Report - lwbqjztyi.operationglad.cc

Report Overview

Submitted URL
lwbqjztyi.operationglad.cc
IP
194.50.153.66
ASN
#0
Submitted
2023-05-30 13:46:53
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
5
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lwbqjztyi.operationglad.cc	unknown	unknown	No data	No data	399 B	233 B	194.50.153.66
duckduckgo.com	1519	2007-11-11	2012-05-24	2023-05-29	11 kB	394 kB	40.114.177.156
improving.duckduckgo.com	7346	2007-11-11	2018-08-02	2023-05-29	1.0 kB	4.2 kB	40.114.177.156

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-05-30 13:46:34	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-05-30 13:46:34	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-05-30 13:46:34	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-05-30 13:46:35	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-05-30 13:46:35	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	duckduckgo.com/b210.js	29 kB	2023-05-27	2023-05-30
Pretty URL duckduckgo.com/b210.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-27 00:49:58 Last Seen2023-05-30 15:47:01 Times Seen12 Hash c9336bfa1413dd810d6c2ce961e721ff ddf2ff076e8445323f94d86385c728df16d8ce7f 847cab306e9e168baaff771a485d292a2586bff3a14705e82f6ffeca4a28ed7c Loading...

	duckduckgo.com/locale/en_US/duckduckgo14.js	505 B	2023-03-07	2023-12-20
Pretty URL duckduckgo.com/locale/en_US/duckduckgo14.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:21 Last Seen2023-12-20 09:30:16 Times Seen636 Hash 560fbe36973296f36b68610e5b564142 874f8244589d9dce37b364c4485491113429190c 790f083d45a4a716dbec546771888883690e58379526146fc429cf310df9a49f Loading...

	unknown	169 B	2023-04-11	2023-12-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:53:16 Last Seen2023-12-20 09:30:16 Times Seen314 Hash 0510c92e726f5678ff161f69b48765d7 f527c14fe5f61d70f89916097dadea14a90b1067 b784abc3341533fe3e782231f764cb4f6a783250b2ece584a927a3a73a668cda Loading...

	duckduckgo.com/d3216.js	449 kB	2023-05-27	2023-05-30
Pretty URL duckduckgo.com/d3216.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-27 00:49:58 Last Seen2023-05-30 15:47:01 Times Seen12 Hash 1924ec6cae60c76dfbc81553115341ff e8618c848da9c552c97686c92272b9ea1ce8b663 e4a3af609b0226fc2c7990854745ac5d2a66f6cd9377aca28105022ce9b9780c Loading...

	duckduckgo.com/h34.js	117 kB	2023-05-02	2023-06-01
Pretty URL duckduckgo.com/h34.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-02 23:26:05 Last Seen2023-06-01 18:33:20 Times Seen342 Hash a738b7f4345d6c092fe209875cf8c2c4 710521691975a35f38ce48e834933f1868ccb93e 5f578c57bb7b982aec82526fbdeb2283d2ccac2db9d26f8c1c5b57feb055451e Loading...

	duckduckgo.com/ti6.js	578 B	2023-05-11	2023-06-02
Pretty URL duckduckgo.com/ti6.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-11 19:45:40 Last Seen2023-06-02 08:37:44 Times Seen244 Hash a108344a26180fe4becd0de7ac0a5725 e3e3f5df596a0975669fd6e320f1eccb7ba1b1ab aa9cede06c4ab870ac6fb789d833cba92977d311264fb3d4e89491c5950cae3f Loading...

	duckduckgo.com/lib/l132.js	141 kB	2023-03-09	2023-07-11
Pretty URL duckduckgo.com/lib/l132.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 03:47:17 Last Seen2023-07-11 18:15:40 Times Seen620 Hash d7e519347aaf7f83bb64942cbfb24660 6532edd391fda596f94067b8f32e3405cb646a56 f2772a6d1bfbbc13342defc944208e6ad851044afb23ad591d04bf8d63442432 Loading...

	duckduckgo.com/util/u715.js	116 kB	2023-05-27	2023-06-02
Pretty URL duckduckgo.com/util/u715.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-27 00:49:58 Last Seen2023-06-02 08:37:44 Times Seen43 Hash 8aff055fefc9bde3d760a0584419fc53 59d560d7cdd1c53e7e9c9b871305fd6a3f178a05 34b392a3757c69a6b4172dee05d50d32baeddcb34320303a2530eb42f28e0e4d Loading...

	duckduckgo.com/	0 B	2023-03-07	2024-05-11
Pretty URL duckduckgo.com/ IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-11 00:04:20 Times Seen37530406 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	duckduckgo.com/p104.js	297 B	2023-03-07	2023-12-20
Pretty URL duckduckgo.com/p104.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:21 Last Seen2023-12-20 09:30:16 Times Seen562 Hash 81061861e28008b28cf6b4bbc3265dd2 5f167e01c02fb1bb2f15e1762dc294814d14aa6e 6c7334db0f46b3c0b430ee760bb0ceedbfdae65522a5f1d30c9fcd447b5066e6 Loading...

	duckduckgo.com/tl7.js	103 B	2023-03-07	2023-07-11
Pretty URL duckduckgo.com/tl7.js IP 40.114.177.156 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:21 Last Seen2023-07-11 18:15:40 Times Seen620 Hash 8952029fa2c7ccb186758f6d7984f165 de37058a8a7e56224e5520a25e2f57e222e280e3 1bc65f87ba8c4e94de14d0d24defaac11f59babaa643485910a5e548e91c0338 Loading...

HTTP Transactions (27)

	URL	IP	Response	Size
	lwbqjztyi.operationglad.cc/	194.50.153.66		0 B
URL User Request GET lwbqjztyi.operationglad.cc/ IP 194.50.153.66:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: lwbqjztyi.operationglad.cc User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 302 Found Date: Tue, 30 May 2023 13:46:35 GMT Server: Apache/2.4.38 (Debian) Access-Control-Allow-Origin: * Location: https://duckduckgo.com Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8`

	duckduckgo.com/s2159.css	40.114.177.156	200 OK	37 kB
URL GET HTTP/2 duckduckgo.com/s2159.css IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 37 kB (36736 bytes) Hash e74354895cf5d8972c74aaac2d5fa887 32493c376abbdff268ab4918a6212c5f4160886a 2f53c36cbab9a8fe6e094bb7486459ee8d1650dbbf6b6b4ea4ced9053054fbd3 HTTP Headers `GET /s2159.css HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: text/css content-length: 36736 last-modified: Fri, 26 May 2023 17:20:35 GMT etag: "6470ea63-8f80" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/o2159.css	40.114.177.156	200 OK	7.5 kB
URL GET HTTP/2 duckduckgo.com/o2159.css IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (44252) Size 7.5 kB (7454 bytes) Hash 8105f0653747893606a5246482524444 0ed353cc448fe6c82a59bff7a6ab7bb49d0636af 277fe70a97d918ea67559130af1c4d42f0cf54ae0c423c27ff59d79b3bff0af7 HTTP Headers `GET /o2159.css HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: text/css content-length: 7454 last-modified: Fri, 26 May 2023 17:20:35 GMT etag: "6470ea63-1d1e" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/tl7.js	40.114.177.156	200 OK	69 B
URL GET HTTP/2 duckduckgo.com/tl7.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with no line terminators Size 69 B (69 bytes) Hash 8952029fa2c7ccb186758f6d7984f165 de37058a8a7e56224e5520a25e2f57e222e280e3 1bc65f87ba8c4e94de14d0d24defaac11f59babaa643485910a5e548e91c0338 HTTP Headers `GET /tl7.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: application/x-javascript content-length: 69 last-modified: Thu, 11 May 2023 21:49:56 GMT etag: "645d6304-45" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/b210.js	40.114.177.156	200 OK	8.0 kB
URL GET HTTP/2 duckduckgo.com/b210.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (28929) Size 8.0 kB (7992 bytes) Hash c9336bfa1413dd810d6c2ce961e721ff ddf2ff076e8445323f94d86385c728df16d8ce7f 847cab306e9e168baaff771a485d292a2586bff3a14705e82f6ffeca4a28ed7c HTTP Headers `GET /b210.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: application/x-javascript content-length: 7992 last-modified: Fri, 26 May 2023 17:20:35 GMT etag: "6470ea63-1f38" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/lib/l132.js	40.114.177.156	200 OK	47 kB
URL GET HTTP/2 duckduckgo.com/lib/l132.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type HTML document, Unicode text, UTF-8 text, with very long lines (49018) Size 47 kB (47208 bytes) Hash d7e519347aaf7f83bb64942cbfb24660 6532edd391fda596f94067b8f32e3405cb646a56 f2772a6d1bfbbc13342defc944208e6ad851044afb23ad591d04bf8d63442432 HTTP Headers `GET /lib/l132.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: application/x-javascript content-length: 47208 last-modified: Thu, 27 Oct 2022 19:44:44 GMT etag: "635adfac-b868" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/locale/en_US/duckduckgo14.js	40.114.177.156	200 OK	282 B
URL GET HTTP/2 duckduckgo.com/locale/en_US/duckduckgo14.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (504) Size 282 B (282 bytes) Hash 560fbe36973296f36b68610e5b564142 874f8244589d9dce37b364c4485491113429190c 790f083d45a4a716dbec546771888883690e58379526146fc429cf310df9a49f HTTP Headers `GET /locale/en_US/duckduckgo14.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: application/x-javascript content-length: 282 last-modified: Fri, 26 Mar 2021 01:54:15 GMT etag: "605d3ec7-11a" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/util/u715.js	40.114.177.156	200 OK	35 kB
URL GET HTTP/2 duckduckgo.com/util/u715.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 35 kB (35123 bytes) Hash 8aff055fefc9bde3d760a0584419fc53 59d560d7cdd1c53e7e9c9b871305fd6a3f178a05 34b392a3757c69a6b4172dee05d50d32baeddcb34320303a2530eb42f28e0e4d HTTP Headers `GET /util/u715.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: application/x-javascript content-length: 35123 last-modified: Fri, 26 May 2023 17:20:35 GMT etag: "6470ea63-8933" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/d3216.js	40.114.177.156	200 OK	89 kB
URL GET HTTP/2 duckduckgo.com/d3216.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 89 kB (89058 bytes) Hash 1924ec6cae60c76dfbc81553115341ff e8618c848da9c552c97686c92272b9ea1ce8b663 e4a3af609b0226fc2c7990854745ac5d2a66f6cd9377aca28105022ce9b9780c HTTP Headers `GET /d3216.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: application/x-javascript content-length: 89058 last-modified: Fri, 26 May 2023 17:20:35 GMT etag: "6470ea63-15be2" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/h34.js	40.114.177.156	200 OK	36 kB
URL GET HTTP/2 duckduckgo.com/h34.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type Unicode text, UTF-8 text, with very long lines (65470), with no line terminators Size 36 kB (35774 bytes) Hash a738b7f4345d6c092fe209875cf8c2c4 710521691975a35f38ce48e834933f1868ccb93e 5f578c57bb7b982aec82526fbdeb2283d2ccac2db9d26f8c1c5b57feb055451e HTTP Headers `GET /h34.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: application/x-javascript content-length: 35774 last-modified: Tue, 02 May 2023 19:09:29 GMT etag: "64515fe9-8bbe" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/ti6.js	40.114.177.156	200 OK	326 B
URL GET HTTP/2 duckduckgo.com/ti6.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (578), with no line terminators Size 326 B (326 bytes) Hash a108344a26180fe4becd0de7ac0a5725 e3e3f5df596a0975669fd6e320f1eccb7ba1b1ab aa9cede06c4ab870ac6fb789d833cba92977d311264fb3d4e89491c5950cae3f HTTP Headers `GET /ti6.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: application/x-javascript content-length: 326 last-modified: Thu, 11 May 2023 17:36:20 GMT etag: "645d2794-146" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png	40.114.177.156	200 OK	3.6 kB
URL GET HTTP/2 duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type PNG image data, 152 x 152, 8-bit colormap, non-interlaced\012- data Size 3.6 kB (3576 bytes) Hash 25c443fd913d8172af12119396c494e3 543937df02caa63dc86aa31ee5743052d803268a f6e52a35e8854ebf14c9b8442302f6f7d5d0063f0215b7210edf4676d7fd7369 HTTP Headers `GET /assets/icons/meta/DDG-iOS-icon_152x152.png HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/png content-length: 3576 last-modified: Mon, 08 May 2023 17:25:03 GMT etag: "6459306f-df8" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000, public accept-ranges: bytes X-Firefox-Spdy: h2

	duckduckgo.com/assets/logo_homepage.normal.v109.svg	40.114.177.156	200 OK	4.5 kB
URL GET HTTP/2 duckduckgo.com/assets/logo_homepage.normal.v109.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1262) Size 4.5 kB (4534 bytes) Hash 1f2531a38c3d0cf6e4e5cdb471571416 5b1e911d0f890bd47e6d4fd8be6a79b9abb7c61c 1ca926804bfcac2346aeee3a67446e104f7bf9babcde7d6e36dd907d4cd6f6a3 HTTP Headers `GET /assets/logo_homepage.normal.v109.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/svg+xml last-modified: Mon, 08 May 2023 17:25:03 GMT vary: Accept-Encoding etag: W/"6459306f-2423" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2	40.114.177.156	200 OK	18 kB
URL GET HTTP/2 duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2 IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 18156, version 1.0\012- data Size 18 kB (18194 bytes) Hash 8a71415883fd28980f0c81d0cc6dd3b1 45446bf1f1c2d17e4a28b00ce81f9963f43dda9a 42c30588d9adaeee4cea28af0afda91efc7484528c6eea2ce7d591d927fd1a69 HTTP Headers `GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: text/html; charset=UTF-8 last-modified: Fri, 26 Mar 2021 01:54:14 GMT vary: Accept-Encoding etag: W/"605d3ec6-46ec" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/icons/cta/heart.svg	40.114.177.156	200 OK	1.7 kB
URL GET HTTP/2 duckduckgo.com/assets/icons/cta/heart.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1714), with no line terminators Size 1.7 kB (1688 bytes) Hash e39eb155ddbcf45860cf427366fb6fd6 36d8346cd7458cd5ca00cc6c5e59954837ad4e82 f6e2d538c5f3cec1f504007bbcbb18ce8bd6fcdd37efa1e9b7287897f30940c6 HTTP Headers `GET /assets/icons/cta/heart.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/svg+xml last-modified: Wed, 27 Apr 2022 18:58:23 GMT vary: Accept-Encoding etag: W/"6269924f-698" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/p104.js	40.114.177.156	200 OK	297 B
URL GET HTTP/2 duckduckgo.com/p104.js IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/post3.html Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type ASCII text, with very long lines (307), with no line terminators Size 297 B (297 bytes) Hash cc49545729c5b2075e74a7f0146164c0 1e9101a0cd4ed4fba0cf8c4164a07ca81b49163d c9518fc7fd1ffe70cc77bff2ec251e4f562881b26a6a36cef5a4f1c877be736f HTTP Headers `GET /p104.js HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: application/x-javascript content-length: 157 last-modified: Tue, 19 Oct 2021 20:21:23 GMT etag: "616f28c3-9d" content-encoding: br strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000 vary: Accept-Encoding, Accept-Encoding X-Firefox-Spdy: h2

	duckduckgo.com/font/ProximaNova-Reg-webfont.woff2	40.114.177.156	200 OK	18 kB
URL GET HTTP/2 duckduckgo.com/font/ProximaNova-Reg-webfont.woff2 IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 18114, version 17971.1\012- data Size 18 kB (18076 bytes) Hash 0ae89aa88b55600e388263c3e3affc7c a460ac3e68941a3d12697dd032298c2a714fcd9c 3e8e865d0d970f263e1bdbd285339722cab43f5916df07a4b8b70bd10ca01b01 HTTP Headers `GET /font/ProximaNova-Reg-webfont.woff2 HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: text/html; charset=UTF-8 last-modified: Fri, 26 Mar 2021 01:54:14 GMT vary: Accept-Encoding etag: W/"605d3ec6-469c" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/favicon.ico	40.114.177.156	200 OK	2.8 kB
URL GET HTTP/2 duckduckgo.com/favicon.ico IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel\012- data Size 2.8 kB (2799 bytes) Hash 0a362a1a0cf4cc6bc56d65db8049dd6f ebfd1b824377525e1588719e935bf4b06349cddf d994f806b1e4225b50be5ab681b2cecf845cc216a19a432d878cea3cb815bafd HTTP Headers `GET /favicon.ico HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/x-icon last-modified: Mon, 08 May 2023 17:25:03 GMT vary: Accept-Encoding etag: W/"6459306f-aef" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 31 May 2023 13:46:36 GMT cache-control: max-age=86400 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/add-to-browser/cppm/laptop.svg	40.114.177.156	200 OK	2.0 kB
URL GET HTTP/2 duckduckgo.com/assets/add-to-browser/cppm/laptop.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2033), with no line terminators Size 2.0 kB (1969 bytes) Hash 9b7fb9aa5571994734cab2ef9fbe382d 47429a5e3090cdaaf757611fbfd8692e0e45ea10 72a4d301802da1f3a6a402c737017b29543a2b44df6d7d9f6dfefa3dae72e5f0 HTTP Headers `GET /assets/add-to-browser/cppm/laptop.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/svg+xml last-modified: Fri, 26 Mar 2021 01:54:11 GMT vary: Accept-Encoding etag: W/"605d3ec3-7b1" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/post3.html	40.114.177.156	200 OK	141 B
URL GET HTTP/2 duckduckgo.com/post3.html IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Size 141 B (141 bytes) Hash 0d1468c5598fb8fb7f505ca4dd0f46e8 aee2a07f64eaa0d9feed83e745889f11422ecacd 4d8b0d33e4ded3fbe3ca28b354405f9eb7916d0108d1aecec4cf0e17dbf5d019 HTTP Headers `GET /post3.html HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: text/html; charset=UTF-8 last-modified: Tue, 19 Oct 2021 20:21:23 GMT vary: Accept-Encoding etag: W/"616f28c3-8d" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' https://search.duckduckgo.com ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 31 May 2023 13:46:36 GMT cache-control: max-age=86400 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/	40.114.177.156	200 OK	6.0 kB
URL User Request GET HTTP/2 duckduckgo.com/ IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6588), with no line terminators Size 6.0 kB (6031 bytes) Hash deacfc9c010721be04c6d6ee68f4103f 21ac7b270ea8df876a5c93579141c2f726085810 a086ac9a0a89a30c435f8e186afe9343c2e2a234faa1be49984ac1def2189718 HTTP Headers `GET / HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: text/html; charset=UTF-8 vary: Accept-Encoding etag: W/"6475eaf2-178f" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Tue, 30 May 2023 13:46:34 GMT cache-control: no-cache content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/font/ProximaNova-ExtraBold-webfont.woff2	40.114.177.156	200 OK	21 kB
URL GET HTTP/2 duckduckgo.com/font/ProximaNova-ExtraBold-webfont.woff2 IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type Web Open Font Format (Version 2), TrueType, length 21028, version 20930.-18688\012- data Size 21 kB (21028 bytes) Hash b391d3db5464628a81a7d70f44b739b1 862a7b68f0c321a03c530993b23b15a630db28ec 0b0854876245082b1178e7fd349c20448594498f2fbd09bd6cc2c4b726efbf23 HTTP Headers `GET /font/ProximaNova-ExtraBold-webfont.woff2 HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:35 GMT content-type: text/html; charset=UTF-8 last-modified: Fri, 26 Mar 2021 01:54:13 GMT vary: Accept-Encoding etag: W/"605d3ec5-5224" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:35 GMT cache-control: max-age=31536000 x-duckduckgo-locale: en_US content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/home/landing/icons/search.svg	40.114.177.156	200 OK	2.3 kB
URL GET HTTP/2 duckduckgo.com/assets/home/landing/icons/search.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2358), with no line terminators Size 2.3 kB (2288 bytes) Hash 518bca1b671ef50db850bde937eae994 7e9a331da72a8ca40e55806bdfee4ab166049fdd 64a66da50c5f4a550c8d9c42184349d1b4034d4e6e855cad83e6711eb8555bbf HTTP Headers `GET /assets/home/landing/icons/search.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/svg+xml last-modified: Fri, 26 Mar 2021 01:54:11 GMT vary: Accept-Encoding etag: W/"605d3ec3-8f0" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/add-to-browser/cppm/mobile.svg	40.114.177.156	200 OK	1.5 kB
URL GET HTTP/2 duckduckgo.com/assets/add-to-browser/cppm/mobile.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1552), with no line terminators Size 1.5 kB (1508 bytes) Hash 4f81a8be30bca7b6b6af0e72f574cc76 a74dd30f25723bfa1b92fb9d98e16ec70583dbd7 e04149514045a268e4069652abe79415b52d72701011ddcf80defcc8bd7c748d HTTP Headers `GET /assets/add-to-browser/cppm/mobile.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/svg+xml last-modified: Fri, 26 Mar 2021 01:54:11 GMT vary: Accept-Encoding etag: W/"605d3ec3-5e4" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	duckduckgo.com/assets/install_arrow.svg	40.114.177.156	200 OK	1.3 kB
URL GET HTTP/2 duckduckgo.com/assets/install_arrow.svg IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1330), with no line terminators Size 1.3 kB (1258 bytes) Hash b3a17721840b207da2c6781d0963e4d8 f56d2b014754affdb94d413a0707bc0f22dcaf00 fc3c1fe6340faffb603642825d455eda2625ad6ed55e7efca649ea535dce93d6 HTTP Headers `GET /assets/install_arrow.svg HTTP/1.1 Host: duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/svg+xml last-modified: Fri, 26 Mar 2021 01:54:11 GMT vary: Accept-Encoding etag: W/"605d3ec3-4ea" strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000, public content-encoding: br X-Firefox-Spdy: h2

	improving.duckduckgo.com/t/atbhi_firefox_v379-7?1441499&l=en-US&p=linux&ax=false&pre_va=_&pre_atbva=_	40.114.177.156	200 OK	43 B
URL POST HTTP/2 improving.duckduckgo.com/t/atbhi_firefox_v379-7?1441499&l=en-US&p=linux&ax=false&pre_va=_&pre_atbva=_ IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash ad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda HTTP Headers `POST /t/atbhi_firefox_v379-7?1441499&l=en-US&p=linux&ax=false&pre_va=_&pre_atbva=_ HTTP/1.1 Host: improving.duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ Origin: https://duckduckgo.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Content-Length: 0` HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/gif content-length: 43 last-modified: Mon, 28 Sep 1970 06:00:00 GMT strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 x-duckduckgo-moreinfo: See https://help.duckduckgo.com/duckduckgo-help-pages/privacy/atb/ expires: Tue, 30 May 2023 13:46:35 GMT cache-control: no-cache x-duckduckgo-locale: en_US X-Firefox-Spdy: h2

	improving.duckduckgo.com/t/hi?2046006&b=firefox&atbi=true&ei=true&i=false&d=d&l=en-US&p=linux&pre_atb=v379-7&ax=false&ak=false&pre_va=_&pre_atbva=_	40.114.177.156	200 OK	43 B
URL POST HTTP/2 improving.duckduckgo.com/t/hi?2046006&b=firefox&atbi=true&ei=true&i=false&d=d&l=en-US&p=linux&pre_atb=v379-7&ax=false&ak=false&pre_va=_&pre_atbva=_ IP 40.114.177.156:443 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Requested by https://duckduckgo.com/ Certificate IssuerDigiCert Inc Subject.duckduckgo.com Fingerprint33:B1:D3:E2:07:1C:32:53:7B:06:2C:6B:E0:80:29:EF:AD:E7:87:C5 ValidityThu, 20 Oct 2022 00:00:00 GMT - Mon, 20 Nov 2023 23:59:59 GMT File type GIF image data, version 89a, 1 x 1\012- data Size 43 B (43 bytes) Hash 325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b HTTP Headers POST /t/hi?2046006&b=firefox&atbi=true&ei=true&i=false&d=d&l=en-US&p=linux&pre_atb=v379-7&ax=false&ak=false&pre_va=_&pre_atbva=_ HTTP/1.1 Host: improving.duckduckgo.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: /* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://duckduckgo.com/ Origin: https://duckduckgo.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Content-Length: 0 HTTP/2 200 OK server: nginx date: Tue, 30 May 2023 13:46:36 GMT content-type: image/gif strict-transport-security: max-age=31536000 permissions-policy: interest-cohort=() content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; manifest-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; media-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; script-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; img-src data: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; style-src https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-src blob: https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; form-action https://duckduckgo.com https://.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ ; frame-ancestors 'self' ; base-uri 'self' ; block-all-mixed-content ; x-frame-options: SAMEORIGIN x-xss-protection: 1;mode=block x-content-type-options: nosniff referrer-policy: origin expect-ct: max-age=0 expires: Wed, 29 May 2024 13:46:36 GMT cache-control: max-age=31536000 x-duckduckgo-locale: en_US X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL