6a402c737017b29543a2b44df6d7d9f6dfefa3dae72e5f0 HTTP Headers `GET /assets/add-to-browser/cppm/laptop.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/svg+xml last-modified: Fri, 26 Mar 2021 01:54:11 GMT vary: Accept-Encoding etag: W/"605d3ec3-7b1" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/icons/cta/heart.svg	40.114.177.156	200 OK	1.7 kB
URL GET HTTP/2 duckduckgo.com/assets/icons/cta/heart.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1714), with no line terminators Size 1.7 kB (1688 bytes) Hash e39eb155ddbcf45860cf427366fb6fd6 36d8346cd7458cd5ca00cc6c5e59954837ad4e82 f6e2d538c5f3cec1f504007bbcbb18ce8bd6fcdd37efa1e9b7287897f30940c6 HTTP Headers `GET /assets/icons/cta/heart.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/svg+xml last-modified: Wed, 27 Apr 2022 18:58:23 GMT vary: Accept-Encoding etag: W/"6269924f-698" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/install_arrow.svg	40.114.177.156	200 OK	1.3 kB
URL GET HTTP/2 duckduckgo.com/assets/install_arrow.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1330), with no line terminators Size 1.3 kB (1258 bytes) Hash b3a17721840b207da2c6781d0963e4d8 f56d2b014754affdb94d413a0707bc0f22dcaf00 fc3c1fe6340faffb603642825d455eda2625ad6ed55e7efca649ea535dce93d6 HTTP Headers `GET /assets/install_arrow.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/svg+xml last-modified: Fri, 26 Mar 2021 01:54:11 GMT vary: Accept-Encoding etag: W/"605d3ec3-4ea" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/font/ProximaNova-Reg-webfont.woff2	40.114.177.156	200 OK	18 kB
URL GET HTTP/2 duckduckgo.com/font/ProximaNova-Reg-webfont.woff2 IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 18114, version 17971.1\012- data Size 18 kB (18076 bytes) Hash 0ae89aa88b55600e388263c3e3affc7c a460ac3e68941a3d12697dd032298c2a714fcd9c 3e8e865d0d970f263e1bdbd285339722cab43f5916df07a4b8b70bd10ca01b01 HTTP Headers `GET /font/ProximaNova-Reg-webfont.woff2 HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: text/html; charset=UTF-8 last-modified: Fri, 26 Mar 2021 01:54:14 GMT vary: Accept-Encoding etag: W/"605d3ec6-469c" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/post3.html	40.114.177.156	200 OK	141 B
URL GET HTTP/2 duckduckgo.com/post3.html IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Size 141 B (141 bytes) Hash 0d1468c5598fb8fb7f505ca4dd0f46e8 aee2a07f64eaa0d9feed83e745889f11422ecacd 4d8b0d33e4ded3fbe3ca28b354405f9eb7916d0108d1aecec4cf0e17dbf5d019 HTTP Headers `GET /post3.html HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: text/html; charset=UTF-8 last-modified: Tue, 19 Oct 2021 20:21:23 GMT vary: Accept-Encoding etag: W/"616f28c3-8d" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' https://search.duckduckgo.com ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 01 Jun 2023 09:47:49 GMT cache-control: max-age=86400 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	improving.duckduckgo.com/t/atbhi_firefox_v380-1?9311232&l=en-US&p=linux&ax=false&pre_va=_&pre_atbva=_	40.114.177.156	200 OK	43 B
URL POST HTTP/2 improving.duckduckgo.com/t/atbhi_firefox_v380-1?9311232&l=en-US&p=linux&ax=false&pre_va=_&pre_atbva=_ IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers `POST /t/atbhi_firefox_v380-1?9311232&l=en-US&p=linux&ax=false&pre_va=_&pre_atbva=_ HTTP/1.1 Host: improving.duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ Origin: https://duckduckgo.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Content-Length: 0` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 x-duckduckgo-moreinfo: See https://help.duckduckgo.com/duckduckgo-help-pages/privacy/atb/ expires: Wed, 31 May 2023 09:47:48 GMT cache-control: no-cache x-duckduckgo-locale: en_US X-Firefox-Spdy: h2

	duckduckgo.com/assets/logo_homepage.normal.v109.svg	40.114.177.156	200 OK	9.3 kB
URL GET HTTP/2 duckduckgo.com/assets/logo_homepage.normal.v109.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (9395), with no line terminators Size 9.3 kB (9251 bytes) Hash ecc780f6c9842b87bb674dcb70773ef1 1d0ba2971634cb6572c022751957f3e5cc7f5007 a6b617c6504b071d0e80fbd53887ace750aa664bf1e9cbaaad9e995ea7cefea6 HTTP Headers `GET /assets/logo_homepage.normal.v109.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/svg+xml last-modified: Mon, 08 May 2023 17:25:03 GMT vary: Accept-Encoding etag: W/"6459306f-2423" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/	40.114.177.156	200 OK	6.0 kB
URL User Request GET HTTP/2 duckduckgo.com/ IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6588), with no line terminators Size 6.0 kB (6031 bytes) Hash 37a57eea4db7a664f7747ced40653fc9 5e0cdc1d8ac94e8c24fc8af87b9b1a0ea1778c9e df58884ba91bb55af119e4e10c869461a48fc729ed20a67197e27bb65c02a428 HTTP Headers `GET / HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:48 GMT content-type: text/html; charset=UTF-8 vary: Accept-Encoding etag: W/"6476a014-178f" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 31 May 2023 09:47:47 GMT cache-control: no-cache content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/font/ProximaNova-ExtraBold-webfont.woff2	40.114.177.156	200 OK	21 kB
URL GET HTTP/2 duckduckgo.com/font/ProximaNova-ExtraBold-webfont.woff2 IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 21028, version 20930.-18688\012- data Size 21 kB (21028 bytes) Hash b391d3db5464628a81a7d70f44b739b1 862a7b68f0c321a03c530993b23b15a630db28ec 0b0854876245082b1178e7fd349c20448594498f2fbd09bd6cc2c4b726efbf23 HTTP Headers `GET /font/ProximaNova-ExtraBold-webfont.woff2 HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: text/html; charset=UTF-8 last-modified: Fri, 26 Mar 2021 01:54:13 GMT vary: Accept-Encoding etag: W/"605d3ec5-5224" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2	40.114.177.156	200 OK	18 kB
URL GET HTTP/2 duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2 IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 18115, version 18114.-31744\012- data Size 18 kB (18156 bytes) Hash 87e89736c683b9e9d808a24259aed5da 615f912b8372990283f5a2746463b24e770fdf8b fd7924df8a27da08a5b154abd820ac58f294b5c8bed9c8476dc7b82fbac66fcf HTTP Headers `GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: text/html; charset=UTF-8 last-modified: Fri, 26 Mar 2021 01:54:14 GMT vary: Accept-Encoding etag: W/"605d3ec6-46ec" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/favicon.ico	40.114.177.156	200 OK	2.8 kB
URL GET HTTP/2 duckduckgo.com/favicon.ico IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel\012- data Size 2.8 kB (2799 bytes) Hash 0a362a1a0cf4cc6bc56d65db8049dd6f ebfd1b824377525e1588719e935bf4b06349cddf d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd HTTP Headers `GET /favicon.ico HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/x-icon last-modified: Mon, 08 May 2023 17:25:03 GMT vary: Accept-Encoding etag: W/"6459306f-aef" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 01 Jun 2023 09:47:49 GMT cache-control: max-age=86400 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	improving.duckduckgo.com/t/hi?1318073&b=firefox&atbi=true&ei=true&i=false&d=d&l=en-US&p=linux&pre_atb=v380-1&ax=false&ak=false&pre_va=_&pre_atbva=_	40.114.177.156	200 OK	43 B
URL POST HTTP/2 improving.duckduckgo.com/t/hi?1318073&b=firefox&atbi=true&ei=true&i=false&d=d&l=en-US&p=linux&pre_atb=v380-1&ax=false&ak=false&pre_va=_&pre_atbva=_ IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b HTTP Headers POST /t/hi?1318073&b=firefox&atbi=true&ei=true&i=false&d=d&l=en-US&p=linux&pre_atb=v380-1&ax=false&ak=false&pre_va=_&pre_atbva=_ HTTP/1.1 Host: improving.duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ Origin: https://duckduckgo.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Content-Length: 0 HTTP/2 200 OK server: nginx date: Wed, 31 May 2023 09:47:49 GMT content-type: image/gif strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Thu, 30 May 2024 09:47:49 GMT cache-control: max-age=31536000 x-duckduckgo-locale: en_US X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL