blackbasta | 1806b7cc24522509cab563bea8d1dc6c9c992c9d5c575836de3f363a7b10a8cc

Analysis

max time kernel
239s
max time network
377s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241211-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
21/12/2024, 14:48 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b.zip
Size

446KB
MD5

9cefa111452fd3674d0d7e3e24ea076b
SHA1

c185f75dd1285e35ff59b2003ef855382d6a850f
SHA256

1806b7cc24522509cab563bea8d1dc6c9c992c9d5c575836de3f363a7b10a8cc
SHA512

b01413da6c974821b1365a264650f5daf6a6bddbf311df33c20b60fb654e6a33a070587edaa3e3f89d63ffaa14aa4ddb4b6c05ff8d2966df6561f7e4fef685ea
SSDEEP

12288:soutuJQIn872o78fwwHqo5C8nDDCLu/ou7I0ngv0q:shsJQo87QfUo5CkDOLr8bBq

Score

10^/10

blackbasta phishing ransomware

Malware Config

Extracted

Path

C:\Program Files (x86)\instructions_read_me.txt

Family

blackbasta

Ransom Note

ATTENTION! Your network has been breached and all data was encrypted. Please contact us at: https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion/ Login ID: 3dd718a3-db04-485f-b882-250349c8a4de *!* To access .onion websites download and install Tor Browser at: https://www.torproject.org/ (Tor Browser is not related to us) *!* To restore all your PCs and get your network working again, follow these instructions: - Any attempts to modify, decrypt or rename the files will lead to its fatal corruption. It doesn't matter, who are trying to do this, either it will be your IT guys or a recovery agency. Please follow these simple rules to avoid data corruption: - Do not modify, rename or delete files. Any attempts to modify, decrypt or rename the files will lead to its fatal corruption. - Do not hire a recovery company. They can't decrypt without the key. They also don't care about your business. They believe that they are good negotiators, but it is not. They usually fail. So speak for yourself. Waiting you in a chat.

URLs

https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion/

Signatures

Black Basta
A ransomware family targeting Windows and Linux ESXi first seen in February 2022.
ransomware blackbasta
Blackbasta family
blackbasta
Renames multiple (210) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
A potential corporate email address has been identified in the URL: burn@2x.be0bd36d.png
phishing
A potential corporate email address has been identified in the URL: dark-mode@2x.3e150d01.png
phishing
A potential corporate email address has been identified in the URL: data-for-sale@2x.png
phishing
A potential corporate email address has been identified in the URL: flame@2x.40e1cfa0.png
phishing
A potential corporate email address has been identified in the URL: night@2x.4ca79636.png
phishing
A potential corporate email address has been identified in the URL: widget-big@2x.a260ccf6.png
phishing
A potential corporate email address has been identified in the URL: widget-small@2x.07c865df.png
phishing

Loads dropped DLL 5 IoCs

pid	Process
4904	rundll32.exe
4688	rundll32.exe
1980	rundll32.exe
4368	rundll32.exe
1052	rundll32.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Mozilla Firefox\omni.ja	rundll32.exe
File created	C:\Program Files\Windows NT\instructions_read_me.txt	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ko.txt	rundll32.exe
File opened for modification	C:\Program Files\Internet Explorer\iexplore.exe	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\7z.sfx	rundll32.exe
File opened for modification	C:\Program Files\Internet Explorer\IEShims.dll	rundll32.exe
File opened for modification	C:\Program Files\Mozilla Firefox\precomplete	rundll32.exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\sqmapi.dll	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ar.txt	rundll32.exe
File opened for modification	C:\Program Files\Internet Explorer\de-DE\iexplore.exe.mui	rundll32.exe
File created	C:\Program Files\Internet Explorer\it-IT\instructions_read_me.txt	rundll32.exe
File opened for modification	C:\Program Files\UpdateEnter.xlsm	rundll32.exe
File opened for modification	C:\Program Files\Java\jre-1.8\COPYRIGHT	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\7z.exe	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	rundll32.exe
File opened for modification	C:\Program Files\Mozilla Firefox\nssckbi.dll	rundll32.exe
File opened for modification	C:\Program Files\Windows Defender Advanced Threat Protection\SenseNdr.exe	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\br.txt	rundll32.exe
File opened for modification	C:\Program Files\Common Files\System\wab32.dll	rundll32.exe
File opened for modification	C:\Program Files\UndoSave.wmv	rundll32.exe
File opened for modification	C:\Program Files\Microsoft Office\ThinAppXManifest.xml	rundll32.exe
File opened for modification	C:\Program Files\Windows Defender\AMMonitoringProvider.dll	rundll32.exe
File opened for modification	C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.dll	rundll32.exe
File opened for modification	C:\Program Files\Windows Defender Advanced Threat Protection\SenseImdsCollector.exe	rundll32.exe
File opened for modification	C:\Program Files\Windows Media Player\wmpnscfg.exe	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\zh-cn.txt	rundll32.exe
File opened for modification	C:\Program Files\dotnet\swidtag\Microsoft Windows Desktop Runtime - 7.0.16 (x64).swidtag	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\7-zip32.dll	rundll32.exe
File opened for modification	C:\Program Files\Windows Defender\MsMpEng.exe	rundll32.exe
File opened for modification	C:\Program Files\dotnet\swidtag\Microsoft Windows Desktop Runtime - 6.0.27 (x64).swidtag	rundll32.exe
File opened for modification	C:\Program Files\Internet Explorer\es-ES\iexplore.exe.mui	rundll32.exe
File created	C:\Program Files\Microsoft Office 15\instructions_read_me.txt	rundll32.exe
File created	C:\Program Files\Windows Defender Advanced Threat Protection\instructions_read_me.txt	rundll32.exe
File opened for modification	C:\Program Files (x86)\Windows Mail\wabmig.exe	rundll32.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\wmlaunch.exe	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\lij.txt	rundll32.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\README.html	rundll32.exe
File opened for modification	C:\Program Files\Internet Explorer\ExtExport.exe	rundll32.exe
File opened for modification	C:\Program Files\Mozilla Firefox\xul.dll	rundll32.exe
File opened for modification	C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe	rundll32.exe
File opened for modification	C:\Program Files\Windows Media Player\mpvis.DLL	rundll32.exe
File created	C:\Program Files\Common Files\DESIGNER\instructions_read_me.txt	rundll32.exe
File opened for modification	C:\Program Files\SkipProtect.temp	rundll32.exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\ieinstal.exe	rundll32.exe
File opened for modification	C:\Program Files (x86)\Windows Defender\MpAsDesc.dll	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ro.txt	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\sa.txt	rundll32.exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\iexplore.exe	rundll32.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\wmprph.exe	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\hu.txt	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\uz-cyrl.txt	rundll32.exe
File opened for modification	C:\Program Files\dotnet\swidtag\Microsoft Windows Desktop Runtime - 8.0.2 (x64).swidtag	rundll32.exe
File opened for modification	C:\Program Files\Internet Explorer\fr-FR\ieinstal.exe.mui	rundll32.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jvisualvm.txt	rundll32.exe
File opened for modification	C:\Program Files\ResetJoin.txt	rundll32.exe
File opened for modification	C:\Program Files\DisconnectLimit.wav	rundll32.exe
File opened for modification	C:\Program Files\InstallWait.html	rundll32.exe
File opened for modification	C:\Program Files\Windows Media Player\wmpshare.exe	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\io.txt	rundll32.exe
File opened for modification	C:\Program Files\7-Zip\Lang\kaa.txt	rundll32.exe
File opened for modification	C:\Program Files\Internet Explorer\uk-UA\ieinstal.exe.mui	rundll32.exe
File opened for modification	C:\Program Files\DenyTest.3g2	rundll32.exe
File created	C:\Program Files (x86)\WindowsPowerShell\instructions_read_me.txt	rundll32.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\wmplayer.exe	rundll32.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	7zFM.exe
Key created	\REGISTRY\USER\S-1-5-21-2934520114-3201407646-466687995-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.7wdojib58\DefaultIcon	rundll32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.7wdojib58	rundll32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.7wdojib58\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\fkdjsadasd.ico"	rundll32.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
5132	NOTEPAD.EXE

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4260	7zFM.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeRestorePrivilege	4260	7zFM.exe
Token: 35	4260	7zFM.exe
Token: SeSecurityPrivilege	4260	7zFM.exe
Token: SeDebugPrivilege	4888	firefox.exe
Token: SeDebugPrivilege	4888	firefox.exe

Suspicious use of FindShellTrayWindow 23 IoCs

pid	Process
4260	7zFM.exe
4260	7zFM.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe

Suspicious use of SendNotifyMessage 20 IoCs

pid	Process
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe
4888	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 4904	1996	cmd.exe	97
PID 1996 wrote to memory of 4904	1996	cmd.exe	97
PID 1996 wrote to memory of 4688	1996	cmd.exe	98
PID 1996 wrote to memory of 4688	1996	cmd.exe	98
PID 1996 wrote to memory of 1980	1996	cmd.exe	99
PID 1996 wrote to memory of 1980	1996	cmd.exe	99
PID 1996 wrote to memory of 4368	1996	cmd.exe	100
PID 1996 wrote to memory of 4368	1996	cmd.exe	100
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 1596 wrote to memory of 4888	1596	firefox.exe	103
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104
PID 4888 wrote to memory of 1040	4888	firefox.exe	104

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\b.zip"
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4260

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2808

C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Windows\system32\rundll32.exe
  rundll32 basta.dll,31
  2⤵
  - Loads dropped DLL
  PID:4904
- C:\Windows\system32\rundll32.exe
  rundll32 basta.dll,entry
  2⤵
  - Loads dropped DLL
  PID:4688
- C:\Windows\system32\rundll32.exe
  rundll32 basta.dll,entry
  2⤵
  - Loads dropped DLL
  PID:1980
- C:\Windows\system32\rundll32.exe
  rundll32 basta.dll,main
  2⤵
  - Loads dropped DLL
  PID:4368
- C:\Windows\system32\rundll32.exe
  rundll32 basta.dll,#1
  2⤵
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Modifies registry class
  PID:1052
- C:\Windows\system32\rundll32.exe
  rundll32 basta.dll,#2
  2⤵
  PID:3196
- C:\Windows\system32\rundll32.exe
  rundll32 basta.dll,#3
  2⤵
  PID:6128

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1596
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4888
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2020 -parentBuildID 20240401114208 -prefsHandle 1940 -prefMapHandle 1948 -prefsLen 23839 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ad850851-9de6-4e26-bd25-af0ae2d6989b} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" gpu
    3⤵
    PID:1040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2416 -parentBuildID 20240401114208 -prefsHandle 2404 -prefMapHandle 2400 -prefsLen 23717 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bf26cc4-8e18-44a5-82c8-a89813f36af8} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" socket
    3⤵
    PID:1400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3020 -childID 1 -isForBrowser -prefsHandle 2924 -prefMapHandle 3160 -prefsLen 22652 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bbce8c75-085a-4587-a4f5-c79bb915fe40} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
    3⤵
    PID:4788
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3692 -childID 2 -isForBrowser -prefsHandle 3684 -prefMapHandle 3668 -prefsLen 29091 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0661a20c-4041-4909-878e-c6f7346133a7} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
    3⤵
    PID:3220
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4476 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4512 -prefMapHandle 4508 -prefsLen 29091 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dde1eb10-e440-4ec9-95b2-45cc3df11de9} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" utility
    3⤵
    - Checks processor information in registry
    PID:1144
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5216 -childID 3 -isForBrowser -prefsHandle 5340 -prefMapHandle 3672 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc0aa74d-1c63-4488-86bc-993b0800f6dd} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
    3⤵
    PID:908
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5476 -childID 4 -isForBrowser -prefsHandle 5484 -prefMapHandle 5496 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f1b0b64d-9c03-4487-aa0b-f7ab849f7181} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
    3⤵
    PID:2172
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5688 -childID 5 -isForBrowser -prefsHandle 5764 -prefMapHandle 5760 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f435a70-2575-4520-9362-7dd31bacea8e} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
    3⤵
    PID:4284
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5176 -childID 6 -isForBrowser -prefsHandle 6260 -prefMapHandle 6276 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {33d26fda-6274-4da9-aa11-95a3686d529d} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
    3⤵
    PID:3976
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5408 -childID 7 -isForBrowser -prefsHandle 6232 -prefMapHandle 4724 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {039d4bd8-b2e8-4326-9547-5f461b2450bd} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
    3⤵
    PID:4376
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6724 -childID 8 -isForBrowser -prefsHandle 3900 -prefMapHandle 6668 -prefsLen 27998 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {29eb74f7-0cdb-4353-80ed-9ed21effd388} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
    3⤵
    PID:1840

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\instructions_read_me.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5132

Network

DNS

28.118.140.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

28.118.140.52.in-addr.arpa

IN PTR

Response
DNS

71.159.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

71.159.190.20.in-addr.arpa

IN PTR

Response
DNS

97.17.167.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

97.17.167.52.in-addr.arpa

IN PTR

Response
DNS

149.220.183.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

149.220.183.52.in-addr.arpa

IN PTR

Response
DNS

149.220.183.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

149.220.183.52.in-addr.arpa

IN PTR
DNS

checkappexec.microsoft.com

Remote address:

8.8.8.8:53

Request

checkappexec.microsoft.com

IN A

Response

checkappexec.microsoft.com

IN CNAME

prod-atm-wds-apprep.trafficmanager.net

prod-atm-wds-apprep.trafficmanager.net

IN CNAME

prod-agic-us-3.uksouth.cloudapp.azure.com

prod-agic-us-3.uksouth.cloudapp.azure.com

IN A

172.165.61.93
POST

https://checkappexec.microsoft.com/windows/shell/actions

Remote address:

172.165.61.93:443

Request

POST /windows/shell/actions HTTP/2.0
host: checkappexec.microsoft.com
accept-encoding: gzip, deflate
user-agent: SmartScreen/2814751014982010
authorization: SmartScreenHash eyJhdXRoSWQiOiJhZGZmZjVhZC1lZjllLTQzYTYtYjFhMy0yYWQ0MjY3YWVlZDUiLCJoYXNoIjoiNXg5b1VuaHUrdXc9Iiwia2V5IjoiOXYzV0FKb3dUSjl5NjdoWmh1cVU2dz09In0=
content-length: 1182
content-type: application/json; charset=utf-8
cache-control: no-cache

Response

HTTP/2.0 200

date: Sat, 21 Dec 2024 14:49:28 GMT
content-type: application/json; charset=utf-8
content-length: 183
server: Kestrel
cache-control: max-age=0, private
request-context: appId=cid-v1:7f05e9f0-1fe6-401c-8ae7-2478e40e2f1e
DNS

93.61.165.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

93.61.165.172.in-addr.arpa

IN PTR

Response
DNS

212.20.149.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

212.20.149.52.in-addr.arpa

IN PTR

Response
DNS

15.164.165.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

15.164.165.52.in-addr.arpa

IN PTR

Response
DNS

83.210.23.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

83.210.23.2.in-addr.arpa

IN PTR

Response

83.210.23.2.in-addr.arpa

IN PTR

a2-23-210-83deploystaticakamaitechnologiescom
DNS

14.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.227.111.52.in-addr.arpa

IN PTR

Response
DNS

www.mozilla.org

firefox.exe

Remote address:

8.8.8.8:53

Request

www.mozilla.org

IN A

Response

www.mozilla.org

IN CNAME

www-mozilla.fastly-edge.com

www-mozilla.fastly-edge.com

IN A

151.101.3.19

www-mozilla.fastly-edge.com

IN A

151.101.67.19

www-mozilla.fastly-edge.com

IN A

151.101.131.19

www-mozilla.fastly-edge.com

IN A

151.101.195.19
GET

https://www.mozilla.org/firefox/welcome/21/

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /firefox/welcome/21/ HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 302

server: granian
content-type: text/html; charset=utf-8
location: /en-US/firefox/welcome/21/
x-backend-server: bedrock-755f64b867-bjbrg.gcp-us-west1
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cross-origin-opener-policy: same-origin
via: 1.1 google, 1.1 varnish
accept-ranges: bytes
age: 1268
date: Sat, 21 Dec 2024 14:52:19 GMT
x-served-by: cache-lon420121-LON
x-cache: HIT
x-cache-hits: 0
x-timer: S1734792739.454507,VS0,VE1
vary: Accept-Language
content-length: 0
GET

https://www.mozilla.org/en-US/firefox/welcome/21/

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /en-US/firefox/welcome/21/ HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: cross-site
te: trailers

Response

HTTP/2.0 200

server: granian
content-type: text/html; charset=utf-8
x-frame-options: DENY
content-security-policy: frame-src www.youtube.com *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com accounts.firefox.com js.stripe.com 'self' *.mozilla.org; default-src 'self' *.mozilla.com *.mozilla.net *.mozilla.org; font-src 'self' *.mozilla.com *.mozilla.net *.mozilla.org; img-src data: *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com images.ctfassets.net 'self' *.mozilla.org; script-src www.youtube.com 'unsafe-inline' *.mozilla.com www.googletagmanager.com s.ytimg.com *.mozilla.net www.google-analytics.com tagmanager.google.com 'unsafe-eval' js.stripe.com 'self' *.mozilla.org; connect-src https://accounts.firefox.com/ *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com o1069899.sentry.io region1.google-analytics.com stage.cjms.nonprod.cloudops.mozgcp.net o1069899.ingest.sentry.io cjms.services.mozilla.com 'self' sentry.prod.mozaws.net *.mozilla.org; child-src www.youtube.com *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com accounts.firefox.com js.stripe.com 'self' *.mozilla.org; style-src 'unsafe-inline' *.mozilla.com *.mozilla.net 'self' *.mozilla.org
content-security-policy-report-only: frame-src www.youtube.com *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com accounts.firefox.com js.stripe.com 'self' *.mozilla.org; default-src 'self'; font-src 'self' *.mozilla.com *.mozilla.net *.mozilla.org; base-uri 'none'; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net; img-src data: *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com images.ctfassets.net 'self' *.mozilla.org; object-src 'none'; script-src www.youtube.com 'unsafe-inline' *.mozilla.com www.googletagmanager.com s.ytimg.com *.mozilla.net www.google-analytics.com tagmanager.google.com 'unsafe-eval' js.stripe.com 'self' *.mozilla.org; upgrade-insecure-requests; connect-src https://accounts.firefox.com/ *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com o1069899.sentry.io region1.google-analytics.com stage.cjms.nonprod.cloudops.mozgcp.net o1069899.ingest.sentry.io cjms.services.mozilla.com 'self' sentry.prod.mozaws.net *.mozilla.org; child-src www.youtube.com *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com accounts.firefox.com js.stripe.com 'self' *.mozilla.org; frame-ancestors 'none'; style-src *.mozilla.com *.mozilla.net 'self' *.mozilla.org
cache-control: max-age=600
expires: Thu, 19 Dec 2024 02:14:00 GMT
x-clacks-overhead: GNU Terry Pratchett
content-language: en-US
etag: "2a224df9a7bd952fdb0f670630b437aa"
x-backend-server: bedrock-755f64b867-wmzh2.gcp-us-west1
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
cross-origin-opener-policy: same-origin
via: 1.1 google, 1.1 varnish
content-encoding: br
accept-ranges: bytes
age: 0
date: Sat, 21 Dec 2024 14:52:19 GMT
x-served-by: cache-lon420121-LON
x-cache: HIT
x-cache-hits: 0
x-timer: S1734792739.494439,VS0,VE174
vary: Accept-Encoding
content-length: 6142
GET

https://www.mozilla.org/media/js/site.b49d941e3374.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/site.b49d941e3374.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-guploader-uploadid: AFiumC5qoyRV_xqs97BFXIYWjzHphlRpOG8ncCAfRstOOChYTxq7vPO_G6TVeSO_ReoypQZBzvXAPj4
x-goog-generation: 1733837360340772
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5895
x-goog-meta-goog-reserved-file-mtime: 1733837258
x-goog-hash: crc32c=60FKGQ==
x-goog-hash: md5=tJ2UHjN0uFrhrv9GUPRd3Q==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
server: UploadServer
expires: Sat, 21 Dec 2024 13:56:53 GMT
last-modified: Tue, 17 Dec 2024 23:38:58 GMT
etag: "b49d941e3374b85ae1aeff4650f45ddd"
content-type: text/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 6926
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400094-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 16, 20
x-timer: S1734792740.862416,VS0,VE0
vary: Accept-Encoding
content-length: 2051
GET

https://www.mozilla.org/media/css/m24-root.77a146bcaf17.css

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/css/m24-root.77a146bcaf17.css HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-guploader-uploadid: AFiumC4hCyneTXxzsCvuRIDOspIO88n9Z7T88PZLvpBFXk2wwtuHZ4xRTEpLkkhaNri5F1GuZ-iehos
x-goog-generation: 1734478690567995
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4280
x-goog-meta-goog-reserved-file-mtime: 1734478658
x-goog-hash: crc32c=Pvc2kw==
x-goog-hash: md5=d6FGvK8Xo2qZvNlpmVH0Tg==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
server: UploadServer
expires: Sat, 21 Dec 2024 13:44:38 GMT
last-modified: Tue, 17 Dec 2024 23:38:10 GMT
etag: "77a146bcaf17a36a99bcd9699951f44e"
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 7661
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300041-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 23, 10
x-timer: S1734792740.862848,VS0,VE0
vary: Accept-Encoding
content-length: 820
GET

https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/css/m24-navigation-and-footer.bbc50722799f.css HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-guploader-uploadid: AFiumC47kuB193_U7mhGzQ5-_crhGowAw9c9aVNCe8oixD4Ss945qGMXttde547mtY77Wjv_cYhusHI
x-goog-generation: 1734478690574500
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 35274
x-goog-meta-goog-reserved-file-mtime: 1734478658
x-goog-hash: crc32c=zM+XbQ==
x-goog-hash: md5=u8UHInmfUyVFL0oR/3eg0g==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
server: UploadServer
expires: Sat, 21 Dec 2024 14:10:07 GMT
last-modified: Tue, 17 Dec 2024 23:38:10 GMT
etag: "bbc50722799f5325452f4a11ff77a0d2"
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 6131
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300042-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 4, 21
x-timer: S1734792740.863692,VS0,VE0
vary: Accept-Encoding
content-length: 4851
GET

https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/css/protocol-firefox.8fb2966e28e1.css HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-guploader-uploadid: AFiumC5qRdSRInC3kZ4bwpc0_Ks77O1ApPjVJzlLnIVSvve5qVAq3q30E2xQrvusZGlIH8ADqxj8Ric
expires: Mon, 16 Dec 2024 19:59:45 GMT
last-modified: Mon, 16 Dec 2024 18:54:06 GMT
etag: "8fb2966e28e1e1be55addc8b0a86055c"
x-goog-generation: 1734375246688112
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 90780
x-goog-meta-goog-reserved-file-mtime: 1734375203
content-type: text/css
x-goog-hash: crc32c=7Z6Dhg==
x-goog-hash: md5=j7KWbijh4b5VrdyLCoYFXA==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 330755
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400110-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 7, 143
x-timer: S1734792740.864550,VS0,VE0
content-length: 90780
GET

https://www.mozilla.org/media/css/protocol-picto.cfee40a3cd36.css

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/css/protocol-picto.cfee40a3cd36.css HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:42 GMT
last-modified: Thu, 07 Nov 2024 23:32:30 GMT
etag: "cfee40a3cd36f03547764c88fa2ca092"
x-goog-generation: 1731022350221562
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4030
x-goog-meta-goog-reserved-file-mtime: 1731022303
content-type: text/css
x-goog-hash: crc32c=2139kw==
x-goog-hash: md5=z+5Ao8028DVHdkyI+iygkg==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY1a6HATCB1id4EmkIAzLaTlB_dL5_KrUYlJacvKjRS527yAM49ezT5XpuNWI4mZq8WRJzj1dogapA
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 279619
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300050-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 58, 24
x-timer: S1734792740.865015,VS0,VE0
content-length: 4030
GET

https://www.mozilla.org/media/css/firefox_welcome_page19_to_24.3bad9ee2f487.css

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/css/firefox_welcome_page19_to_24.3bad9ee2f487.css HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-goog-generation: 1730716141244462
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5172
x-goog-meta-goog-reserved-file-mtime: 1730716110
x-goog-hash: crc32c=DLs7pA==
x-goog-hash: md5=O62e4vSH6qlnotDzyeiM0w==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY25MoVBNiiLsRJHX4d6tWWol8wqxqLBXZyfB3epEFVMA6eg3BJvGTvzR-U6iS3m7_Ing8A
server: UploadServer
expires: Fri, 08 Nov 2024 17:05:50 GMT
last-modified: Thu, 07 Nov 2024 23:32:26 GMT
etag: "3bad9ee2f487eaa967a2d0f3c9e88cd3"
content-type: text/css
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 1336427
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400024-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 5107, 15
x-timer: S1734792740.865124,VS0,VE0
content-length: 5172
GET

https://www.mozilla.org/media/js/gtm-snippet.b5b7c885f8fa.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/gtm-snippet.b5b7c885f8fa.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-guploader-uploadid: AFiumC4LuRbUhgBrPBmSTj9OiIlGu5v3Ypidrhz6b-ggkZN_xuXEJQfG4JS10mxmSn4tPtzM2yi1nkY
x-goog-generation: 1734478736544013
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1377
x-goog-meta-goog-reserved-file-mtime: 1734478658
x-goog-hash: crc32c=UD4tow==
x-goog-hash: md5=tbfIhfj6+ouFjjEJUgeQAw==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
server: UploadServer
expires: Sat, 21 Dec 2024 14:08:46 GMT
last-modified: Tue, 17 Dec 2024 23:38:56 GMT
etag: "b5b7c885f8fafa8b858e310952079003"
content-type: text/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 6213
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400091-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 14, 16
x-timer: S1734792740.866568,VS0,VE0
vary: Accept-Encoding
content-length: 571
GET

https://www.mozilla.org/media/img/logos/firefox/logo-word-hor.f3b18871b657.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/img/logos/firefox/logo-word-hor.f3b18871b657.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-goog-generation: 1730911320232278
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 12219
x-goog-meta-goog-reserved-file-mtime: 1730911259
x-goog-hash: crc32c=u+doZg==
x-goog-hash: md5=87GIcbZX6/sbDrvyY/zVKQ==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY0MrHdUSp7IJWEt6j612Tg6dMEg_N6ulFAqFabaQl4YUCN6frNAE5V0Y7KONjThF0JXu8M
server: UploadServer
expires: Fri, 08 Nov 2024 17:45:42 GMT
last-modified: Thu, 07 Nov 2024 23:33:17 GMT
etag: "f3b18871b657ebfb1b0ebbf263fcd529"
content-type: image/svg+xml
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 899995
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400093-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 63614, 48
x-timer: S1734792740.867039,VS0,VE0
content-length: 12219
GET

https://www.mozilla.org/media/js/sentry.1fd5e9589639.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/sentry.1fd5e9589639.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Wed, 04 Dec 2024 21:20:42 GMT
last-modified: Wed, 04 Dec 2024 20:16:25 GMT
etag: "1fd5e95896399cf13ea22127d915f298"
x-goog-generation: 1733343385494266
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 58612
x-goog-meta-goog-reserved-file-mtime: 1733343289
content-type: text/javascript
x-goog-hash: crc32c=7aRTvg==
x-goog-hash: md5=H9XpWJY5nPE+oiEn2RXymA==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AFiumC5mj2y1RcYfUdYrqSsh_P3D1aLeGr8zXjgR87Kf_jovl6EbKGU2Wxnrymx4VtF09U8rCVqc17Dlag
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 299346
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400072-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 51, 584
x-timer: S1734792740.867312,VS0,VE0
content-length: 58612
GET

https://www.mozilla.org/media/js/lib.7cb1e204ce21.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/lib.7cb1e204ce21.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-goog-generation: 1731022413282771
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 17305
x-goog-meta-goog-reserved-file-mtime: 1731022303
x-goog-hash: crc32c=lR7rmw==
x-goog-hash: md5=fLHiBM4hqPvrEUegp0jEig==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY1GzUFgtgzi76ZtdmIPk2bs_6mKjydQffAKcF1nAfEDZvrQ9tm33jYXZaaEfCwPXTU5vBg
server: UploadServer
expires: Fri, 08 Nov 2024 17:45:42 GMT
last-modified: Thu, 07 Nov 2024 23:33:33 GMT
etag: "7cb1e204ce21a8fbeb1147a0a748c48a"
content-type: text/javascript
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 1388807
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400118-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 5965, 575
x-timer: S1734792740.867473,VS0,VE0
content-length: 17305
GET

https://www.mozilla.org/media/js/fxa.6cacc544775b.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/fxa.6cacc544775b.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:39 GMT
last-modified: Thu, 07 Nov 2024 23:33:30 GMT
etag: "438fd3539700c54c0513d446b8124dbb"
x-goog-generation: 1731022410810439
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5325
x-goog-meta-goog-reserved-file-mtime: 1731022303
content-type: text/javascript
x-goog-hash: crc32c=B2n5vA==
x-goog-hash: md5=Q4/TU5cAxUwFE9RGuBJNuw==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY0h3u4r8HHY56ctBe8UdlRZ-OykMdejGVOlSSa1gqY2R5Sk96hPeTqMo3-KI3yN59RntNY
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 2109845
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300069-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 3079, 545
x-timer: S1734792740.897476,VS0,VE0
content-length: 5325
GET

https://www.mozilla.org/media/js/data.438fd3539700.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/data.438fd3539700.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:43 GMT
last-modified: Thu, 07 Nov 2024 23:33:32 GMT
etag: "6cacc544775b1336cda354ef7e018aeb"
x-goog-generation: 1731022412941844
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7221
x-goog-meta-goog-reserved-file-mtime: 1731022303
content-type: text/javascript
x-goog-hash: crc32c=Y7tP8A==
x-goog-hash: md5=bKzFRHdbEzbNo1TvfgGK6w==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY2oGYwqb4wFTWcbO6htjDFjd0B3wArr48IrvxPbW-qG15co5ZnYNahJNq2pCOfFFs33rdjX6rPZ_w
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 895866
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300093-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 76824, 558
x-timer: S1734792740.897377,VS0,VE0
content-length: 7221
GET

https://www.mozilla.org/media/js/m24-ui.daf79f0fefd7.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/m24-ui.daf79f0fefd7.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-guploader-uploadid: AFiumC46P8QHm_akq4GHb5PhA5zlJUfto4y_uoVOsEC1HHmuiK-osTIzjZh_7wFsxWw2GacSwgrBvxE
expires: Mon, 16 Dec 2024 19:59:45 GMT
last-modified: Mon, 16 Dec 2024 18:55:15 GMT
etag: "daf79f0fefd7be0f0f68aed173907bf5"
x-goog-generation: 1734375315265078
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 14624
x-goog-meta-goog-reserved-file-mtime: 1734375203
content-type: text/javascript
x-goog-hash: crc32c=biMa/Q==
x-goog-hash: md5=2vefD+/Xvg8PaK7Rc5B79Q==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 417155
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300084-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 11, 592
x-timer: S1734792740.921271,VS0,VE0
content-length: 14624
GET

https://www.mozilla.org/media/js/glean.f0ce2425d2c8.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/glean.f0ce2425d2c8.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:39 GMT
last-modified: Thu, 07 Nov 2024 23:33:33 GMT
etag: "f0ce2425d2c8ab50051d65653171bf84"
x-goog-generation: 1731022413170182
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 61358
x-goog-meta-goog-reserved-file-mtime: 1731022303
content-type: text/javascript
x-goog-hash: crc32c=maezaQ==
x-goog-hash: md5=8M4kJdLIq1AFHWVlMXG/hA==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY3H_MvT6ixHfOanL7jNjE6GoG5yO0Gb8meZXgq9d1P6JONSkwbwMsi2zzCCaMvaK2faepg
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 384852
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300041-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 13, 564
x-timer: S1734792740.935226,VS0,VE0
content-length: 61358
GET

https://www.mozilla.org/media/js/firefox_welcome_page19_to_24.87e13c35e608.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/firefox_welcome_page19_to_24.87e13c35e608.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:42 GMT
last-modified: Thu, 07 Nov 2024 23:33:32 GMT
etag: "87e13c35e608573c041d42795b4e2294"
x-goog-generation: 1731022412190558
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 265
x-goog-meta-goog-reserved-file-mtime: 1731022303
content-type: text/javascript
x-goog-hash: crc32c=A378Jg==
x-goog-hash: md5=h+E8NeYIVzwEHUJ5W04ilA==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY3RSHNi4y8xvIoYqWS-9bS99E5K7uhv18paMqN-R_8JQEXBN97i_9yrdmui9ae7UqZ_Ai3RSo9t0w
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 979491
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300096-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 62, 13
x-timer: S1734792740.941276,VS0,VE0
content-length: 265
GET

https://www.mozilla.org/media/js/consent-banner.f74bb4c07d16.js

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/js/consent-banner.f74bb4c07d16.js HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:39 GMT
last-modified: Thu, 07 Nov 2024 23:33:30 GMT
etag: "f74bb4c07d16eb6f0550a1c79647c1d0"
x-goog-generation: 1731022410661045
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5903
x-goog-meta-goog-reserved-file-mtime: 1731022303
content-type: text/javascript
x-goog-hash: crc32c=oq9ixQ==
x-goog-hash: md5=90u0wH0W628FUKHHlkfB0A==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY0_PNthlDkcfeABGk-i__Y3IX0oAjNmBRaMCxcoXZ3sWVLKo37ZrBSGCo2kMe3iGiwW8XE_bR37YA
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
content-encoding: br
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:19 GMT
age: 190121
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300103-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 44674, 484
x-timer: S1734792740.949575,VS0,VE0
vary: Accept-Encoding
content-length: 1927
GET

https://www.mozilla.org/media/protocol/fonts/Inter-Bold.0564381b22b2.woff2

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/fonts/Inter-Bold.0564381b22b2.woff2 HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: identity
referer: https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:39 GMT
last-modified: Thu, 07 Nov 2024 23:33:35 GMT
etag: "0564381b22b2c4760eb15bef0691993a"
x-goog-generation: 1731022415418380
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 95928
x-goog-meta-goog-reserved-file-mtime: 1731022301
content-type: font/woff2
x-goog-hash: crc32c=5fNudw==
x-goog-hash: md5=BWQ4GyKyxHYOsVvvBpGZOg==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY3ZLagCi4RuM-l3V6GLofYowzO_CeyiWu_HfbDtfleff39inysRHH5-_5J4F_EsQ0imuX8
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 261905
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300114-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 54313, 100
x-timer: S1734792740.072790,VS0,VE0
content-length: 95928
GET

https://www.mozilla.org/media/protocol/img/icons/social/x/white.7f50edd82090.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/img/icons/social/x/white.7f50edd82090.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-goog-generation: 1728650046912318
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 336
x-goog-meta-goog-reserved-file-mtime: 1728649928
x-goog-hash: crc32c=qQGVgQ==
x-goog-hash: md5=f1Dt2CCQvIdrG7PYQNBEsA==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AHmUCY3BCg5aWnH3NlA7QRGK9FjbPe1isLGXON5pYprJj0JEVG4MGksa7ooSO_GwQBRtdfulo5ifi2Zgdg
server: UploadServer
access-control-expose-headers: *
expires: Fri, 08 Nov 2024 17:40:17 GMT
last-modified: Thu, 07 Nov 2024 23:33:41 GMT
etag: "7f50edd82090bc876b1bb3d840d044b0"
content-type: image/svg+xml
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 917656
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400031-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 153198, 530
x-timer: S1734792740.238842,VS0,VE0
content-length: 336
GET

https://www.mozilla.org/media/protocol/img/icons/social/instagram/white.a7014a6150b3.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/img/icons/social/instagram/white.a7014a6150b3.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-goog-generation: 1731022421142397
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1509
x-goog-meta-goog-reserved-file-mtime: 1731022300
x-goog-hash: crc32c=NgPSCw==
x-goog-hash: md5=pwFKYVCz8VeyJWUKGpT4hQ==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY22E-rYtWr8qxHe_1uZNUBv0tRSHrcaYfuvcb53U1VbYO2x_r5IGrHZ338mANtc9gIlQIkc5vwkvg
server: UploadServer
expires: Fri, 08 Nov 2024 17:12:32 GMT
last-modified: Thu, 07 Nov 2024 23:33:41 GMT
etag: "a7014a6150b3f157b225650a1a94f885"
content-type: image/svg+xml
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 283507
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400031-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 22971, 525
x-timer: S1734792740.256888,VS0,VE0
content-length: 1509
GET

https://www.mozilla.org/media/protocol/img/icons/social/linkedin/white.cdc0e910cc1e.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/img/icons/social/linkedin/white.cdc0e910cc1e.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:40 GMT
last-modified: Thu, 07 Nov 2024 23:33:41 GMT
etag: "cdc0e910cc1e8f7529c50c8cbb448da0"
x-goog-generation: 1731022421470105
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 528
x-goog-meta-goog-reserved-file-mtime: 1731022300
content-type: image/svg+xml
x-goog-hash: crc32c=ssNfMA==
x-goog-hash: md5=zcDpEMwej3UpxQyMu0SNoA==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY16ZvPi4e90XWWU4gvPNOmUUx43gGx9eMkRwi7oVHINnLpqVhJmjljQASzam6Rp0IK9s_lBOIPqnw
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 397013
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300100-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 9, 532
x-timer: S1734792740.329438,VS0,VE0
content-length: 528
GET

https://www.mozilla.org/media/protocol/img/icons/social/tiktok/white.599403de7ac0.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/img/icons/social/tiktok/white.599403de7ac0.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-goog-generation: 1730305430258618
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 688
x-goog-meta-goog-reserved-file-mtime: 1730305348
x-goog-hash: crc32c=0/PXBQ==
x-goog-hash: md5=WZQD3nrA/OgqNXVzUHbxAg==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY2pKsM0QESnhVY07cg9hBo6zhRTS0BBEkzjWxcX0ObwC9MZc-9HEJfV6XzVDF07kw1pPok
server: UploadServer
expires: Mon, 04 Nov 2024 15:02:20 GMT
last-modified: Mon, 04 Nov 2024 10:29:47 GMT
etag: "599403de7ac0fce82a3575735076f102"
content-type: image/svg+xml
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 1474291
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400118-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 17, 531
x-timer: S1734792740.376175,VS0,VE0
content-length: 688
GET

https://www.mozilla.org/media/protocol/img/icons/social/spotify/white.aa5334e85bae.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/img/icons/social/spotify/white.aa5334e85bae.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:42 GMT
last-modified: Thu, 07 Nov 2024 23:33:41 GMT
etag: "aa5334e85baea7187c2e1d89f8dc90cc"
x-goog-generation: 1731022421370165
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 677
x-goog-meta-goog-reserved-file-mtime: 1731022300
content-type: image/svg+xml
x-goog-hash: crc32c=YU0IUQ==
x-goog-hash: md5=qlM06Fuupxh8Lh2J+NyQzA==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY27ME0omcS9RA3_QhZZzZpMWfSvGm3yZTBcpcbCp0PEgSqVThoGRDbvZteydzaxvu09DZPX2hnw1w
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
content-encoding: br
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 200934
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300023-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 51416, 491
x-timer: S1734792740.409685,VS0,VE0
vary: Accept-Encoding
content-length: 389
GET

https://www.mozilla.org/media/protocol/img/icons/social/youtube/white.4f314c43c69d.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/img/icons/social/youtube/white.4f314c43c69d.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-goog-generation: 1725999573743219
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 472
x-goog-meta-goog-reserved-file-mtime: 1725999459
x-goog-hash: crc32c=FcwtWA==
x-goog-hash: md5=TzFMQ8adgn0lO609uyKYXA==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AHmUCY0uopcvCYTxjihD10DFgtNwk4qje25TXRe8YqKYn1KwtzDr5Igc4oh59LVhls0gRuOWIRM
server: UploadServer
access-control-expose-headers: *
expires: Mon, 04 Nov 2024 14:54:16 GMT
last-modified: Mon, 04 Nov 2024 10:29:47 GMT
etag: "4f314c43c69d827d253bad3dbb22985c"
content-type: image/svg+xml
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 1428923
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300046-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 65, 529
x-timer: S1734792740.410532,VS0,VE0
content-length: 472
GET

https://www.mozilla.org/media/img/icons/m24-small/globe-white.a76258f6a4cc.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/img/icons/m24-small/globe-white.a76258f6a4cc.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 06 Dec 2024 20:55:19 GMT
last-modified: Fri, 06 Dec 2024 19:51:01 GMT
etag: "a76258f6a4cc46b2eed6225b15e90f96"
x-goog-generation: 1733514661025634
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 778
x-goog-meta-goog-reserved-file-mtime: 1733514601
content-type: image/svg+xml
x-goog-hash: crc32c=0MhJAg==
x-goog-hash: md5=p2JY9qTMRrLu1iJbFekPlg==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AFiumC7RqEyfDfBbID4WEmwefwMGAaWjyPruxsiVJrHkmNAxm20JI7pYAu0cikRiwDw7um_26Uo
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 254775
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400081-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 25, 511
x-timer: S1734792740.411838,VS0,VE0
content-length: 778
GET

https://www.mozilla.org/media/img/icons/m24-small/down-caret-white.3aab868855c7.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/img/icons/m24-small/down-caret-white.3aab868855c7.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 06 Dec 2024 20:55:19 GMT
last-modified: Fri, 06 Dec 2024 19:51:00 GMT
etag: "3aab868855c7c2facfd1131b0b31015f"
x-goog-generation: 1733514660876872
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 183
x-goog-meta-goog-reserved-file-mtime: 1733514601
content-type: image/svg+xml
x-goog-hash: crc32c=o3yX4A==
x-goog-hash: md5=OquGiFXHwvrP0RMbCzEBXw==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AFiumC7_GwtG4OcrVkzLSteSpwedug5Dj-WYAcfw1NX17TX_-JLql3yqxUooyjvWI2TIa03sOiIDZa5A_A
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 1191421
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300092-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 24, 511
x-timer: S1734792740.414069,VS0,VE0
content-length: 183
GET

https://www.mozilla.org/media/protocol/fonts/Inter-Regular.d55e957612a3.woff2

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/fonts/Inter-Regular.d55e957612a3.woff2 HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: identity
referer: https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:40 GMT
last-modified: Thu, 07 Nov 2024 23:33:35 GMT
etag: "d55e957612a3b2a373925d920f4af6b1"
x-goog-generation: 1731022415608542
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 88816
x-goog-meta-goog-reserved-file-mtime: 1731022301
content-type: font/woff2
x-goog-hash: crc32c=2hy73A==
x-goog-hash: md5=1V6VdhKjsqNzkl2SD0r2sQ==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY2OqZpcsChGRd9Gm0qxhwn8cr4hBRQefkZlr60zFRXB0tm3heRMbD5kjcYLR1FBw4vM6fNbBVhqxQ
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 274369
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300091-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 6207, 100
x-timer: S1734792740.418109,VS0,VE0
content-length: 88816
GET

https://www.mozilla.org/media/protocol/fonts/Metropolis-Bold.6a80125e795a.woff2

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/protocol/fonts/Metropolis-Bold.6a80125e795a.woff2 HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: identity
referer: https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:40 GMT
last-modified: Thu, 07 Nov 2024 23:33:35 GMT
etag: "6a80125e795aa81c6f251aa83e44062b"
x-goog-generation: 1731022415569053
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 16728
x-goog-meta-goog-reserved-file-mtime: 1731022301
content-type: font/woff2
x-goog-hash: crc32c=lWtUXA==
x-goog-hash: md5=aoASXnlaqBxvJRqoPkQGKw==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY2HL6XqeuWIbDAn5DrK9hwp7-prmgGYb9GRQ53i2_IzZ2u2PznZXWHKrvEiqEx8RdGVFOUDJGmx5w
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 402703
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300081-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 39, 104
x-timer: S1734792740.419087,VS0,VE0
content-length: 16728
GET

https://www.mozilla.org/media/fonts/m24/mozilla-text/MozillaText-SemiBold.c9ce5296db65.woff2

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/fonts/m24/mozilla-text/MozillaText-SemiBold.c9ce5296db65.woff2 HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: identity
referer: https://www.mozilla.org/media/css/m24-root.77a146bcaf17.css
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Wed, 04 Dec 2024 22:11:28 GMT
last-modified: Wed, 04 Dec 2024 20:15:31 GMT
etag: "c9ce5296db657f9f585c68890e99c39f"
x-goog-generation: 1733343331621829
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 26260
x-goog-meta-goog-reserved-file-mtime: 1733343287
content-type: font/woff2
x-goog-hash: crc32c=yAx31Q==
x-goog-hash: md5=yc5Slttlf59YXGiJDpnDnw==
x-goog-storage-class: STANDARD
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
x-guploader-uploadid: AFiumC5vmJvAeWRXsJFErghWiEG4iEHmMornYYXEv6Uni1jeZMAhYx5Rvv9fGXo37GpQQdxWzXE
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 174334
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300073-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 4473, 407
x-timer: S1734792740.420122,VS0,VE0
content-length: 26260
GET

https://www.mozilla.org/media/fonts/m24/mozilla-text/MozillaText-Regular.3fa5c88b0954.woff2

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/fonts/m24/mozilla-text/MozillaText-Regular.3fa5c88b0954.woff2 HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: identity
referer: https://www.mozilla.org/media/css/m24-root.77a146bcaf17.css
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Wed, 04 Dec 2024 22:11:28 GMT
last-modified: Wed, 04 Dec 2024 20:15:31 GMT
etag: "3fa5c88b095446f313c63d4b24bbffa0"
x-goog-generation: 1733343331673358
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 26192
x-goog-meta-goog-reserved-file-mtime: 1733343287
content-type: font/woff2
x-goog-hash: crc32c=28WjSg==
x-goog-hash: md5=P6XIiwlURvMTxj1LJLv/oA==
x-goog-storage-class: STANDARD
access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
x-guploader-uploadid: AFiumC712cXVahqS46rB0x39MjpVvaD5zBFupz6-NGzoI0tC8FES1v_HBiCizhxCWs7zUHenyzgE67QEfQ
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 395659
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400027-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 32, 537
x-timer: S1734792740.420848,VS0,VE0
content-length: 26192
GET

https://www.mozilla.org/media/img/firefox/welcome/page20-21/back-up.b351cf7c2c5c.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/img/firefox/welcome/page20-21/back-up.b351cf7c2c5c.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Wed, 27 Nov 2024 04:52:51 GMT
last-modified: Mon, 25 Nov 2024 09:36:11 GMT
etag: "b351cf7c2c5c6c4cb8ca7d4c87cf9b8d"
x-goog-generation: 1732527371210244
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 451
x-goog-meta-goog-reserved-file-mtime: 1732527322
content-type: image/svg+xml
x-goog-hash: crc32c=6u6obg==
x-goog-hash: md5=s1HPfCxcbEy4yn1Mh8+bjQ==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AFiumC4MF7QpqG7XuDxbfqPEEYAX7d74SrVTFryycZyMbXAllKwWKLLVzXFu9AFiZtIOrUMVAfoPlw2GEA
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 1387753
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400044-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 2, 10
x-timer: S1734792740.422001,VS0,VE0
content-length: 451
GET

https://www.mozilla.org/media/img/firefox/welcome/page20-21/add-ons.809f56bff087.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/img/firefox/welcome/page20-21/add-ons.809f56bff087.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Mon, 11 Nov 2024 14:11:16 GMT
last-modified: Fri, 08 Nov 2024 20:07:57 GMT
etag: "809f56bff08721ea127dd5beb7868861"
x-goog-generation: 1731096477365294
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1012
x-goog-meta-goog-reserved-file-mtime: 1731096409
content-type: image/svg+xml
x-goog-hash: crc32c=5ObDyw==
x-goog-hash: md5=gJ9Wv/CHIeoSfdW+t4aIYQ==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY2VqJpiKH3Y_PL8msRsVuCjEXnkduQysq_5HgnltKZoGpoXrIohi2eftltQl4UQ2A85QXRRD5I8hw
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 261829
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300066-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 2, 10
x-timer: S1734792740.425526,VS0,VE0
content-length: 1012
GET

https://www.mozilla.org/media/img/firefox/welcome/page20-21/community.bf0cb1c38902.svg

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/img/firefox/welcome/page20-21/community.bf0cb1c38902.svg HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Mon, 11 Nov 2024 14:11:16 GMT
last-modified: Fri, 08 Nov 2024 20:07:57 GMT
etag: "bf0cb1c389027f75af50b39848de917a"
x-goog-generation: 1731096477195663
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 896
x-goog-meta-goog-reserved-file-mtime: 1731096409
content-type: image/svg+xml
x-goog-hash: crc32c=ajmDfg==
x-goog-hash: md5=vwyxw4kCf3WvULOYSN6Reg==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY1StwjRkgOko2XubfUs-KE18Zz92dl10xwKPkOtabWoHVJqFB0v1Xyfc5cPhZycsc3rtDo
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 1387753
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400108-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 3, 10
x-timer: S1734792740.428282,VS0,VE0
content-length: 896
GET

https://www.mozilla.org/media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.png

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.png HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

x-goog-generation: 1727094498247922
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 15086
x-goog-meta-goog-reserved-file-mtime: 1727094460
x-goog-hash: crc32c=E9h0Yg==
x-goog-hash: md5=8JNATAE1nK2dDy+1FLZCgQ==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AHmUCY0HLb_EIXPPU7mp8aTiJ2VMVZsvMoPu3MACA4q7CJWr-8L_LC6UkWSf0_DDVYeULOH4kzY
server: UploadServer
access-control-expose-headers: *
expires: Mon, 04 Nov 2024 15:06:10 GMT
last-modified: Mon, 04 Nov 2024 10:29:06 GMT
etag: "f093404c01359cad9d0f2fb514b64281"
content-type: image/vnd.microsoft.icon
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 372405
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-kbfi7400080-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 4, 279
x-timer: S1734792740.472468,VS0,VE0
content-length: 15086
GET

https://www.mozilla.org/media/img/favicons/firefox/browser/favicon.f093404c0135.ico

firefox.exe

Remote address:

151.101.3.19:443

Request

GET /media/img/favicons/firefox/browser/favicon.f093404c0135.ico HTTP/2.0
host: www.mozilla.org
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.mozilla.org/en-US/firefox/welcome/21/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

expires: Fri, 08 Nov 2024 17:45:39 GMT
last-modified: Thu, 07 Nov 2024 23:32:38 GMT
etag: "59e3822720bedcc45ca5e6e6d3220ea9"
x-goog-generation: 1731022358512287
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8050
x-goog-meta-goog-reserved-file-mtime: 1731022301
content-type: image/png
x-goog-hash: crc32c=ACeoNw==
x-goog-hash: md5=WeOCJyC+3MRcpebm0yIOqQ==
x-goog-storage-class: STANDARD
access-control-expose-headers: *
x-guploader-uploadid: AHmUCY3PuzyciJ0OwxWlmKawQgyY3D8QgFLNDswsZK3glFrOH0SRNC_qbdOfe4DZC_I-4n68J5RrunUPww
server: UploadServer
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=315360000, public, immutable
accept-ranges: bytes
date: Sat, 21 Dec 2024 14:52:20 GMT
age: 256080
access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
x-served-by: cache-bfi-krnt7300105-BFI, cache-lon420121-LON
x-cache: HIT, HIT
x-cache-hits: 3, 148
x-timer: S1734792740.472491,VS0,VE0
content-length: 8050
DNS

www-mozilla.fastly-edge.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www-mozilla.fastly-edge.com

IN A

Response

www-mozilla.fastly-edge.com

IN A

151.101.195.19

www-mozilla.fastly-edge.com

IN A

151.101.3.19

www-mozilla.fastly-edge.com

IN A

151.101.131.19

www-mozilla.fastly-edge.com

IN A

151.101.67.19
DNS

www-mozilla.fastly-edge.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www-mozilla.fastly-edge.com

IN AAAA

Response

www-mozilla.fastly-edge.com

IN AAAA

2a04:4e42:600::787

www-mozilla.fastly-edge.com

IN AAAA

2a04:4e42:400::787

www-mozilla.fastly-edge.com

IN AAAA

2a04:4e42:200::787

www-mozilla.fastly-edge.com

IN AAAA

2a04:4e42::787
DNS

spocs.getpocket.com

firefox.exe

Remote address:

8.8.8.8:53

Request

spocs.getpocket.com

IN A

Response

spocs.getpocket.com

IN CNAME

prod.ads.prod.webservices.mozgcp.net

prod.ads.prod.webservices.mozgcp.net

IN A

34.117.188.166
DNS

firefox-api-proxy.cdn.mozilla.net

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox-api-proxy.cdn.mozilla.net

IN A

Response

firefox-api-proxy.cdn.mozilla.net

IN CNAME

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

IN A

34.149.97.1
DNS

prod.ads.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.ads.prod.webservices.mozgcp.net

IN A

Response

prod.ads.prod.webservices.mozgcp.net

IN A

34.117.188.166
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN A

Response

shavar.prod.mozaws.net

IN A

52.40.120.141

shavar.prod.mozaws.net

IN A

44.240.87.158

shavar.prod.mozaws.net

IN A

44.228.225.150
DNS

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

IN A

Response

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

IN A

34.149.97.1
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN A

34.160.144.191
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN A

Response

prod.remote-settings.prod.webservices.mozgcp.net

IN A

34.149.100.209
DNS

prod.ads.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.ads.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

shavar.prod.mozaws.net

firefox.exe

Remote address:

8.8.8.8:53

Request

shavar.prod.mozaws.net

IN AAAA

Response
DNS

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

IN AAAA

Response

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

IN AAAA

2600:1901:0:74e4::
DNS

prod.content-signature-chains.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

Response

prod.content-signature-chains.prod.webservices.mozgcp.net

IN AAAA

2600:1901:0:92a9::
DNS

prod.remote-settings.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.remote-settings.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

19.3.101.151.in-addr.arpa

Remote address:

8.8.8.8:53

Request

19.3.101.151.in-addr.arpa

IN PTR

Response
DNS

150.225.228.44.in-addr.arpa

Remote address:

8.8.8.8:53

Request

150.225.228.44.in-addr.arpa

IN PTR

Response

150.225.228.44.in-addr.arpa

IN PTR

ec2-44-228-225-150 us-west-2compute amazonawscom
DNS

150.225.228.44.in-addr.arpa

Remote address:

8.8.8.8:53

Request

150.225.228.44.in-addr.arpa

IN PTR

Response

150.225.228.44.in-addr.arpa

IN PTR

ec2-44-228-225-150 us-west-2compute amazonawscom
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

172.217.20.164
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

172.217.20.164
GET

https://www.google.com/search?client=firefox-b-d&q=hashtag

firefox.exe

Remote address:

172.217.20.164:443

Request

GET /search?client=firefox-b-d&q=hashtag HTTP/2.0
host: www.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
sec-fetch-user: ?1
te: trailers

Response

HTTP/2.0 429

date: Sat, 21 Dec 2024 14:52:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
content-type: text/html
server: HTTP server (unknown)
content-length: 3195
content-type: text/html
content-length: 3195
GET

https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fclient%3Dfirefox-b-d%26q%3Dhashtag&q=EgS117BTGKysm7sGIjCCffrXHOhN71vu-jeogGdygaVg01jum0_3L9xnIs_Hys3M9ndSkUpFfEq02Grtt_QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

firefox.exe

Remote address:

172.217.20.164:443

Request

GET /sorry/index?continue=https://www.google.com/search%3Fclient%3Dfirefox-b-d%26q%3Dhashtag&q=EgS117BTGKysm7sGIjCCffrXHOhN71vu-jeogGdygaVg01jum0_3L9xnIs_Hys3M9ndSkUpFfEq02Grtt_QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/2.0
host: www.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
cookie: AEC=AZ6Zc-XzWPeKu72wWC4eD92seuWVOi1ImRv8xTzdejBNq-XrQC8X7NdnyAo
cookie: __Secure-ENID=24.SE=R7h537Fi8ChrfWdHNR5pnp7bSgAkcHpH6P3vPzS7IZtE4bfXloX7fdvyOD2c-f9ZGuphVlcznFmNURB17w95aHSQbwlzZSwq89VFu-N3DRh2N5cCbT-zTe1Rch3U5kb3Nf9N9qnDaKBOV1gsCfEl1epUYkA_RU4aLiQUuQt1l0f52wNfmow71cFJ-90ObLIQZ9Q2jHIu
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
sec-fetch-user: ?1
te: trailers
GET

https://www.google.com/recaptcha/api.js

firefox.exe

Remote address:

172.217.20.164:443

Request

GET /recaptcha/api.js HTTP/2.0
host: www.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fclient%3Dfirefox-b-d%26q%3Dhashtag&q=EgS117BTGKysm7sGIjCCffrXHOhN71vu-jeogGdygaVg01jum0_3L9xnIs_Hys3M9ndSkUpFfEq02Grtt_QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
cookie: AEC=AZ6Zc-XzWPeKu72wWC4eD92seuWVOi1ImRv8xTzdejBNq-XrQC8X7NdnyAo
cookie: __Secure-ENID=24.SE=R7h537Fi8ChrfWdHNR5pnp7bSgAkcHpH6P3vPzS7IZtE4bfXloX7fdvyOD2c-f9ZGuphVlcznFmNURB17w95aHSQbwlzZSwq89VFu-N3DRh2N5cCbT-zTe1Rch3U5kb3Nf9N9qnDaKBOV1gsCfEl1epUYkA_RU4aLiQUuQt1l0f52wNfmow71cFJ-90ObLIQZ9Q2jHIu
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

172.217.20.164
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN AAAA

Response

www.google.com

IN AAAA

2a00:1450:4007:80c::2004
DNS

www.google.com

firefox.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN AAAA

Response

www.google.com

IN AAAA

2a00:1450:4007:80c::2004
DNS

164.20.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

164.20.217.172.in-addr.arpa

IN PTR

Response

164.20.217.172.in-addr.arpa

IN PTR

par10s49-in-f41e100net

164.20.217.172.in-addr.arpa

IN PTR

waw02s07-in-f4�H

164.20.217.172.in-addr.arpa

IN PTR

waw02s07-in-f164�H
DNS

195.20.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

195.20.217.172.in-addr.arpa

IN PTR

Response

195.20.217.172.in-addr.arpa

IN PTR

par10s50-in-f31e100net

195.20.217.172.in-addr.arpa

IN PTR

waw02s08-in-f195�H

195.20.217.172.in-addr.arpa

IN PTR

waw02s08-in-f3�H
DNS

163.20.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

163.20.217.172.in-addr.arpa

IN PTR

Response

163.20.217.172.in-addr.arpa

IN PTR

par10s49-in-f31e100net

163.20.217.172.in-addr.arpa

IN PTR

waw02s07-in-f163�H

163.20.217.172.in-addr.arpa

IN PTR

waw02s07-in-f3�H
DNS

ddg.gg

firefox.exe

Remote address:

8.8.8.8:53

Request

ddg.gg

IN A

Response

ddg.gg

IN A

52.142.124.215
DNS

ddg.gg

firefox.exe

Remote address:

8.8.8.8:53

Request

ddg.gg

IN A

Response

ddg.gg

IN A

52.142.124.215
GET

http://ddg.gg/

firefox.exe

Remote address:

52.142.124.215:80

Request

GET / HTTP/1.1
Host: ddg.gg
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

Response

HTTP/1.1 301 Moved Permanently

Server: nginx
Date: Sat, 21 Dec 2024 14:52:38 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://duckduckgo.com/
Strict-Transport-Security: max-age=31536000
Expires: Sun, 21 Dec 2025 14:52:38 GMT
Cache-Control: max-age=31536000
DNS

ddg.gg

firefox.exe

Remote address:

8.8.8.8:53

Request

ddg.gg

IN A

Response

ddg.gg

IN A

52.142.124.215
DNS

ddg.gg

firefox.exe

Remote address:

8.8.8.8:53

Request

ddg.gg

IN A

Response

ddg.gg

IN A

52.142.124.215
DNS

ddg.gg

firefox.exe

Remote address:

8.8.8.8:53

Request

ddg.gg

IN AAAA

Response
DNS

ddg.gg

firefox.exe

Remote address:

8.8.8.8:53

Request

ddg.gg

IN AAAA

Response
DNS

215.124.142.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

215.124.142.52.in-addr.arpa

IN PTR

Response
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN A

Response

duckduckgo.com

IN A

52.142.124.215
GET

https://duckduckgo.com/

firefox.exe

Remote address:

52.142.124.215:443

Request

GET / HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: none
sec-fetch-user: ?1
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: text/html; charset=UTF-8
content-length: 10582
vary: Accept-Encoding
etag: "6765f126-2956"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:37 GMT
cache-control: no-cache
GET

https://duckduckgo.com/static-assets/font/ProximaNova-RegIt-webfont.woff2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/font/ProximaNova-RegIt-webfont.woff2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: font/woff2
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-a628"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/static-assets/font/ProximaNova-ExtraBold-webfont.woff2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/font/ProximaNova-ExtraBold-webfont.woff2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: font/woff2
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-a6c4"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/static-assets/font/ProximaNova-Reg-webfont.woff2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/font/ProximaNova-Reg-webfont.woff2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: font/woff2
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-a3b4"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/static-assets/font/ProximaNova-Sbold-webfont.woff2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/font/ProximaNova-Sbold-webfont.woff2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: font/woff2
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-a358"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/static-assets/font/ProximaNova-Bold-webfont.woff2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/font/ProximaNova-Bold-webfont.woff2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: font/woff2
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-a598"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/css/c64e3cce46526948.css

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/css/c64e3cce46526948.css HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: text/css
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-b76d"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/css/5fd9baeedf731742.css

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/css/5fd9baeedf731742.css HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: text/css
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-7ba8"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/css/a907368db829f88f.css

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/css/a907368db829f88f.css HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: text/css
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-619c"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/css/d7a778b86846a7fd.css

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/css/d7a778b86846a7fd.css HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: text/css
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-16a35"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/css/de1cb19794fd83e5.css

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/css/de1cb19794fd83e5.css HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: text/css
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-6d94"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/webpack-64c3d5bb8874f665.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/webpack-64c3d5bb8874f665.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-12386"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/framework-f8115f7fae64930e.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/framework-f8115f7fae64930e.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-1fbd3"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/main-d4b13818a262f8be.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/main-d4b13818a262f8be.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-18714"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/pages/_app-52b84a5dde876133.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/pages/_app-52b84a5dde876133.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-617de"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/12636-61ed9ec1b956b494.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/12636-61ed9ec1b956b494.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-15c2"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/41664-0c7a5cf8f744007e.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/41664-0c7a5cf8f744007e.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-168c"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/97179-5b6e68d94b3b6b3a.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/97179-5b6e68d94b3b6b3a.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-1fca"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/27575-a47bc7c3d905054b.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/27575-a47bc7c3d905054b.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-517f"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/81125-b74d1b6f4908497b.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/81125-b74d1b6f4908497b.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-6bc9"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/53343-e1b28b68883ff9df.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/53343-e1b28b68883ff9df.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-18fd"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/62957-7d68a586e2f806a1.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/62957-7d68a586e2f806a1.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-1f52"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/22868-cbd9348122d77c1b.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/22868-cbd9348122d77c1b.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-1340"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/25892-f67fb82768f62af4.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/25892-f67fb82768f62af4.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-1489f"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/41917-1597d070817d9087.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/41917-1597d070817d9087.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-61cc0"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/73381-b9157a6253c5d3e8.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/73381-b9157a6253c5d3e8.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-68cf"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/64149-6960cae1da870bb4.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/64149-6960cae1da870bb4.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-13343"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/26634-d8525d31fbb19710.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/26634-d8525d31fbb19710.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-42ef"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/59349-2b554244a2ef63c8.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/59349-2b554244a2ef63c8.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-27681"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/95639-17f30bca65bd9ea4.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/95639-17f30bca65bd9ea4.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-42a2f"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/55204-ae0eef26f1bc26ef.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/55204-ae0eef26f1bc26ef.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-e5b7"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D-9c044649ecb45850.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/pages/%5Blocale%5D-9c044649ecb45850.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-17d"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/oD1VI4kCyPoypb_amISYf/_buildManifest.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/oD1VI4kCyPoypb_amISYf/_buildManifest.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-55ba"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/oD1VI4kCyPoypb_amISYf/_ssgManifest.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/oD1VI4kCyPoypb_amISYf/_ssgManifest.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-1338"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/_next/static/media/firefox-extension.8e658fcd.svg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/firefox-extension.8e658fcd.svg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/svg+xml
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-4906"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/static-assets/image/pages/home/devices-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 150022
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-24a06"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/backgrounds/homepage-btf-mobile-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/backgrounds/homepage-btf-mobile-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 127123
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-1f093"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/macos.61889438.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/macos.61889438.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 2769
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-ad1"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/windows.477fa143.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/windows.477fa143.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 509
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-1fd"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
POST

https://improving.duckduckgo.com/t/page_home_impression?5689491&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/page_home_impression?5689491&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:37 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
GET

https://duckduckgo.com/_next/static/media/app-store.501fe17a.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/app-store.501fe17a.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 13056
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-3300"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/play-store.e5d5ed36.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/play-store.e5d5ed36.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 2134
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-856"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/chrome-lg.a4859fb2.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/chrome-lg.a4859fb2.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 11271
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-2c07"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/edge-lg.36af7682.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/edge-lg.36af7682.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 13743
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-35af"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/firefox-lg.8efad702.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/firefox-lg.8efad702.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 13229
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-33ad"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/opera-lg.237c4418.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/opera-lg.237c4418.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 2945
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-b81"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 107143
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-1a287"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 182030
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-2c70e"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 47334
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-b8e6"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 105834
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-19d6a"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 40423
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-9de7"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 64366
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-fb6e"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 58141
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-e31d"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/chunks/78597.c875db33140f7df5.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/chunks/78597.c875db33140f7df5.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/x-javascript
last-modified: Fri, 20 Dec 2024 22:35:16 GMT
vary: Accept-Encoding
etag: W/"6765f124-3ce"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/static-assets/backgrounds/homepage-btf-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/backgrounds/homepage-btf-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 57621
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-e115"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/flame-narrow.70589b7c.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/flame-narrow.70589b7c.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 18809
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-4979"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/flame.1241f020.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/flame.1241f020.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 56916
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-de54"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/burn@2x.be0bd36d.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/burn@2x.be0bd36d.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 75467
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-126cb"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/flame@2x.40e1cfa0.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/flame@2x.40e1cfa0.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 4465
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-1171"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/widget-small@2x.07c865df.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/widget-small@2x.07c865df.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 6508
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-196c"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/widget-big@2x.a260ccf6.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/widget-big@2x.a260ccf6.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 18003
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-4653"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/night@2x.4ca79636.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/night@2x.4ca79636.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 4011
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-fab"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/dark-mode@2x.3e150d01.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/dark-mode@2x.3e150d01.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 70733
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-1144d"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 3386
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-d3a"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 8839
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-2287"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 7116
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-1bcc"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 2057
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-809"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/country.json

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /country.json HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: application/json
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 22 Dec 2024 14:52:38 GMT
cache-control: max-age=86400
x-duckduckgo-locale: en_US
content-encoding: br
POST

https://improving.duckduckgo.com/t/atb_home_impression?379630&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false&locale=en&origin=funnel_home

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/atb_home_impression?379630&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false&locale=en&origin=funnel_home HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:37 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/atb_home_download_impression?63473&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&locale=en&origin=funnel_home

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/atb_home_download_impression?63473&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&locale=en&origin=funnel_home HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:37 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 182030
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-2c70e"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 47334
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-b8e6"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 40423
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-9de7"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 64366
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-fb6e"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 3386
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-d3a"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 8839
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-2287"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 7116
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-1bcc"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 2057
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-809"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 92229
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-16845"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: image/png
content-length: 201629
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-3139d"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/_next/data/oD1VI4kCyPoypb_amISYf/about.json

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /_next/data/oD1VI4kCyPoypb_amISYf/about.json HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
purpose: prefetch
x-nextjs-data: 1
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:38 GMT
content-type: text/html; charset=UTF-8
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
vary: Accept-Encoding
etag: W/"6765f125-10a7"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:38 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: image/png
content-length: 60280
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-eb78"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:39 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: image/png
content-length: 98937
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-18279"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:39 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: image/png
content-length: 34303
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-85ff"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:39 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/static-assets/favicons/DDG-iOS-icon_152x152.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /static-assets/favicons/DDG-iOS-icon_152x152.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: image/png
content-length: 3576
last-modified: Fri, 20 Dec 2024 22:35:17 GMT
etag: "6765f125-df8"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:39 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
accept-ranges: bytes
GET

https://duckduckgo.com/favicon.ico

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /favicon.ico HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: image/x-icon
last-modified: Thu, 31 Oct 2024 23:45:30 GMT
vary: Accept-Encoding
etag: W/"6724169a-aef"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 22 Dec 2024 14:52:39 GMT
cache-control: max-age=86400
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/ac/?q=h&kl=wt-wt

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /ac/?q=h&kl=wt-wt HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:38 GMT
cache-control: no-cache
content-disposition: attachment; filename="ac.json"
x-duckduckgo-privacy-random-ac: qjksl7GboJlmAPwFPvGEx4Z8QVSKt0l5xCtdQPigM2IRhTQqRg8kAeaQfrMNxb4SlTIgcLFmm8j67vO5V7Br94Swcl2DryagLroBjTQ8DyQlh6pGzZMPRF5zO3Otq3A2wlV78lfbi1OD4XoMcq23ShRzr7ceBoGYDzInQGtDPq6JpcpdMnFq26NadjLG29dg1xLqYNL8mnPXo
content-encoding: br
POST

https://improving.duckduckgo.com/t/page_home_searchbox_suggest?5411334&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/page_home_searchbox_suggest?5411334&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:38 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
GET

https://duckduckgo.com/ac/?q=ha&kl=wt-wt

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /ac/?q=ha&kl=wt-wt HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:38 GMT
cache-control: no-cache
content-disposition: attachment; filename="ac.json"
x-duckduckgo-privacy-random-ac: NZa63jBdUXQvV5Lpb1kLZhEhmfTJiF3pxULMmtLpOfpfaM29s8Xt7HnKh8ldAW2KH5g50l4mRRsH6rjUOqTPeAHl89lRVVt3Vr1g02kqc9vhRDEIpsjFE6Z1zRKachHfrKCpzlV1xSEtDpMJemOxr7fS2gq1S1ERNtABoCuiT0mdigNdeiF2YrfPg8lMmfeUbJIGKfgEXOdlGIivSr4jpwNqa9RStBt2bb8Yo5OPCbdB7Etp7NZkR1zgjFPgBNdeJ5OUlek6MRc
content-encoding: br
GET

https://duckduckgo.com/ac/?q=has&kl=wt-wt

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /ac/?q=has&kl=wt-wt HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:39 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:38 GMT
cache-control: no-cache
content-disposition: attachment; filename="ac.json"
x-duckduckgo-privacy-random-ac: zTfN8vfY08auy8R5nGklhWQTVhmXkwM1wAmEv3fA4r91n6fFCWn5sdc5MApRFDNrZ8hlHh4zssOJGDVHU2xiD3xCkEsBUhMOglsSDV2PL7pPfdqricfG4WvpyXGPa8pLpr0dFnsnTziZBg9VkI6j5KHd5rbAJoiTGsHpZjlY38IKpodxNXXZiwAm0EzYxcJ1aZ9hHz9HjF3kE7AkWL0AxurVQZiVoSVqDz10azuw12J2xM1wR4c1Z1S0qeqaspH5fp95g5vBDFgH5cbvYKDh6mVwfxk8K3djC7EJ86DGQMJ9D9TBOPWpylzywgqbLafl4hXySkxikG5XNYBgWP956k4mp3j9h0ClTUL0mu1x7WvbvCLKYbhTtiELmURWIfMfS3cqdMBt41eFJQAtHPIi
content-encoding: br
GET

https://duckduckgo.com/ac/?q=hash&kl=wt-wt

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /ac/?q=hash&kl=wt-wt HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:39 GMT
cache-control: no-cache
content-disposition: attachment; filename="ac.json"
x-duckduckgo-privacy-random-ac: CU4r8Y3Skv2yzrf98amEo5e1c3x3rUlocOfa2vCtQgK99hGUF88ddfES1ZrglPjA9fqcP3K25hSq9rHlgdhnbgGcXwpAyOncd2XpciFDLkSchE70yFdyRudkZfmb6uJXW1AlIKKjX34xCb43HEPCXAWOI0T6MFcYUcGXBNjw22NPgiClkOHtIbORcV1u6xNwl6spuSndEkJjo6KhXHcMhIg5SAQn2lzVJGayqX6ZndQMa39O4XkbAUyAhpK8vngQ6V5lCBFvmt1vzMIkAA0o4S9elPnVaJMbfSHQibEIjN09gv4aSZxaCuEf7gdYo0IiTlnG0zL7lNcwQiqRAqf83ot0BHHOiYWaZYX
content-encoding: br
GET

https://duckduckgo.com/ac/?q=hasht&kl=wt-wt

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /ac/?q=hasht&kl=wt-wt HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:39 GMT
cache-control: no-cache
content-disposition: attachment; filename="ac.json"
x-duckduckgo-privacy-random-ac: 9s1ZTmtsu8VjcxfcqS6podH5wek1YYSOUrAk20Cbzb7p4caYVMfYUXMN68Bd346sV0g6CGV4hkthRKfakehcx7ZXetj7Zcdhg7V18h7VQIzzN80ZMR2Ib2gtX7FXHxbXZpbzW70WciKqJyYyCjGCMFLGyot0rfkZJBtl1XHf462djesJFvGix0wAJ62LgQBuW7d1zJWa7I2EQBkJaodldmFobGieNnJTywBRQuxV2JYSD0YGWrDvapdWbsDfufG5iGug3Jl639HmyBNnVh33UGXaLls797fOeOg9L5PY7HwTBlRCZ1r0eIAtFahGuJK8GxWM093Aelmh1o2A1lZ3HeYakOBY5ETGUsK1LcjXAXrgOyVyU9cIPgkpeccY8ieKbX4ogg4ImfZGgU4AZew0F1jn
content-encoding: br
GET

https://duckduckgo.com/ac/?q=hashta&kl=wt-wt

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /ac/?q=hashta&kl=wt-wt HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:39 GMT
cache-control: no-cache
content-disposition: attachment; filename="ac.json"
x-duckduckgo-privacy-random-ac: GImzlK7Ew2yVVmzn444syR3Yci3MuKpEy1qAU54gk590rrIxq1ParNFU0Ze6JBJcDF228C1yh0wB0nBouvPjkHKsKwjTyZXelJRot9uCvOApY33R7N0tTnwMUixID2AKgGbUQcK0zPU7Y70qwMy4C7vlTJkgWGK1uXEKWRlMqKthdZ0VjPK9ytyXj1K3lIhTv4IxGfQDKJDy5ovZBQN4CWzqDMHbycfijcdpwGQ1Ph7ebl2GAQZbjCI6pG4klmmUPJKPye4ZbVjBd8Zv8lhgsT6bAiiBZS7
content-encoding: br
GET

https://duckduckgo.com/ac/?q=hashtag&kl=wt-wt

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /ac/?q=hashtag&kl=wt-wt HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:39 GMT
cache-control: no-cache
content-disposition: attachment; filename="ac.json"
x-duckduckgo-privacy-random-ac: OQCoDyd72ajrX0Xf4eH5TprWKLJMOCxun19dV5DVXZ3WffuFdgIL6M2tzXfvdby4YSm9Aq8TOeSOkkswdC7Ot75mYxyqdZsrfkcCLjQe2PVvi9BEUYtTTXBV3gZtYMVkp2s7kMaC4c2wdXrP45PjTe4VCW19zxDYWsqtfsYdBUg7P35O6tVpo8n8eSRdJpUVSmcHaxbw88s6eHfVk631ibNyCekBnIUMiKegolGpCGLal9YBzgRHUdeTSmyb0hXgceuMPwqjdVv6t1Iepzmuyws77oSW0WJ
content-encoding: br
POST

https://improving.duckduckgo.com/t/page_home_searchbox_submit?7641488&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/page_home_searchbox_submit?7641488&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: image/gif
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:40 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://duckduckgo.com/?t=h_&q=hashtag

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /?t=h_&q=hashtag HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
upgrade-insecure-requests: 1
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: same-origin
sec-fetch-user: ?1
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
server-timing: total;dur=54;desc="Backend Total [n]"
x-duckduckgo-results: 1
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:41 GMT
cache-control: max-age=1
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://duckduckgo.com/dist/s.54d8dbeb4d33865059b6.css

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/s.54d8dbeb4d33865059b6.css HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: text/css
content-length: 35240
last-modified: Wed, 18 Dec 2024 13:49:12 GMT
vary: Accept-Encoding
etag: "6762d2d8-89a8"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:40 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/r.cb0b70e9c969a49a8655.css

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/r.cb0b70e9c969a49a8655.css HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: text/css
content-length: 60893
last-modified: Mon, 16 Dec 2024 22:56:19 GMT
vary: Accept-Encoding
etag: "6760b013-eddd"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:40 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/wpl.main.61734e925b14fbd21f05.css

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/wpl.main.61734e925b14fbd21f05.css HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/css,*/*;q=0.1
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: style
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: text/css
content-length: 35759
last-modified: Fri, 20 Dec 2024 21:49:22 GMT
vary: Accept-Encoding
etag: "6765e662-8baf"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:40 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/font/ProximaNova-Reg-webfont.woff2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /font/ProximaNova-Reg-webfont.woff2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:40 GMT
content-type: font/woff2
last-modified: Thu, 31 Oct 2024 23:45:30 GMT
vary: Accept-Encoding
etag: W/"6724169a-469c"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:40 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
GET

https://duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
GET

https://duckduckgo.com/dist/b.76f7b32785935b9052d8.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/b.76f7b32785935b9052d8.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
GET

https://duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/lib/l.32113981e35aa54fc221.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
GET

https://duckduckgo.com/dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
GET

https://duckduckgo.com/dist/util/u.a94849abb631fa45ce7f.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/util/u.a94849abb631fa45ce7f.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
GET

https://duckduckgo.com/dist/wpmv.76080f364d2af8dfd75f.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/wpmv.76080f364d2af8dfd75f.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
GET

https://duckduckgo.com/dist/wpm.main.87246e50269b255c4907.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/wpm.main.87246e50269b255c4907.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers
GET

https://duckduckgo.com/dist/d.4fd7fada0d09b048b9a3.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/d.4fd7fada0d09b048b9a3.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
GET

https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/g.62d9645a1bff91d0117a.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN A

Response

duckduckgo.com

IN A

52.142.124.215
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN AAAA

Response
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN AAAA

Response
DNS

improving.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

improving.duckduckgo.com

IN A

Response

improving.duckduckgo.com

IN CNAME

duckduckgo.com

duckduckgo.com

IN A

52.142.124.215
DNS

improving.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

improving.duckduckgo.com

IN A

Response

improving.duckduckgo.com

IN CNAME

duckduckgo.com

duckduckgo.com

IN A

52.142.124.215
DNS

links.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

links.duckduckgo.com

IN A

Response

links.duckduckgo.com

IN A

20.223.54.233
DNS

links.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

links.duckduckgo.com

IN A

Response

links.duckduckgo.com

IN A

20.223.54.233
GET

https://links.duckduckgo.com/d.js?q=hashtag&t=A&l=uk-en&s=0&a=h_&ct=GB&vqd=4-151242283305029547496619133909650327327&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&sp=0&dfrsp=1&baa=1&bcca=1&bpa=1&btaa=1&wrap=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

20.223.54.233:443

Request

GET /d.js?q=hashtag&t=A&l=uk-en&s=0&a=h_&ct=GB&vqd=4-151242283305029547496619133909650327327&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&sp=0&dfrsp=1&baa=1&bcca=1&bpa=1&btaa=1&wrap=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: links.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript; charset=UTF-8
vary: Accept-Encoding
expires: Sat, 21 Dec 2024 14:52:40 GMT
server-timing: total;dur=516;desc="Backend Total [n]"
strict-transport-security: max-age=31536000
x-robots-tag: noindex
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ; report-uri https://duckduckgo.com/csp_report_ed.js
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
cache-control: no-cache
x-duckduckgo-locale: en_US
content-encoding: br
DNS

links.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

links.duckduckgo.com

IN A

Response

links.duckduckgo.com

IN A

20.223.54.233
DNS

links.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

links.duckduckgo.com

IN A

Response

links.duckduckgo.com

IN A

20.223.54.233
DNS

links.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

links.duckduckgo.com

IN AAAA

Response
GET

https://duckduckgo.com/dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 29292
last-modified: Thu, 28 Nov 2024 15:47:51 GMT
vary: Accept-Encoding
etag: "674890a7-726c"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: font
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: font/woff2
last-modified: Thu, 31 Oct 2024 00:22:30 GMT
vary: Accept-Encoding
etag: W/"6722cdc6-46ec"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
GET

https://duckduckgo.com/dist/wpmv.76080f364d2af8dfd75f.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/wpmv.76080f364d2af8dfd75f.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 67751
last-modified: Mon, 04 Nov 2024 16:05:56 GMT
vary: Accept-Encoding
etag: "6728f0e4-108a7"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/b.76f7b32785935b9052d8.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/b.76f7b32785935b9052d8.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 11227
last-modified: Fri, 20 Dec 2024 21:41:16 GMT
vary: Accept-Encoding
etag: "6765e47c-2bdb"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/wpm.main.87246e50269b255c4907.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/wpm.main.87246e50269b255c4907.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 172199
last-modified: Fri, 20 Dec 2024 21:49:22 GMT
vary: Accept-Encoding
etag: "6765e662-2a0a7"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/lib/l.32113981e35aa54fc221.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 45797
last-modified: Tue, 06 Aug 2024 15:56:47 GMT
vary: Accept-Encoding
etag: "66b247bf-b2e5"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/util/u.a94849abb631fa45ce7f.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/util/u.a94849abb631fa45ce7f.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 36802
last-modified: Fri, 20 Dec 2024 16:18:41 GMT
vary: Accept-Encoding
etag: "676598e1-8fc2"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/g.62d9645a1bff91d0117a.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 217898
last-modified: Fri, 20 Dec 2024 19:29:23 GMT
vary: Accept-Encoding
etag: "6765c593-3532a"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/d.4fd7fada0d09b048b9a3.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/d.4fd7fada0d09b048b9a3.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 90021
last-modified: Fri, 20 Dec 2024 18:45:00 GMT
vary: Accept-Encoding
etag: "6765bb2c-15fa5"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/assets/logo_header.v109.svg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /assets/logo_header.v109.svg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2024 00:22:29 GMT
vary: Accept-Encoding
etag: W/"6722cdc5-1174"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
GET

https://duckduckgo.com/t.js?q=hashtag&t=A&l=uk-en&s=0&ct=GB&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&dfrsp=1&baa=1&bcca=1&btaa=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /t.js?q=hashtag&t=A&l=uk-en&s=0&ct=GB&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&dfrsp=1&baa=1&bcca=1&btaa=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 0
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
GET

https://duckduckgo.com/post3.html

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /post3.html HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
upgrade-insecure-requests: 1
sec-fetch-dest: iframe
sec-fetch-mode: navigate
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: text/html; charset=UTF-8
content-length: 136
vary: Accept-Encoding
etag: "6765f12e-88"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://search.duckduckgo.com ; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
GET

https://duckduckgo.com/dist/s.bf8da8d2f90d4dcd31ba.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/s.bf8da8d2f90d4dcd31ba.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 11991
last-modified: Tue, 24 Sep 2024 14:59:12 GMT
vary: Accept-Encoding
etag: "66f2d3c0-2ed7"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/dist/react-assets/fe21b530ba74e4553643.svg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/react-assets/fe21b530ba74e4553643.svg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/svg+xml
last-modified: Thu, 16 May 2024 20:11:05 GMT
vary: Accept-Encoding
etag: W/"66466859-283"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
GET

https://duckduckgo.com/dist/react-assets/212874b7047e393bacb8.svg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/react-assets/212874b7047e393bacb8.svg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/svg+xml
last-modified: Thu, 16 May 2024 20:11:05 GMT
vary: Accept-Encoding
etag: W/"66466859-591"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
GET

https://duckduckgo.com/dist/react-assets/23d563f964108cbb5b74.svg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/react-assets/23d563f964108cbb5b74.svg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/svg+xml
last-modified: Thu, 16 May 2024 20:11:05 GMT
vary: Accept-Encoding
etag: W/"66466859-215"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
GET

https://duckduckgo.com/assets/onboarding/data-for-sale@2x.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /assets/onboarding/data-for-sale@2x.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/png
content-length: 46602
last-modified: Thu, 31 Oct 2024 00:22:29 GMT
etag: "6722cdc5-b60a"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
accept-ranges: bytes
GET

https://duckduckgo.com/assets/install_arrow.svg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /assets/install_arrow.svg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2024 00:22:29 GMT
vary: Accept-Encoding
etag: W/"6722cdc5-4ea"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
GET

https://duckduckgo.com/assets/onboarding/atb-check.svg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /assets/onboarding/atb-check.svg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2024 00:22:29 GMT
vary: Accept-Encoding
etag: W/"6722cdc5-193"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
GET

https://duckduckgo.com/dist/p.f5b58579149e7488209f.js

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /dist/p.f5b58579149e7488209f.js HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: script
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript
content-length: 157
last-modified: Fri, 27 Oct 2023 12:03:07 GMT
vary: Accept-Encoding
etag: "653ba6fb-9d"
content-encoding: br
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
vary: Accept-Encoding
GET

https://duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /assets/icons/meta/DDG-iOS-icon_152x152.png?v=2 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/png
content-length: 3576
last-modified: Thu, 31 Oct 2024 00:22:29 GMT
etag: "6722cdc5-df8"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
accept-ranges: bytes
POST

https://improving.duckduckgo.com/t/serp_browser_support?9152291&csssupports=1&csscustomproperties=1&cssgrid=1&cssgridadvanced=1&jsmodules=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/serp_browser_support?9152291&csssupports=1&csscustomproperties=1&cssgrid=1&cssgridadvanced=1&jsmodules=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/atbsi_firefox_v461-4?2862572&l=en_US&p=windows&ax=false&pre_va=_&pre_atbva=_&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/atbsi_firefox_v461-4?2862572&l=en_US&p=windows&ax=false&pre_va=_&pre_atbva=_&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/si?3611500&b=firefox&atbi=true&i=false&d=d&l=en_US&p=windows&pre_atb=v461-4&ax=false&ak=false&serp_return=0&pre_va=_&pre_atbva=_&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/si?3611500&b=firefox&atbi=true&i=false&d=d&l=en_US&p=windows&pre_atb=v461-4&ax=false&ak=false&serp_return=0&pre_va=_&pre_atbva=_&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/apss_f?4333506&preloaded=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/apss_f?4333506&preloaded=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/l_d_re?335189&iao=1&rl=uk-en&dl=&ck=0&atbi=true&i=false&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/l_d_re?335189&iao=1&rl=uk-en&dl=&ck=0&atbi=true&i=false&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/ias_web?4044520&fromWebTab=1&initialState=active&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/ias_web?4044520&fromWebTab=1&initialState=active&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
server-timing: total;dur=0;desc="Backend Total [n]"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/ias_images?703954&fromWebTab=1&initialState=inactive&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/ias_images?703954&fromWebTab=1&initialState=inactive&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/ias_videos?6115492&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/ias_videos?6115492&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/ias_news?4463112&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/ias_news?4463112&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/ias_maps_expanded?8252694&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/ias_maps_expanded?8252694&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/ias_products?334100&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/ias_products?334100&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/ias_chat?3272444&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/ias_chat?3272444&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
GET

https://duckduckgo.com/i/7cb3af6667f33259.jpg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /i/7cb3af6667f33259.jpg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/png
content-length: 320
last-modified: Thu, 31 Oct 2024 00:22:29 GMT
etag: "6722cdc5-140"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
accept-ranges: bytes
GET

https://duckduckgo.com/assets/icons/favicons/wikipedia.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /assets/icons/favicons/wikipedia.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-length: 24758
x-amz-id-2: D+UCh6fbkN/nff9c6LNDJKSi3W5JYFP/7TbeUaS+NrK38l7XRX/sUX2pOYYp+UK44wv0p3+S/JY=
x-amz-request-id: C0TXACF29PQ693V4
last-modified: Fri, 09 Feb 2024 18:05:45 GMT
etag: "1222ed4dfea43fa50c971bc759b87fd6"
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Mon, 20 Jan 2025 14:52:41 GMT
accept-ranges: bytes
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-duckduckgo-locale: en_US
GET

https://duckduckgo.com/assets/icons/favicons/youtube.png

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /assets/icons/favicons/youtube.png HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/png
content-length: 287
last-modified: Thu, 31 Oct 2024 00:22:29 GMT
etag: "6722cdc5-11f"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
accept-ranges: bytes
GET

https://duckduckgo.com/assets/icons/related/loupe-grey.svg

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /assets/icons/related/loupe-grey.svg HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/svg+xml
last-modified: Thu, 31 Oct 2024 00:22:29 GMT
vary: Accept-Encoding
etag: W/"6722cdc5-2f9"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
cache-control: public
content-encoding: br
POST

https://improving.duckduckgo.com/t/ad_bingv7aa?6808854&n=1&rl=uk-en&sld=0&d=brand24.com&ds=brand24.com&debug=%5B%7B%22siteLinksLength%22%3A0%2C%22type%22%3A%22%22%7D%5D&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&ad_unit_index=8&isig=about:m&click_source=ad&instant_answers_shown=about%2Cvideos%2Crelated_searches&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/ad_bingv7aa?6808854&n=1&rl=uk-en&sld=0&d=brand24.com&ds=brand24.com&debug=%5B%7B%22siteLinksLength%22%3A0%2C%22type%22%3A%22%22%7D%5D&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&ad_unit_index=8&isig=about:m&click_source=ad&instant_answers_shown=about%2Cvideos%2Crelated_searches&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
server-timing: total;dur=0;desc="Backend Total [n]"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
GET

https://duckduckgo.com/y.js?ifu=%7B3%7Dappid%3D055AAD1BA669BEB8B048128DC89A107C678B527B%26rguid%3D03ee7f5a6852419d91d3017c61b6a4b5&iurl=%7B2%7DIG%3D7333678FF73344319EE73F71200F96F1%26CID%3D2D6B855AE21D6B6836169006E3506AC9%26Type%3DEvent.CPT%26DATA%3D0&impr=1m%3A6

firefox.exe

Remote address:

52.142.124.215:443

Request

GET /y.js?ifu=%7B3%7Dappid%3D055AAD1BA669BEB8B048128DC89A107C678B527B%26rguid%3D03ee7f5a6852419d91d3017c61b6a4b5&iurl=%7B2%7DIG%3D7333678FF73344319EE73F71200F96F1%26CID%3D2D6B855AE21D6B6836169006E3506AC9%26Type%3DEvent.CPT%26DATA%3D0&impr=1m%3A6 HTTP/2.0
host: duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
x-requested-with: XMLHttpRequest
sec-fetch-dest: empty
sec-fetch-mode: cors
sec-fetch-site: same-origin
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/iaoi_wikipedia_fathead?7218733&id=about&fot=i&lot=i&dev=sidebar:relocated&fsig=m&ss=0&sp=0&im=1&ism=1&px=0&ul=0&wt=Hashtag&ibv=0&adc=1&default=1&area=mainline&wide=0&index=1&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/iaoi_wikipedia_fathead?7218733&id=about&fot=i&lot=i&dev=sidebar:relocated&fsig=m&ss=0&sp=0&im=1&ism=1&px=0&ul=0&wt=Hashtag&ibv=0&adc=1&default=1&area=mainline&wide=0&index=1&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/iaoi_videos?4365888&id=videos&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=4&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/iaoi_videos?4365888&id=videos&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=4&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/iaoi_related_searches?8732386&id=related_searches&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=13&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/iaoi_related_searches?8732386&id=related_searches&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=13&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/moreresults?950438&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/moreresults?950438&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/l2_d_re?3715292&osl=1&u=bingv7aa&rc=10&oll=en:10&q=hashtag&ct=GB&rl=uk-en&serp_return=0&organic_above_fold=0&bing_market=en-GB&has_rich_facts=false&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/l2_d_re?3715292&osl=1&u=bingv7aa&rc=10&oll=en:10&q=hashtag&ct=GB&rl=uk-en&serp_return=0&organic_above_fold=0&bing_market=en-GB&has_rich_facts=false&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/adsummary?3722905&page=1&mainline_ad=1&mainline_products=0&mainline_products_middle=0&mainline_autoads=0&mainline_toursactivities=0&mainline_creditcards=0&sidebar_ad=0&sidebar_products=0&sidebar_products_middle=0&sidebar_autoads=0&sidebar_toursactivities=0&sidebar_creditcards=0&sidebar_multimedia_ad=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/adsummary?3722905&page=1&mainline_ad=1&mainline_products=0&mainline_products_middle=0&mainline_autoads=0&mainline_toursactivities=0&mainline_creditcards=0&sidebar_ad=0&sidebar_products=0&sidebar_products_middle=0&sidebar_autoads=0&sidebar_toursactivities=0&sidebar_creditcards=0&sidebar_multimedia_ad=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/dev?3211213&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&d=dictionary_definition%3Aother%3Amainline%3Adata%3A0%2Cvideos%3Amodule%3Amainline%3Aslotted%3A0%2Crelated_searches%3Amodule%3Amainline%3Aslotted%3A0%2Cabout%3Amodule%3Asidebar%3Arelocated%3A0&q=hashtag&serp_return=0&organic_above_fold=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/dev?3211213&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&d=dictionary_definition%3Aother%3Amainline%3Adata%3A0%2Cvideos%3Amodule%3Amainline%3Aslotted%3A0%2Crelated_searches%3Amodule%3Amainline%3Aslotted%3A0%2Cabout%3Amodule%3Asidebar%3Arelocated%3A0&q=hashtag&serp_return=0&organic_above_fold=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:40 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/iaui?683383&missing=en_wikipedia_queries%2Cnlp_fathead%2Cnlp_wiki%2Cwikinlp%2Cdictionary_definition&shown=about%2Cvideos%2Crelated_searches&r1=en_wikipedia_queries,nlp_fathead,nlp_wiki,wikinlp&r2=wikinlp&r4=dictionary_definition&r6=dictionary_definition,wikinlp&r8=wikinlp&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/iaui?683383&missing=en_wikipedia_queries%2Cnlp_fathead%2Cnlp_wiki%2Cwikinlp%2Cdictionary_definition&shown=about%2Cvideos%2Crelated_searches&r1=en_wikipedia_queries,nlp_fathead,nlp_wiki,wikinlp&r2=wikinlp&r4=dictionary_definition&r6=dictionary_definition,wikinlp&r8=wikinlp&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: application/x-javascript; charset=UTF-8
vary: Accept-Encoding
expires: Sat, 21 Dec 2024 14:52:40 GMT
server-timing: total;dur=151;desc="Backend Total [n]"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
cache-control: no-cache
x-duckduckgo-locale: en_US
content-encoding: br
POST

https://improving.duckduckgo.com/t/im_s?7403124&bfcache=0&bounce=0&vertical=web&retry=0&page=1&layoutready=1&abaready=1&aba=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/im_s?7403124&bfcache=0&bounce=0&vertical=web&retry=0&page=1&layoutready=1&abaready=1&aba=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:42 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:41 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/webvitals?7053917&fromWebTab=1&TTFB=110.0000&FCP=692.0000&LCP=834.0000&has_performance=1&is_cached=0&navigation_type=navigate&has_back_data=1&is_loaded_from_bfcache=0&is_bounce_back=0&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/webvitals?7053917&fromWebTab=1&TTFB=110.0000&FCP=692.0000&LCP=834.0000&has_performance=1&is_cached=0&navigation_type=navigate&has_back_data=1&is_loaded_from_bfcache=0&is_bounce_back=0&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:56 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:55 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
POST

https://improving.duckduckgo.com/t/serp_hidden?2651758&fromWebTab=1&vistedAltTab=na&visitedAltTabInitiallyVisible=na&nTabsVisited=1&ddgTabs=web_0&nTabs=7&altTabVisitDuration=na&darkMode=false&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&q=hashtag&ct=GB&rl=uk-en&duckassist=0&ads=1&organics=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

firefox.exe

Remote address:

52.142.124.215:443

Request

POST /t/serp_hidden?2651758&fromWebTab=1&vistedAltTab=na&visitedAltTabInitiallyVisible=na&nTabsVisited=1&ddgTabs=web_0&nTabs=7&altTabVisitDuration=na&darkMode=false&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&q=hashtag&ct=GB&rl=uk-en&duckassist=0&ads=1&organics=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
host: improving.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
origin: https://duckduckgo.com
sec-fetch-dest: empty
sec-fetch-mode: no-cors
sec-fetch-site: same-site
content-length: 0
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:56 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
expires: Sat, 21 Dec 2024 14:52:55 GMT
cache-control: no-cache
x-duckduckgo-locale: en_US
DNS

233.54.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

233.54.223.20.in-addr.arpa

IN PTR

Response
DNS

external-content.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

external-content.duckduckgo.com

IN A

Response

external-content.duckduckgo.com

IN A

52.142.125.222
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fwww.bing.com%2Fth%3Fpid%3DAdsPlus%26id%3DODLS.43603529-9bfa-422a-bee1-1dfb8baf1ad8%26w%3D32%26h%3D32&f=1

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Fwww.bing.com%2Fth%3Fpid%3DAdsPlus%26id%3DODLS.43603529-9bfa-422a-bee1-1dfb8baf1ad8%26w%3D32%26h%3D32&f=1 HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/x-icon
vary: Accept-Encoding
vary: Accept-Encoding
expires: Mon, 20 Jan 2025 14:52:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.6lSWTHIpJqlPry2FuZ-mdAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=5b1c61bd4969a4d9d6757be05c584edce04a60d5d99860ece2b2796b5192bc1b&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.6lSWTHIpJqlPry2FuZ-mdAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=5b1c61bd4969a4d9d6757be05c584edce04a60d5d99860ece2b2796b5192bc1b&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/x-icon
vary: Accept-Encoding
vary: Accept-Encoding
expires: Mon, 20 Jan 2025 14:52:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.oVmL5RBb3tk-zb9fu6_SWAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=59dfa7a2c5d0e43eb5d98167a444fabf01a88bf6f6cd6286e6a04fe8e8029d67&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.oVmL5RBb3tk-zb9fu6_SWAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=59dfa7a2c5d0e43eb5d98167a444fabf01a88bf6f6cd6286e6a04fe8e8029d67&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/x-icon
vary: Accept-Encoding
vary: Accept-Encoding
expires: Mon, 20 Jan 2025 14:52:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.-3bGaMXiHqeXdCXO4JJqVgEkII%26pid%3DApi%26h%3D120&f=1&ipt=d3943bfbfab4bcc5042bc2e7cd2357d330af3c990955b6b255a49ac2a420e1b3&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.-3bGaMXiHqeXdCXO4JJqVgEkII%26pid%3DApi%26h%3D120&f=1&ipt=d3943bfbfab4bcc5042bc2e7cd2357d330af3c990955b6b255a49ac2a420e1b3&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/x-icon
vary: Accept-Encoding
vary: Accept-Encoding
expires: Mon, 20 Jan 2025 14:52:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://external-content.duckduckgo.com/ip3/www.tiktok.com.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/www.tiktok.com.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 404

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/png
content-length: 1478
etag: "673f4227-5c6"
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.fmFB0flDQgaeP_XJEUFIXQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=8af6dd4ae6faac70e73918a7112bd5b9068646eb8380b45425050ee8d0c4d2af&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.fmFB0flDQgaeP_XJEUFIXQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=8af6dd4ae6faac70e73918a7112bd5b9068646eb8380b45425050ee8d0c4d2af&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/png
content-length: 1935
content-disposition: inline; filename="th-3790160371"; filename*=UTF-8''th-3790160371
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/ip3/www.merriam-webster.com.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/www.merriam-webster.com.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-23195324"; filename*=UTF-8''th-23195324
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/ip3/www.wix.com.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/www.wix.com.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-2134012118"; filename*=UTF-8''th-2134012118
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/ip3/kaydee.net.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/kaydee.net.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/x-icon
vary: Accept-Encoding
vary: Accept-Encoding
expires: Mon, 20 Jan 2025 14:52:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.cBEW4e8NrYwZUF2uITDATQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=35c71e22b0dc653e41ed826613c9173b502bed55d043d1f83efed88e4225c5b6&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.cBEW4e8NrYwZUF2uITDATQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=35c71e22b0dc653e41ed826613c9173b502bed55d043d1f83efed88e4225c5b6&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-2286227587"; filename*=UTF-8''th-2286227587
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.zEGBH_hDdxJ_KKnZ7wwdCQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=fd6c7d3b328fbd199e8dded8ef4cfa383377c7a5406d63defdd37e4c9469cb6f&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.zEGBH_hDdxJ_KKnZ7wwdCQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=fd6c7d3b328fbd199e8dded8ef4cfa383377c7a5406d63defdd37e4c9469cb6f&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/x-icon
vary: Accept-Encoding
vary: Accept-Encoding
expires: Mon, 20 Jan 2025 14:52:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.i9CTD0EqpE7NyNKOSfcinQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=2c55c7b7c44ef2f0d803a77d4415bfc9ba2ad4fdd33194ad941cee9100c9b461&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.i9CTD0EqpE7NyNKOSfcinQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=2c55c7b7c44ef2f0d803a77d4415bfc9ba2ad4fdd33194ad941cee9100c9b461&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/x-icon
vary: Accept-Encoding
vary: Accept-Encoding
expires: Mon, 20 Jan 2025 14:52:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
x-duckduckgo-locale: en_US
content-encoding: br
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.QfNbDvfDIW3R4gHclrMc6wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=4bf2c823d82051c995a30b3703059f969eb7de0c179352d2c9225086c7d7918e&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.QfNbDvfDIW3R4gHclrMc6wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=4bf2c823d82051c995a30b3703059f969eb7de0c179352d2c9225086c7d7918e&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-2902188370"; filename*=UTF-8''th-2902188370
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.CP1DuyiNb0BJ-Cy5rqq_8AHgFo%26pid%3DApi%26h%3D120&f=1&ipt=742987b8f11c36311794f4c14d6989af638785f094d8911679f99380b6534a93&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.CP1DuyiNb0BJ-Cy5rqq_8AHgFo%26pid%3DApi%26h%3D120&f=1&ipt=742987b8f11c36311794f4c14d6989af638785f094d8911679f99380b6534a93&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-2137558134"; filename*=UTF-8''th-2137558134
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.bpwSf5b3PfM1JLjUp49P9wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=efa9cedca54bc1d303aa66932b16a1e95e9da644168eb1449acecaa07958254a&ipo=videos

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.bpwSf5b3PfM1JLjUp49P9wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=efa9cedca54bc1d303aa66932b16a1e95e9da644168eb1449acecaa07958254a&ipo=videos HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-2827203979"; filename*=UTF-8''th-2827203979
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/ip3/www.britannica.com.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/www.britannica.com.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-73648526"; filename*=UTF-8''th-73648526
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/ip3/www.hashtags.org.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/www.hashtags.org.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-3814497973"; filename*=UTF-8''th-3814497973
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/ip3/blog.hootsuite.com.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/blog.hootsuite.com.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-3204663147"; filename*=UTF-8''th-3204663147
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/ip3/www.socialpilot.co.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/www.socialpilot.co.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/jpeg
content-disposition: inline; filename="th-951213016"; filename*=UTF-8''th-951213016
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
expires: Sun, 21 Dec 2025 14:52:41 GMT
cache-control: max-age=31536000
x-duckduckgo-locale: en_US
GET

https://external-content.duckduckgo.com/ip3/dictionary.cambridge.org.ico

firefox.exe

Remote address:

52.142.125.222:443

Request

GET /ip3/dictionary.cambridge.org.ico HTTP/2.0
host: external-content.duckduckgo.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
referer: https://duckduckgo.com/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-site
te: trailers

Response

HTTP/2.0 200

server: nginx
date: Sat, 21 Dec 2024 14:52:41 GMT
content-type: image/x-icon
vary: Accept-Encoding
vary: Accept-Encoding
expires: Mon, 20 Jan 2025 14:52:41 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-xss-protection: 1;mode=block
x-content-type-options: nosniff
referrer-policy: origin
expect-ct: max-age=0
x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
x-duckduckgo-locale: en_US
content-encoding: br
DNS

external-content.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

external-content.duckduckgo.com

IN A

Response

external-content.duckduckgo.com

IN A

52.142.125.222
DNS

external-content.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

external-content.duckduckgo.com

IN A

Response

external-content.duckduckgo.com

IN A

52.142.125.222
DNS

external-content.duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

external-content.duckduckgo.com

IN AAAA

Response
DNS

222.125.142.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

222.125.142.52.in-addr.arpa

IN PTR

Response
DNS

location.services.mozilla.com

firefox.exe

Remote address:

8.8.8.8:53

Request

location.services.mozilla.com

IN A

Response

location.services.mozilla.com

IN CNAME

prod.classify-client.prod.webservices.mozgcp.net

prod.classify-client.prod.webservices.mozgcp.net

IN A

35.190.72.216
DNS

prod.balrog.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.balrog.prod.cloudops.mozgcp.net

IN A

Response

prod.balrog.prod.cloudops.mozgcp.net

IN A

35.244.181.201
DNS

prod.classify-client.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.classify-client.prod.webservices.mozgcp.net

IN A

Response

prod.classify-client.prod.webservices.mozgcp.net

IN A

35.190.72.216
DNS

prod.classify-client.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.classify-client.prod.webservices.mozgcp.net

IN A

Response

prod.classify-client.prod.webservices.mozgcp.net

IN A

35.190.72.216
DNS

prod.balrog.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.balrog.prod.cloudops.mozgcp.net

IN AAAA

Response
DNS

prod.balrog.prod.cloudops.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.balrog.prod.cloudops.mozgcp.net

IN AAAA

Response
DNS

prod.classify-client.prod.webservices.mozgcp.net

firefox.exe

Remote address:

8.8.8.8:53

Request

prod.classify-client.prod.webservices.mozgcp.net

IN AAAA

Response
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN A

Response

redirector.gvt1.com

IN A

172.217.20.174
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN A

Response

redirector.gvt1.com

IN A

172.217.20.174
DNS

ciscobinary.openh264.org

firefox.exe

Remote address:

8.8.8.8:53

Request

ciscobinary.openh264.org

IN A

Response

ciscobinary.openh264.org

IN CNAME

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

IN CNAME

a17.rackcdn.com

a17.rackcdn.com

IN CNAME

a17.rackcdn.com.mdc.edgesuite.net

a17.rackcdn.com.mdc.edgesuite.net

IN CNAME

a19.dscg10.akamai.net

a19.dscg10.akamai.net

IN A

88.221.134.209

a19.dscg10.akamai.net

IN A

88.221.134.155
DNS

ciscobinary.openh264.org

firefox.exe

Remote address:

8.8.8.8:53

Request

ciscobinary.openh264.org

IN A

Response

ciscobinary.openh264.org

IN CNAME

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com

IN CNAME

a17.rackcdn.com

a17.rackcdn.com

IN CNAME

a17.rackcdn.com.mdc.edgesuite.net

a17.rackcdn.com.mdc.edgesuite.net

IN CNAME

a19.dscg10.akamai.net

a19.dscg10.akamai.net

IN A

88.221.134.209

a19.dscg10.akamai.net

IN A

88.221.134.155
GET

https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip

firefox.exe

Remote address:

172.217.20.174:443

Request

GET /edgedl/widevine-cdm/4.10.2710.0-win-x64.zip HTTP/2.0
host: redirector.gvt1.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
accept: */*
accept-language: en-US,en;q=0.5
accept-encoding: gzip, deflate, br
te: trailers
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN A

Response

redirector.gvt1.com

IN A

172.217.20.174
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN A

Response

redirector.gvt1.com

IN A

172.217.20.174
GET

http://ciscobinary.openh264.org/openh264-win64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip

firefox.exe

Remote address:

88.221.134.209:80

Request

GET /openh264-win64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

Response

HTTP/1.1 200 OK

Last-Modified: Fri, 08 Nov 2024 02:37:54 GMT
ETag: 09372174e83dbbf696ee732fd2e875bb
Content-Length: 491284
Accept-Ranges: bytes
X-Timestamp: 1731033473.13891
Content-Type: application/zip
X-Trans-Id: txe2d6fd5524464f55a6fac-00673047f0dfw1
Cache-Control: public, max-age=235946
Expires: Tue, 24 Dec 2024 08:25:15 GMT
Date: Sat, 21 Dec 2024 14:52:49 GMT
Connection: keep-alive
DNS

a19.dscg10.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a19.dscg10.akamai.net

IN A

Response

a19.dscg10.akamai.net

IN A

88.221.134.209

a19.dscg10.akamai.net

IN A

88.221.134.155
DNS

a19.dscg10.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a19.dscg10.akamai.net

IN A

Response

a19.dscg10.akamai.net

IN A

88.221.134.155

a19.dscg10.akamai.net

IN A

88.221.134.209
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN AAAA

Response

redirector.gvt1.com

IN AAAA

2a00:1450:4007:80c::200e
DNS

redirector.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

redirector.gvt1.com

IN AAAA

Response

redirector.gvt1.com

IN AAAA

2a00:1450:4007:80c::200e
DNS

a19.dscg10.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a19.dscg10.akamai.net

IN AAAA

Response

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:86d1

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:869b
DNS

a19.dscg10.akamai.net

firefox.exe

Remote address:

8.8.8.8:53

Request

a19.dscg10.akamai.net

IN AAAA

Response

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:869b

a19.dscg10.akamai.net

IN AAAA

2a02:26f0:a1::58dd:86d1
DNS

r4---sn-aigzrnsz.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r4---sn-aigzrnsz.gvt1.com

IN A

Response

r4---sn-aigzrnsz.gvt1.com

IN CNAME

r4.sn-aigzrnsz.gvt1.com

r4.sn-aigzrnsz.gvt1.com

IN A

74.125.175.169
DNS

r4---sn-aigzrnsz.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r4---sn-aigzrnsz.gvt1.com

IN A

Response

r4---sn-aigzrnsz.gvt1.com

IN CNAME

r4.sn-aigzrnsz.gvt1.com

r4.sn-aigzrnsz.gvt1.com

IN A

74.125.175.169
GET

https://r4---sn-aigzrnsz.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip?cms_redirect=yes&met=1734792769,&mh=R8&mip=181.215.176.83&mm=28&mn=sn-aigzrnsz&ms=nvh&mt=1734792259&mv=m&mvi=4&pl=27&rmhost=r1---sn-aigzrnsz.gvt1.com&rms=nvh,nvh&shardbypass=sd&smhost=r2---sn-aigzrn7s.gvt1.com

firefox.exe

Remote address:

74.125.175.169:443

Request

GET /edgedl/widevine-cdm/4.10.2710.0-win-x64.zip?cms_redirect=yes&met=1734792769,&mh=R8&mip=181.215.176.83&mm=28&mn=sn-aigzrnsz&ms=nvh&mt=1734792259&mv=m&mvi=4&pl=27&rmhost=r1---sn-aigzrnsz.gvt1.com&rms=nvh,nvh&shardbypass=sd&smhost=r2---sn-aigzrn7s.gvt1.com HTTP/1.1
Host: r4---sn-aigzrnsz.gvt1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive

Response

HTTP/1.1 200 OK

Accept-Ranges: bytes
Cache-Control: public,max-age=86400
Content-Disposition: attachment
Content-Length: 14485862
Content-Security-Policy: default-src 'none'
Content-Type: application/zip
Etag: "1d3918c"
Server: downloads
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0
Date: Sat, 21 Dec 2024 11:59:27 GMT
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Last-Modified: Thu, 05 Oct 2023 00:56:47 GMT
Connection: keep-alive
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
Vary: Origin
DNS

r4.sn-aigzrnsz.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r4.sn-aigzrnsz.gvt1.com

IN A

Response

r4.sn-aigzrnsz.gvt1.com

IN A

74.125.175.169
DNS

r4.sn-aigzrnsz.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r4.sn-aigzrnsz.gvt1.com

IN A

Response

r4.sn-aigzrnsz.gvt1.com

IN A

74.125.175.169
DNS

r4.sn-aigzrnsz.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r4.sn-aigzrnsz.gvt1.com

IN AAAA

Response

r4.sn-aigzrnsz.gvt1.com

IN AAAA

2a00:1450:4009:1b::9
DNS

r4.sn-aigzrnsz.gvt1.com

firefox.exe

Remote address:

8.8.8.8:53

Request

r4.sn-aigzrnsz.gvt1.com

IN AAAA

Response

r4.sn-aigzrnsz.gvt1.com

IN AAAA

2a00:1450:4009:1b::9
DNS

216.72.190.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

216.72.190.35.in-addr.arpa

IN PTR

Response

216.72.190.35.in-addr.arpa

IN PTR

2167219035bcgoogleusercontentcom
DNS

216.72.190.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

216.72.190.35.in-addr.arpa

IN PTR

Response

216.72.190.35.in-addr.arpa

IN PTR

2167219035bcgoogleusercontentcom
DNS

209.134.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

209.134.221.88.in-addr.arpa

IN PTR

Response

209.134.221.88.in-addr.arpa

IN PTR

a88-221-134-209deploystaticakamaitechnologiescom
DNS

209.134.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

209.134.221.88.in-addr.arpa

IN PTR
DNS

174.20.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.20.217.172.in-addr.arpa

IN PTR

Response

174.20.217.172.in-addr.arpa

IN PTR

waw02s07-in-f141e100net

174.20.217.172.in-addr.arpa

IN PTR

par10s49-in-f14�I

174.20.217.172.in-addr.arpa

IN PTR

waw02s07-in-f174�I
DNS

174.20.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.20.217.172.in-addr.arpa

IN PTR
DNS

169.175.125.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

169.175.125.74.in-addr.arpa

IN PTR

Response

169.175.125.74.in-addr.arpa

IN PTR

lhr48s34-in-f91e100net
DNS

169.175.125.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

169.175.125.74.in-addr.arpa

IN PTR
DNS

169.175.125.74.in-addr.arpa

Remote address:

8.8.8.8:53

Request

169.175.125.74.in-addr.arpa

IN PTR
DNS

201.181.244.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

201.181.244.35.in-addr.arpa

IN PTR

Response

201.181.244.35.in-addr.arpa

IN PTR

20118124435bcgoogleusercontentcom
DNS

201.181.244.35.in-addr.arpa

Remote address:

8.8.8.8:53

Request

201.181.244.35.in-addr.arpa

IN PTR
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN A

Response

duckduckgo.com

IN A

52.142.124.215
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN A

Response

duckduckgo.com

IN A

52.142.124.215
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN AAAA

Response
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN AAAA

Response
DNS

168.253.116.51.in-addr.arpa

Remote address:

8.8.8.8:53

Request

168.253.116.51.in-addr.arpa

IN PTR

Response
DNS

gofile.io

Remote address:

8.8.8.8:53

Request

gofile.io

IN A

Response

gofile.io

IN A

45.112.123.126
DNS

gofile.io

Remote address:

8.8.8.8:53

Request

gofile.io

IN A

Response

gofile.io

IN A

45.112.123.126
GET

http://gofile.io/

Remote address:

45.112.123.126:80

Request

GET / HTTP/1.1
Host: gofile.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

Response

HTTP/1.1 301 Moved Permanently

Server: nginx/1.27.1
Date: Sat, 21 Dec 2024 14:54:32 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://gofile.io/
DNS

gofile.io

Remote address:

8.8.8.8:53

Request

gofile.io

IN A

Response

gofile.io

IN A

45.112.123.126
DNS

gofile.io

Remote address:

8.8.8.8:53

Request

gofile.io

IN AAAA

Response
DNS

126.123.112.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

126.123.112.45.in-addr.arpa

IN PTR

Response
DNS

s.gofile.io

Remote address:

8.8.8.8:53

Request

s.gofile.io

IN A

Response

s.gofile.io

IN A

51.75.242.210
DNS

s.gofile.io

Remote address:

8.8.8.8:53

Request

s.gofile.io

IN A

Response

s.gofile.io

IN A

51.75.242.210
DNS

s.gofile.io

Remote address:

8.8.8.8:53

Request

s.gofile.io

IN AAAA

Response
DNS

api.gofile.io

Remote address:

8.8.8.8:53

Request

api.gofile.io

IN A

Response

api.gofile.io

IN A

45.112.123.126
DNS

api.gofile.io

Remote address:

8.8.8.8:53

Request

api.gofile.io

IN A

Response

api.gofile.io

IN A

45.112.123.126
DNS

api.gofile.io

Remote address:

8.8.8.8:53

Request

api.gofile.io

IN A

Response

api.gofile.io

IN A

45.112.123.126
DNS

api.gofile.io

Remote address:

8.8.8.8:53

Request

api.gofile.io

IN AAAA

Response
DNS

210.242.75.51.in-addr.arpa

Remote address:

8.8.8.8:53

Request

210.242.75.51.in-addr.arpa

IN PTR

Response

210.242.75.51.in-addr.arpa

IN PTR

mailgofileio
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN A

Response

duckduckgo.com

IN A

52.142.124.215
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN A

Response

duckduckgo.com

IN A

52.142.124.215
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN AAAA

Response
DNS

duckduckgo.com

firefox.exe

Remote address:

8.8.8.8:53

Request

duckduckgo.com

IN AAAA

Response
DNS

s.gofile.io

Remote address:

8.8.8.8:53

Request

s.gofile.io

IN AAAA

Response
DNS

store3.gofile.io

Remote address:

8.8.8.8:53

Request

store3.gofile.io

IN A

Response

store3.gofile.io

IN A

94.139.32.11
DNS

store3.gofile.io

Remote address:

8.8.8.8:53

Request

store3.gofile.io

IN A

Response

store3.gofile.io

IN A

94.139.32.11
DNS

store3.gofile.io

Remote address:

8.8.8.8:53

Request

store3.gofile.io

IN A

Response

store3.gofile.io

IN A

94.139.32.11
DNS

store3.gofile.io

Remote address:

8.8.8.8:53

Request

store3.gofile.io

IN A

Response

store3.gofile.io

IN A

94.139.32.11
DNS

store3.gofile.io

Remote address:

8.8.8.8:53

Request

store3.gofile.io

IN AAAA

Response
DNS

11.32.139.94.in-addr.arpa

Remote address:

8.8.8.8:53

Request

11.32.139.94.in-addr.arpa

IN PTR

Response
DNS

11.32.139.94.in-addr.arpa

Remote address:

8.8.8.8:53

Request

11.32.139.94.in-addr.arpa

IN PTR

Response

172.165.61.93:443

https://checkappexec.microsoft.com/windows/shell/actions

tls, http2

3.0kB
9.8kB
23
20

HTTP Request

POST https://checkappexec.microsoft.com/windows/shell/actions

HTTP Response

200
151.101.3.19:443

https://www.mozilla.org/media/img/favicons/firefox/browser/favicon.f093404c0135.ico

tls, http2

firefox.exe

10.2kB
621.8kB
115
506

HTTP Request

GET https://www.mozilla.org/firefox/welcome/21/

HTTP Response

302

HTTP Request

GET https://www.mozilla.org/en-US/firefox/welcome/21/

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/js/site.b49d941e3374.js

HTTP Request

GET https://www.mozilla.org/media/css/m24-root.77a146bcaf17.css

HTTP Request

GET https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css

HTTP Request

GET https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css

HTTP Request

GET https://www.mozilla.org/media/css/protocol-picto.cfee40a3cd36.css

HTTP Request

GET https://www.mozilla.org/media/css/firefox_welcome_page19_to_24.3bad9ee2f487.css

HTTP Request

GET https://www.mozilla.org/media/js/gtm-snippet.b5b7c885f8fa.js

HTTP Request

GET https://www.mozilla.org/media/img/logos/firefox/logo-word-hor.f3b18871b657.svg

HTTP Request

GET https://www.mozilla.org/media/js/sentry.1fd5e9589639.js

HTTP Request

GET https://www.mozilla.org/media/js/lib.7cb1e204ce21.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/js/fxa.6cacc544775b.js

HTTP Request

GET https://www.mozilla.org/media/js/data.438fd3539700.js

HTTP Request

GET https://www.mozilla.org/media/js/m24-ui.daf79f0fefd7.js

HTTP Request

GET https://www.mozilla.org/media/js/glean.f0ce2425d2c8.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/js/firefox_welcome_page19_to_24.87e13c35e608.js

HTTP Request

GET https://www.mozilla.org/media/js/consent-banner.f74bb4c07d16.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/protocol/fonts/Inter-Bold.0564381b22b2.woff2

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/protocol/img/icons/social/x/white.7f50edd82090.svg

HTTP Request

GET https://www.mozilla.org/media/protocol/img/icons/social/instagram/white.a7014a6150b3.svg

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/protocol/img/icons/social/linkedin/white.cdc0e910cc1e.svg

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/protocol/img/icons/social/tiktok/white.599403de7ac0.svg

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/protocol/img/icons/social/spotify/white.aa5334e85bae.svg

HTTP Request

GET https://www.mozilla.org/media/protocol/img/icons/social/youtube/white.4f314c43c69d.svg

HTTP Request

GET https://www.mozilla.org/media/img/icons/m24-small/globe-white.a76258f6a4cc.svg

HTTP Request

GET https://www.mozilla.org/media/img/icons/m24-small/down-caret-white.3aab868855c7.svg

HTTP Request

GET https://www.mozilla.org/media/protocol/fonts/Inter-Regular.d55e957612a3.woff2

HTTP Request

GET https://www.mozilla.org/media/protocol/fonts/Metropolis-Bold.6a80125e795a.woff2

HTTP Request

GET https://www.mozilla.org/media/fonts/m24/mozilla-text/MozillaText-SemiBold.c9ce5296db65.woff2

HTTP Request

GET https://www.mozilla.org/media/fonts/m24/mozilla-text/MozillaText-Regular.3fa5c88b0954.woff2

HTTP Request

GET https://www.mozilla.org/media/img/firefox/welcome/page20-21/back-up.b351cf7c2c5c.svg

HTTP Request

GET https://www.mozilla.org/media/img/firefox/welcome/page20-21/add-ons.809f56bff087.svg

HTTP Request

GET https://www.mozilla.org/media/img/firefox/welcome/page20-21/community.bf0cb1c38902.svg

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://www.mozilla.org/media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.png

HTTP Request

GET https://www.mozilla.org/media/img/favicons/firefox/browser/favicon.f093404c0135.ico

HTTP Response

200

HTTP Response

200
151.101.3.19:443

www.mozilla.org

tls, http2

firefox.exe

1.5kB
3.9kB
13
12
34.117.188.166:443

spocs.getpocket.com

tls, http2

firefox.exe

1.8kB
5.9kB
16
17
127.0.0.1:49756

firefox.exe
127.0.0.1:49764

firefox.exe
172.217.20.164:443

https://www.google.com/recaptcha/api.js

tls, http2

firefox.exe

3.2kB
12.8kB
24
34

HTTP Request

GET https://www.google.com/search?client=firefox-b-d&q=hashtag

HTTP Request

GET https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fclient%3Dfirefox-b-d%26q%3Dhashtag&q=EgS117BTGKysm7sGIjCCffrXHOhN71vu-jeogGdygaVg01jum0_3L9xnIs_Hys3M9ndSkUpFfEq02Grtt_QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

HTTP Response

429

HTTP Request

GET https://www.google.com/recaptcha/api.js
172.217.20.164:443

www.google.com

tls, http2

firefox.exe

1.4kB
5.2kB
11
10
52.142.124.215:80

ddg.gg

firefox.exe

190 B
92 B
4
2
52.142.124.215:80

http://ddg.gg/

http

firefox.exe

662 B
735 B
7
6

HTTP Request

GET http://ddg.gg/

HTTP Response

301
52.142.124.215:443

https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js

tls, http2

firefox.exe

78.3kB
3.4MB
1190
2570

HTTP Request

GET https://duckduckgo.com/

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/static-assets/font/ProximaNova-RegIt-webfont.woff2

HTTP Request

GET https://duckduckgo.com/static-assets/font/ProximaNova-ExtraBold-webfont.woff2

HTTP Request

GET https://duckduckgo.com/static-assets/font/ProximaNova-Reg-webfont.woff2

HTTP Request

GET https://duckduckgo.com/static-assets/font/ProximaNova-Sbold-webfont.woff2

HTTP Request

GET https://duckduckgo.com/static-assets/font/ProximaNova-Bold-webfont.woff2

HTTP Request

GET https://duckduckgo.com/_next/static/css/c64e3cce46526948.css

HTTP Request

GET https://duckduckgo.com/_next/static/css/5fd9baeedf731742.css

HTTP Request

GET https://duckduckgo.com/_next/static/css/a907368db829f88f.css

HTTP Request

GET https://duckduckgo.com/_next/static/css/d7a778b86846a7fd.css

HTTP Request

GET https://duckduckgo.com/_next/static/css/de1cb19794fd83e5.css

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/webpack-64c3d5bb8874f665.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/framework-f8115f7fae64930e.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/main-d4b13818a262f8be.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/pages/_app-52b84a5dde876133.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/12636-61ed9ec1b956b494.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/41664-0c7a5cf8f744007e.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/97179-5b6e68d94b3b6b3a.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/27575-a47bc7c3d905054b.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/81125-b74d1b6f4908497b.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/53343-e1b28b68883ff9df.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/62957-7d68a586e2f806a1.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/22868-cbd9348122d77c1b.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/25892-f67fb82768f62af4.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/41917-1597d070817d9087.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/73381-b9157a6253c5d3e8.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/64149-6960cae1da870bb4.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/26634-d8525d31fbb19710.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/59349-2b554244a2ef63c8.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/95639-17f30bca65bd9ea4.js

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/55204-ae0eef26f1bc26ef.js

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D-9c044649ecb45850.js

HTTP Request

GET https://duckduckgo.com/_next/static/oD1VI4kCyPoypb_amISYf/_buildManifest.js

HTTP Request

GET https://duckduckgo.com/_next/static/oD1VI4kCyPoypb_amISYf/_ssgManifest.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/_next/static/media/firefox-extension.8e658fcd.svg

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/backgrounds/homepage-btf-mobile-light.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/macos.61889438.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/windows.477fa143.png

HTTP Request

POST https://improving.duckduckgo.com/t/page_home_impression?5689491&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

HTTP Request

GET https://duckduckgo.com/_next/static/media/app-store.501fe17a.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/play-store.e5d5ed36.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/chrome-lg.a4859fb2.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/edge-lg.36af7682.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/firefox-lg.8efad702.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/opera-lg.237c4418.png

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png

HTTP Request

GET https://duckduckgo.com/_next/static/chunks/78597.c875db33140f7df5.js

HTTP Request

GET https://duckduckgo.com/static-assets/backgrounds/homepage-btf-light.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/flame-narrow.70589b7c.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/flame.1241f020.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/burn@2x.be0bd36d.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/flame@2x.40e1cfa0.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/widget-small@2x.07c865df.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/widget-big@2x.a260ccf6.png

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/_next/static/media/night@2x.4ca79636.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/dark-mode@2x.3e150d01.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png

HTTP Request

GET https://duckduckgo.com/country.json

HTTP Request

POST https://improving.duckduckgo.com/t/atb_home_impression?379630&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false&locale=en&origin=funnel_home

HTTP Request

POST https://improving.duckduckgo.com/t/atb_home_download_impression?63473&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&locale=en&origin=funnel_home

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png

HTTP Request

GET https://duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/_next/data/oD1VI4kCyPoypb_amISYf/about.json

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png

HTTP Request

GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/static-assets/favicons/DDG-iOS-icon_152x152.png

HTTP Request

GET https://duckduckgo.com/favicon.ico

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/ac/?q=h&kl=wt-wt

HTTP Response

200

HTTP Request

POST https://improving.duckduckgo.com/t/page_home_searchbox_suggest?5411334&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

HTTP Request

GET https://duckduckgo.com/ac/?q=ha&kl=wt-wt

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/ac/?q=has&kl=wt-wt

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/ac/?q=hash&kl=wt-wt

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/ac/?q=hasht&kl=wt-wt

HTTP Request

GET https://duckduckgo.com/ac/?q=hashta&kl=wt-wt

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/ac/?q=hashtag&kl=wt-wt

HTTP Response

200

HTTP Request

POST https://improving.duckduckgo.com/t/page_home_searchbox_submit?7641488&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

HTTP Request

GET https://duckduckgo.com/?t=h_&q=hashtag

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/dist/s.54d8dbeb4d33865059b6.css

HTTP Request

GET https://duckduckgo.com/dist/r.cb0b70e9c969a49a8655.css

HTTP Request

GET https://duckduckgo.com/dist/wpl.main.61734e925b14fbd21f05.css

HTTP Request

GET https://duckduckgo.com/font/ProximaNova-Reg-webfont.woff2

HTTP Request

GET https://duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2

HTTP Request

GET https://duckduckgo.com/dist/b.76f7b32785935b9052d8.js

HTTP Request

GET https://duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js

HTTP Request

GET https://duckduckgo.com/dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js

HTTP Request

GET https://duckduckgo.com/dist/util/u.a94849abb631fa45ce7f.js

HTTP Request

GET https://duckduckgo.com/dist/wpmv.76080f364d2af8dfd75f.js

HTTP Request

GET https://duckduckgo.com/dist/wpm.main.87246e50269b255c4907.js

HTTP Request

GET https://duckduckgo.com/dist/d.4fd7fada0d09b048b9a3.js

HTTP Request

GET https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200
52.142.124.215:443

improving.duckduckgo.com

tls, http2

firefox.exe

1.6kB
6.1kB
14
10
20.223.54.233:443

links.duckduckgo.com

tls, http2

firefox.exe

1.4kB
6.1kB
11
11
20.223.54.233:443

https://links.duckduckgo.com/d.js?q=hashtag&t=A&l=uk-en&s=0&a=h_&ct=GB&vqd=4-151242283305029547496619133909650327327&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&sp=0&dfrsp=1&baa=1&bcca=1&bpa=1&btaa=1&wrap=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b

tls, http2

firefox.exe

2.3kB
17.8kB
16
22

HTTP Request

GET https://links.duckduckgo.com/d.js?q=hashtag&t=A&l=uk-en&s=0&a=h_&ct=GB&vqd=4-151242283305029547496619133909650327327&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&sp=0&dfrsp=1&baa=1&bcca=1&bpa=1&btaa=1&wrap=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b

HTTP Response

200
52.142.124.215:443

https://improving.duckduckgo.com/t/serp_hidden?2651758&fromWebTab=1&vistedAltTab=na&visitedAltTabInitiallyVisible=na&nTabsVisited=1&ddgTabs=web_0&nTabs=7&altTabVisitDuration=na&darkMode=false&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&q=hashtag&ct=GB&rl=uk-en&duckassist=0&ads=1&organics=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

tls, http2

firefox.exe

22.0kB
874.7kB
198
705

HTTP Request

GET https://duckduckgo.com/dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js

HTTP Request

GET https://duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2

HTTP Request

GET https://duckduckgo.com/dist/wpmv.76080f364d2af8dfd75f.js

HTTP Request

GET https://duckduckgo.com/dist/b.76f7b32785935b9052d8.js

HTTP Request

GET https://duckduckgo.com/dist/wpm.main.87246e50269b255c4907.js

HTTP Request

GET https://duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js

HTTP Request

GET https://duckduckgo.com/dist/util/u.a94849abb631fa45ce7f.js

HTTP Request

GET https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js

HTTP Request

GET https://duckduckgo.com/dist/d.4fd7fada0d09b048b9a3.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/assets/logo_header.v109.svg

HTTP Request

GET https://duckduckgo.com/t.js?q=hashtag&t=A&l=uk-en&s=0&ct=GB&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&dfrsp=1&baa=1&bcca=1&btaa=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b

HTTP Request

GET https://duckduckgo.com/post3.html

HTTP Request

GET https://duckduckgo.com/dist/s.bf8da8d2f90d4dcd31ba.js

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/dist/react-assets/fe21b530ba74e4553643.svg

HTTP Request

GET https://duckduckgo.com/dist/react-assets/212874b7047e393bacb8.svg

HTTP Request

GET https://duckduckgo.com/dist/react-assets/23d563f964108cbb5b74.svg

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/assets/onboarding/data-for-sale@2x.png

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/assets/install_arrow.svg

HTTP Request

GET https://duckduckgo.com/assets/onboarding/atb-check.svg

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/dist/p.f5b58579149e7488209f.js

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2

HTTP Request

POST https://improving.duckduckgo.com/t/serp_browser_support?9152291&csssupports=1&csscustomproperties=1&cssgrid=1&cssgridadvanced=1&jsmodules=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/atbsi_firefox_v461-4?2862572&l=en_US&p=windows&ax=false&pre_va=_&pre_atbva=_&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/si?3611500&b=firefox&atbi=true&i=false&d=d&l=en_US&p=windows&pre_atb=v461-4&ax=false&ak=false&serp_return=0&pre_va=_&pre_atbva=_&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Response

200

HTTP Request

POST https://improving.duckduckgo.com/t/apss_f?4333506&preloaded=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/l_d_re?335189&iao=1&rl=uk-en&dl=&ck=0&atbi=true&i=false&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/ias_web?4044520&fromWebTab=1&initialState=active&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/ias_images?703954&fromWebTab=1&initialState=inactive&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/ias_videos?6115492&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/ias_news?4463112&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/ias_maps_expanded?8252694&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

POST https://improving.duckduckgo.com/t/ias_products?334100&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/ias_chat?3272444&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/i/7cb3af6667f33259.jpg

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/assets/icons/favicons/wikipedia.png

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/assets/icons/favicons/youtube.png

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/assets/icons/related/loupe-grey.svg

HTTP Request

POST https://improving.duckduckgo.com/t/ad_bingv7aa?6808854&n=1&rl=uk-en&sld=0&d=brand24.com&ds=brand24.com&debug=%5B%7B%22siteLinksLength%22%3A0%2C%22type%22%3A%22%22%7D%5D&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&ad_unit_index=8&isig=about:m&click_source=ad&instant_answers_shown=about%2Cvideos%2Crelated_searches&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://duckduckgo.com/y.js?ifu=%7B3%7Dappid%3D055AAD1BA669BEB8B048128DC89A107C678B527B%26rguid%3D03ee7f5a6852419d91d3017c61b6a4b5&iurl=%7B2%7DIG%3D7333678FF73344319EE73F71200F96F1%26CID%3D2D6B855AE21D6B6836169006E3506AC9%26Type%3DEvent.CPT%26DATA%3D0&impr=1m%3A6

HTTP Request

POST https://improving.duckduckgo.com/t/iaoi_wikipedia_fathead?7218733&id=about&fot=i&lot=i&dev=sidebar:relocated&fsig=m&ss=0&sp=0&im=1&ism=1&px=0&ul=0&wt=Hashtag&ibv=0&adc=1&default=1&area=mainline&wide=0&index=1&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/iaoi_videos?4365888&id=videos&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=4&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/iaoi_related_searches?8732386&id=related_searches&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=13&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/moreresults?950438&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/l2_d_re?3715292&osl=1&u=bingv7aa&rc=10&oll=en:10&q=hashtag&ct=GB&rl=uk-en&serp_return=0&organic_above_fold=0&bing_market=en-GB&has_rich_facts=false&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

POST https://improving.duckduckgo.com/t/adsummary?3722905&page=1&mainline_ad=1&mainline_products=0&mainline_products_middle=0&mainline_autoads=0&mainline_toursactivities=0&mainline_creditcards=0&sidebar_ad=0&sidebar_products=0&sidebar_products_middle=0&sidebar_autoads=0&sidebar_toursactivities=0&sidebar_creditcards=0&sidebar_multimedia_ad=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/dev?3211213&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&d=dictionary_definition%3Aother%3Amainline%3Adata%3A0%2Cvideos%3Amodule%3Amainline%3Aslotted%3A0%2Crelated_searches%3Amodule%3Amainline%3Aslotted%3A0%2Cabout%3Amodule%3Asidebar%3Arelocated%3A0&q=hashtag&serp_return=0&organic_above_fold=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/iaui?683383&missing=en_wikipedia_queries%2Cnlp_fathead%2Cnlp_wiki%2Cwikinlp%2Cdictionary_definition&shown=about%2Cvideos%2Crelated_searches&r1=en_wikipedia_queries,nlp_fathead,nlp_wiki,wikinlp&r2=wikinlp&r4=dictionary_definition&r6=dictionary_definition,wikinlp&r8=wikinlp&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

POST https://improving.duckduckgo.com/t/im_s?7403124&bfcache=0&bounce=0&vertical=web&retry=0&page=1&layoutready=1&abaready=1&aba=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Response

200

HTTP Request

POST https://improving.duckduckgo.com/t/webvitals?7053917&fromWebTab=1&TTFB=110.0000&FCP=692.0000&LCP=834.0000&has_performance=1&is_cached=0&navigation_type=navigate&has_back_data=1&is_loaded_from_bfcache=0&is_bounce_back=0&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Request

POST https://improving.duckduckgo.com/t/serp_hidden?2651758&fromWebTab=1&vistedAltTab=na&visitedAltTabInitiallyVisible=na&nTabsVisited=1&ddgTabs=web_0&nTabs=7&altTabVisitDuration=na&darkMode=false&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&q=hashtag&ct=GB&rl=uk-en&duckassist=0&ads=1&organics=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

HTTP Response

200

HTTP Response

200
52.142.125.222:443

https://external-content.duckduckgo.com/ip3/dictionary.cambridge.org.ico

tls, http2

firefox.exe

6.0kB
91.4kB
43
81

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fwww.bing.com%2Fth%3Fpid%3DAdsPlus%26id%3DODLS.43603529-9bfa-422a-bee1-1dfb8baf1ad8%26w%3D32%26h%3D32&f=1

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.6lSWTHIpJqlPry2FuZ-mdAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=5b1c61bd4969a4d9d6757be05c584edce04a60d5d99860ece2b2796b5192bc1b&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.oVmL5RBb3tk-zb9fu6_SWAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=59dfa7a2c5d0e43eb5d98167a444fabf01a88bf6f6cd6286e6a04fe8e8029d67&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.-3bGaMXiHqeXdCXO4JJqVgEkII%26pid%3DApi%26h%3D120&f=1&ipt=d3943bfbfab4bcc5042bc2e7cd2357d330af3c990955b6b255a49ac2a420e1b3&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/ip3/www.tiktok.com.ico

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.fmFB0flDQgaeP_XJEUFIXQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=8af6dd4ae6faac70e73918a7112bd5b9068646eb8380b45425050ee8d0c4d2af&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/ip3/www.merriam-webster.com.ico

HTTP Request

GET https://external-content.duckduckgo.com/ip3/www.wix.com.ico

HTTP Request

GET https://external-content.duckduckgo.com/ip3/kaydee.net.ico

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.cBEW4e8NrYwZUF2uITDATQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=35c71e22b0dc653e41ed826613c9173b502bed55d043d1f83efed88e4225c5b6&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.zEGBH_hDdxJ_KKnZ7wwdCQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=fd6c7d3b328fbd199e8dded8ef4cfa383377c7a5406d63defdd37e4c9469cb6f&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.i9CTD0EqpE7NyNKOSfcinQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=2c55c7b7c44ef2f0d803a77d4415bfc9ba2ad4fdd33194ad941cee9100c9b461&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.QfNbDvfDIW3R4gHclrMc6wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=4bf2c823d82051c995a30b3703059f969eb7de0c179352d2c9225086c7d7918e&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.CP1DuyiNb0BJ-Cy5rqq_8AHgFo%26pid%3DApi%26h%3D120&f=1&ipt=742987b8f11c36311794f4c14d6989af638785f094d8911679f99380b6534a93&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.bpwSf5b3PfM1JLjUp49P9wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=efa9cedca54bc1d303aa66932b16a1e95e9da644168eb1449acecaa07958254a&ipo=videos

HTTP Request

GET https://external-content.duckduckgo.com/ip3/www.britannica.com.ico

HTTP Request

GET https://external-content.duckduckgo.com/ip3/www.hashtags.org.ico

HTTP Request

GET https://external-content.duckduckgo.com/ip3/blog.hootsuite.com.ico

HTTP Request

GET https://external-content.duckduckgo.com/ip3/www.socialpilot.co.ico

HTTP Request

GET https://external-content.duckduckgo.com/ip3/dictionary.cambridge.org.ico

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

404

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200
52.142.125.222:443

external-content.duckduckgo.com

tls, http2

firefox.exe

1.4kB
6.1kB
10
12
52.142.125.222:443

external-content.duckduckgo.com

tls, http2

firefox.exe

1.4kB
6.2kB
10
14
52.142.125.222:443

external-content.duckduckgo.com

tls, http2

firefox.exe

1.5kB
6.2kB
11
12
52.142.125.222:443

external-content.duckduckgo.com

tls, http2

firefox.exe

1.4kB
6.2kB
10
12
52.142.125.222:443

external-content.duckduckgo.com

tls, http2

firefox.exe

1.5kB
6.2kB
11
12
172.217.20.174:443

https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip

tls, http2

firefox.exe

1.6kB
8.9kB
17
21

HTTP Request

GET https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip
88.221.134.209:80

http://ciscobinary.openh264.org/openh264-win64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip

http

firefox.exe

5.5kB
506.9kB
112
377

HTTP Request

GET http://ciscobinary.openh264.org/openh264-win64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip

HTTP Response

200
74.125.175.169:443

https://r4---sn-aigzrnsz.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip?cms_redirect=yes&met=1734792769,&mh=R8&mip=181.215.176.83&mm=28&mn=sn-aigzrnsz&ms=nvh&mt=1734792259&mv=m&mvi=4&pl=27&rmhost=r1---sn-aigzrnsz.gvt1.com&rms=nvh,nvh&shardbypass=sd&smhost=r2---sn-aigzrn7s.gvt1.com

tls, http

firefox.exe

231.7kB
15.0MB
4063
10730

HTTP Request

GET https://r4---sn-aigzrnsz.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip?cms_redirect=yes&met=1734792769,&mh=R8&mip=181.215.176.83&mm=28&mn=sn-aigzrnsz&ms=nvh&mt=1734792259&mv=m&mvi=4&pl=27&rmhost=r1---sn-aigzrnsz.gvt1.com&rms=nvh,nvh&shardbypass=sd&smhost=r2---sn-aigzrn7s.gvt1.com

HTTP Response

200
45.112.123.126:80

gofile.io

190 B
92 B
4
2
45.112.123.126:80

http://gofile.io/

http

757 B
754 B
9
8

HTTP Request

GET http://gofile.io/

HTTP Response

301
45.112.123.126:443

gofile.io

tls

5.7kB
450.5kB
70
345
51.75.242.210:443

s.gofile.io

tls

2.3kB
6.2kB
11
14
51.75.242.210:443

s.gofile.io

tls

3.1kB
5.3kB
18
20
45.112.123.126:443

api.gofile.io

tls

4.5kB
18.3kB
34
42
52.142.124.215:443

improving.duckduckgo.com

tls

2.7kB
7.1kB
14
21
94.139.32.11:443

store3.gofile.io

tls

106.2kB
7.8kB
89
51
94.139.32.11:443

store3.gofile.io

tls

1.4kB
4.6kB
10
9

8.8.8.8:53

28.118.140.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

28.118.140.52.in-addr.arpa
8.8.8.8:53

71.159.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

71.159.190.20.in-addr.arpa
8.8.8.8:53

97.17.167.52.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

97.17.167.52.in-addr.arpa
8.8.8.8:53

149.220.183.52.in-addr.arpa

dns

146 B
147 B
2
1

DNS Request

149.220.183.52.in-addr.arpa

DNS Request

149.220.183.52.in-addr.arpa
8.8.8.8:53

checkappexec.microsoft.com

dns

72 B
192 B
1
1

DNS Request

checkappexec.microsoft.com

DNS Response

172.165.61.93
8.8.8.8:53

93.61.165.172.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

93.61.165.172.in-addr.arpa
8.8.8.8:53

212.20.149.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

212.20.149.52.in-addr.arpa
8.8.8.8:53

15.164.165.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

15.164.165.52.in-addr.arpa
8.8.8.8:53

83.210.23.2.in-addr.arpa

dns

70 B
133 B
1
1

DNS Request

83.210.23.2.in-addr.arpa
8.8.8.8:53

14.227.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

14.227.111.52.in-addr.arpa
8.8.8.8:53

www.mozilla.org

dns

firefox.exe

61 B
166 B
1
1

DNS Request

www.mozilla.org

DNS Response

151.101.3.19

151.101.67.19

151.101.131.19

151.101.195.19
8.8.8.8:53

www-mozilla.fastly-edge.com

dns

firefox.exe

73 B
137 B
1
1

DNS Request

www-mozilla.fastly-edge.com

DNS Response

151.101.195.19

151.101.3.19

151.101.131.19

151.101.67.19
8.8.8.8:53

www-mozilla.fastly-edge.com

dns

firefox.exe

73 B
185 B
1
1

DNS Request

www-mozilla.fastly-edge.com

DNS Response

2a04:4e42:600::787

2a04:4e42:400::787

2a04:4e42:200::787

2a04:4e42::787
8.8.8.8:53

spocs.getpocket.com

dns

firefox.exe

65 B
131 B
1
1

DNS Request

spocs.getpocket.com

DNS Response

34.117.188.166
8.8.8.8:53

firefox-api-proxy.cdn.mozilla.net

dns

firefox.exe

79 B
160 B
1
1

DNS Request

firefox-api-proxy.cdn.mozilla.net

DNS Response

34.149.97.1
34.117.188.166:443

spocs.getpocket.com

https

firefox.exe

2.1kB
11.6kB
9
13
8.8.8.8:53

prod.ads.prod.webservices.mozgcp.net

dns

firefox.exe

82 B
98 B
1
1

DNS Request

prod.ads.prod.webservices.mozgcp.net

DNS Response

34.117.188.166
34.149.97.1:443

firefox-api-proxy.cdn.mozilla.net

https

firefox.exe

2.1kB
12.7kB
7
13
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
116 B
1
1

DNS Request

shavar.prod.mozaws.net

DNS Response

52.40.120.141

44.240.87.158

44.228.225.150
8.8.8.8:53

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

dns

firefox.exe

100 B
116 B
1
1

DNS Request

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

DNS Response

34.149.97.1
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
119 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

34.160.144.191
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
110 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net

DNS Response

34.149.100.209
8.8.8.8:53

prod.ads.prod.webservices.mozgcp.net

dns

firefox.exe

82 B
175 B
1
1

DNS Request

prod.ads.prod.webservices.mozgcp.net
8.8.8.8:53

shavar.prod.mozaws.net

dns

firefox.exe

68 B
153 B
1
1

DNS Request

shavar.prod.mozaws.net
8.8.8.8:53

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

dns

firefox.exe

100 B
128 B
1
1

DNS Request

firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

DNS Response

2600:1901:0:74e4::
8.8.8.8:53

prod.content-signature-chains.prod.webservices.mozgcp.net

dns

firefox.exe

103 B
131 B
1
1

DNS Request

prod.content-signature-chains.prod.webservices.mozgcp.net

DNS Response

2600:1901:0:92a9::
8.8.8.8:53

prod.remote-settings.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
187 B
1
1

DNS Request

prod.remote-settings.prod.webservices.mozgcp.net
8.8.8.8:53

19.3.101.151.in-addr.arpa

dns

71 B
131 B
1
1

DNS Request

19.3.101.151.in-addr.arpa
8.8.8.8:53

150.225.228.44.in-addr.arpa

dns

146 B
274 B
2
2

DNS Request

150.225.228.44.in-addr.arpa

DNS Request

150.225.228.44.in-addr.arpa
8.8.8.8:53

www.google.com

dns

firefox.exe

120 B
152 B
2
2

DNS Request

www.google.com

DNS Request

www.google.com

DNS Response

172.217.20.164

DNS Response

172.217.20.164
8.8.8.8:53

www.google.com

dns

firefox.exe

60 B
76 B
1
1

DNS Request

www.google.com

DNS Response

172.217.20.164
8.8.8.8:53

www.google.com

dns

firefox.exe

120 B
176 B
2
2

DNS Request

www.google.com

DNS Request

www.google.com

DNS Response

2a00:1450:4007:80c::2004

DNS Response

2a00:1450:4007:80c::2004
172.217.20.164:443

www.google.com

https

firefox.exe

6.7kB
54.8kB
23
54
8.8.8.8:53

164.20.217.172.in-addr.arpa

dns

73 B
171 B
1
1

DNS Request

164.20.217.172.in-addr.arpa
8.8.8.8:53

195.20.217.172.in-addr.arpa

dns

73 B
171 B
1
1

DNS Request

195.20.217.172.in-addr.arpa
8.8.8.8:53

163.20.217.172.in-addr.arpa

dns

73 B
171 B
1
1

DNS Request

163.20.217.172.in-addr.arpa
8.8.8.8:53

ddg.gg

dns

firefox.exe

104 B
136 B
2
2

DNS Request

ddg.gg

DNS Request

ddg.gg

DNS Response

52.142.124.215

DNS Response

52.142.124.215
8.8.8.8:53

ddg.gg

dns

firefox.exe

104 B
136 B
2
2

DNS Request

ddg.gg

DNS Request

ddg.gg

DNS Response

52.142.124.215

DNS Response

52.142.124.215
8.8.8.8:53

ddg.gg

dns

firefox.exe

104 B
234 B
2
2

DNS Request

ddg.gg

DNS Request

ddg.gg
8.8.8.8:53

215.124.142.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

215.124.142.52.in-addr.arpa
8.8.8.8:53

duckduckgo.com

dns

firefox.exe

60 B
76 B
1
1

DNS Request

duckduckgo.com

DNS Response

52.142.124.215
8.8.8.8:53

duckduckgo.com

dns

firefox.exe

60 B
76 B
1
1

DNS Request

duckduckgo.com

DNS Response

52.142.124.215
8.8.8.8:53

duckduckgo.com

dns

firefox.exe

120 B
250 B
2
2

DNS Request

duckduckgo.com

DNS Request

duckduckgo.com
8.8.8.8:53

improving.duckduckgo.com

dns

firefox.exe

140 B
200 B
2
2

DNS Request

improving.duckduckgo.com

DNS Request

improving.duckduckgo.com

DNS Response

52.142.124.215

DNS Response

52.142.124.215
8.8.8.8:53

links.duckduckgo.com

dns

firefox.exe

132 B
164 B
2
2

DNS Request

links.duckduckgo.com

DNS Request

links.duckduckgo.com

DNS Response

20.223.54.233

DNS Response

20.223.54.233
8.8.8.8:53

links.duckduckgo.com

dns

firefox.exe

132 B
164 B
2
2

DNS Request

links.duckduckgo.com

DNS Request

links.duckduckgo.com

DNS Response

20.223.54.233

DNS Response

20.223.54.233
8.8.8.8:53

links.duckduckgo.com

dns

firefox.exe

66 B
131 B
1
1

DNS Request

links.duckduckgo.com
8.8.8.8:53

233.54.223.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

233.54.223.20.in-addr.arpa
8.8.8.8:53

external-content.duckduckgo.com

dns

firefox.exe

77 B
93 B
1
1

DNS Request

external-content.duckduckgo.com

DNS Response

52.142.125.222
8.8.8.8:53

external-content.duckduckgo.com

dns

firefox.exe

154 B
186 B
2
2

DNS Request

external-content.duckduckgo.com

DNS Request

external-content.duckduckgo.com

DNS Response

52.142.125.222

DNS Response

52.142.125.222
8.8.8.8:53

external-content.duckduckgo.com

dns

firefox.exe

77 B
142 B
1
1

DNS Request

external-content.duckduckgo.com
8.8.8.8:53

222.125.142.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

222.125.142.52.in-addr.arpa
8.8.8.8:53

location.services.mozilla.com

dns

firefox.exe

75 B
153 B
1
1

DNS Request

location.services.mozilla.com

DNS Response

35.190.72.216
8.8.8.8:53

prod.balrog.prod.cloudops.mozgcp.net

dns

firefox.exe

82 B
98 B
1
1

DNS Request

prod.balrog.prod.cloudops.mozgcp.net

DNS Response

35.244.181.201
8.8.8.8:53

prod.classify-client.prod.webservices.mozgcp.net

dns

firefox.exe

188 B
220 B
2
2

DNS Request

prod.classify-client.prod.webservices.mozgcp.net

DNS Response

35.190.72.216

DNS Request

prod.classify-client.prod.webservices.mozgcp.net

DNS Response

35.190.72.216
35.190.72.216:443

prod.classify-client.prod.webservices.mozgcp.net

https

firefox.exe

2.0kB
4.6kB
7
8
8.8.8.8:53

prod.balrog.prod.cloudops.mozgcp.net

dns

firefox.exe

164 B
350 B
2
2

DNS Request

prod.balrog.prod.cloudops.mozgcp.net

DNS Request

prod.balrog.prod.cloudops.mozgcp.net
8.8.8.8:53

prod.classify-client.prod.webservices.mozgcp.net

dns

firefox.exe

94 B
187 B
1
1

DNS Request

prod.classify-client.prod.webservices.mozgcp.net
8.8.8.8:53

redirector.gvt1.com

dns

firefox.exe

130 B
162 B
2
2

DNS Request

redirector.gvt1.com

DNS Request

redirector.gvt1.com

DNS Response

172.217.20.174

DNS Response

172.217.20.174
8.8.8.8:53

ciscobinary.openh264.org

dns

firefox.exe

140 B
572 B
2
2

DNS Request

ciscobinary.openh264.org

DNS Request

ciscobinary.openh264.org

DNS Response

88.221.134.209

88.221.134.155

DNS Response

88.221.134.209

88.221.134.155
8.8.8.8:53

redirector.gvt1.com

dns

firefox.exe

130 B
162 B
2
2

DNS Request

redirector.gvt1.com

DNS Request

redirector.gvt1.com

DNS Response

172.217.20.174

DNS Response

172.217.20.174
8.8.8.8:53

a19.dscg10.akamai.net

dns

firefox.exe

134 B
198 B
2
2

DNS Request

a19.dscg10.akamai.net

DNS Request

a19.dscg10.akamai.net

DNS Response

88.221.134.209

88.221.134.155

DNS Response

88.221.134.155

88.221.134.209
8.8.8.8:53

redirector.gvt1.com

dns

firefox.exe

130 B
186 B
2
2

DNS Request

redirector.gvt1.com

DNS Request

redirector.gvt1.com

DNS Response

2a00:1450:4007:80c::200e

DNS Response

2a00:1450:4007:80c::200e
8.8.8.8:53

a19.dscg10.akamai.net

dns

firefox.exe

134 B
246 B
2
2

DNS Request

a19.dscg10.akamai.net

DNS Request

a19.dscg10.akamai.net

DNS Response

2a02:26f0:a1::58dd:86d1

2a02:26f0:a1::58dd:869b

DNS Response

2a02:26f0:a1::58dd:869b

2a02:26f0:a1::58dd:86d1
172.217.20.174:443

redirector.gvt1.com

https

firefox.exe

1.9kB
9.3kB
7
10
8.8.8.8:53

r4---sn-aigzrnsz.gvt1.com

dns

firefox.exe

142 B
232 B
2
2

DNS Request

r4---sn-aigzrnsz.gvt1.com

DNS Request

r4---sn-aigzrnsz.gvt1.com

DNS Response

74.125.175.169

DNS Response

74.125.175.169
8.8.8.8:53

r4.sn-aigzrnsz.gvt1.com

dns

firefox.exe

138 B
170 B
2
2

DNS Request

r4.sn-aigzrnsz.gvt1.com

DNS Request

r4.sn-aigzrnsz.gvt1.com

DNS Response

74.125.175.169

DNS Response

74.125.175.169
8.8.8.8:53

r4.sn-aigzrnsz.gvt1.com

dns

firefox.exe

138 B
194 B
2
2

DNS Request

r4.sn-aigzrnsz.gvt1.com

DNS Request

r4.sn-aigzrnsz.gvt1.com

DNS Response

2a00:1450:4009:1b::9

DNS Response

2a00:1450:4009:1b::9
74.125.175.169:443

r4.sn-aigzrnsz.gvt1.com

https

firefox.exe

1.7kB
5.9kB
5
7
8.8.8.8:53

216.72.190.35.in-addr.arpa

dns

144 B
248 B
2
2

DNS Request

216.72.190.35.in-addr.arpa

DNS Request

216.72.190.35.in-addr.arpa
8.8.8.8:53

209.134.221.88.in-addr.arpa

dns

146 B
139 B
2
1

DNS Request

209.134.221.88.in-addr.arpa

DNS Request

209.134.221.88.in-addr.arpa
8.8.8.8:53

174.20.217.172.in-addr.arpa

dns

146 B
173 B
2
1

DNS Request

174.20.217.172.in-addr.arpa

DNS Request

174.20.217.172.in-addr.arpa
8.8.8.8:53

169.175.125.74.in-addr.arpa

dns

219 B
111 B
3
1

DNS Request

169.175.125.74.in-addr.arpa

DNS Request

169.175.125.74.in-addr.arpa

DNS Request

169.175.125.74.in-addr.arpa
8.8.8.8:53

201.181.244.35.in-addr.arpa

dns

146 B
126 B
2
1

DNS Request

201.181.244.35.in-addr.arpa

DNS Request

201.181.244.35.in-addr.arpa
8.8.8.8:53

duckduckgo.com

dns

firefox.exe

120 B
152 B
2
2

DNS Request

duckduckgo.com

DNS Request

duckduckgo.com

DNS Response

52.142.124.215

DNS Response

52.142.124.215
8.8.8.8:53

duckduckgo.com

dns

firefox.exe

120 B
250 B
2
2

DNS Request

duckduckgo.com

DNS Request

duckduckgo.com
8.8.8.8:53

168.253.116.51.in-addr.arpa

dns

73 B
159 B
1
1

DNS Request

168.253.116.51.in-addr.arpa
8.8.8.8:53

gofile.io

dns

110 B
142 B
2
2

DNS Request

gofile.io

DNS Response

45.112.123.126

DNS Request

gofile.io

DNS Response

45.112.123.126
8.8.8.8:53

gofile.io

dns

55 B
71 B
1
1

DNS Request

gofile.io

DNS Response

45.112.123.126
8.8.8.8:53

gofile.io

dns

55 B
136 B
1
1

DNS Request

gofile.io
8.8.8.8:53

126.123.112.45.in-addr.arpa

dns

73 B
127 B
1
1

DNS Request

126.123.112.45.in-addr.arpa
8.8.8.8:53

s.gofile.io

dns

57 B
73 B
1
1

DNS Request

s.gofile.io

DNS Response

51.75.242.210
8.8.8.8:53

s.gofile.io

dns

57 B
73 B
1
1

DNS Request

s.gofile.io

DNS Response

51.75.242.210
8.8.8.8:53

s.gofile.io

dns

57 B
138 B
1
1

DNS Request

s.gofile.io
8.8.8.8:53

api.gofile.io

dns

118 B
150 B
2
2

DNS Request

api.gofile.io

DNS Response

45.112.123.126

DNS Request

api.gofile.io

DNS Response

45.112.123.126
8.8.8.8:53

api.gofile.io

dns

59 B
75 B
1
1

DNS Request

api.gofile.io

DNS Response

45.112.123.126
8.8.8.8:53

api.gofile.io

dns

59 B
140 B
1
1

DNS Request

api.gofile.io
8.8.8.8:53

210.242.75.51.in-addr.arpa

dns

72 B
100 B
1
1

DNS Request

210.242.75.51.in-addr.arpa
8.8.8.8:53

duckduckgo.com

dns

firefox.exe

120 B
152 B
2
2

DNS Request

duckduckgo.com

DNS Response

52.142.124.215

DNS Request

duckduckgo.com

DNS Response

52.142.124.215
8.8.8.8:53

duckduckgo.com

dns

firefox.exe

120 B
250 B
2
2

DNS Request

duckduckgo.com

DNS Request

duckduckgo.com
8.8.8.8:53

s.gofile.io

dns

57 B
138 B
1
1

DNS Request

s.gofile.io
8.8.8.8:53

store3.gofile.io

dns

124 B
156 B
2
2

DNS Request

store3.gofile.io

DNS Response

94.139.32.11

DNS Request

store3.gofile.io

DNS Response

94.139.32.11
8.8.8.8:53

store3.gofile.io

dns

124 B
156 B
2
2

DNS Request

store3.gofile.io

DNS Response

94.139.32.11

DNS Request

store3.gofile.io

DNS Response

94.139.32.11
8.8.8.8:53

store3.gofile.io

dns

62 B
143 B
1
1

DNS Request

store3.gofile.io
8.8.8.8:53

11.32.139.94.in-addr.arpa

dns

142 B
262 B
2
2

DNS Request

11.32.139.94.in-addr.arpa

DNS Request

11.32.139.94.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\instructions_read_me.txt

Filesize
1KB

MD5
4ba06d41a13bc5f4ddc71cf6a48cf231

SHA1
d83c4640b36339549130fcb008c6f5c8a6d67676

SHA256
8e29eb9f02be51cbdc99f8ec9b90fb29f47806f9ca804590de548d5e06f47db5

SHA512
9fe3e0546ece1c74b2b3f188fafb024309bb1048ce997c334a6fed9b9638f11aa0dc99784546241fc28893b207a239ed21f8189a51bd801bc65334bd082da88c

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe

Filesize
655KB

MD5
470443e44566ecfc7ac2ddbec240a73f

SHA1
27bb8d2fc02cd2bbc184d07357aaa9903d88b425

SHA256
006652da0745d8672ec56598368c1f8a4896cd4a0aa5b61499d574870f94b705

SHA512
22c9bc36874abb015a7e1a28e26f186f2abbd559aad53fdcf493f2178dbc6cfe5a7324d0acadcf4a641028e61787d2f4237a8c034a3a7a6d0a7162f31e05a618

Download Submit
C:\Program Files\Mozilla Firefox\mozglue.dll

Filesize
967KB

MD5
82958c604717fc0a15052e03a927cfa4

SHA1
829a7eb23147c31d9746ddaa30201b7127515416

SHA256
948818942a29cf21260ba389c2fdf3c001d77851500a7124c1f6a3290b8f826c

SHA512
70e5118dd760e7dc86f3641da57dad00f02b703e53230bc13e0e9e21fddcba75d3e70445d90d9f13988956e4ba20e7b54ebbdaaed18c3e7aa75a4214c2e2aff9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\mg4xad17.default-release\activity-stream.discovery_stream.json

Filesize
18KB

MD5
e6391306c8678cf9d91c8868a51b0fa3

SHA1
3c914d26bf26ddebedc36baa5261731a78aa6189

SHA256
635795decdb5b7857b024eaae4efcaee3285eb4acedad94af9c72467e3a9023d

SHA512
23ccfb3cb58ba6a7969e4296ec80644f121eebb03b8ca59d5073c6f5458cfc31450a4450f04ea9daa49048cd8135125601344765a02825bdfdfc239cba163f1b

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
479KB

MD5
09372174e83dbbf696ee732fd2e875bb

SHA1
ba360186ba650a769f9303f48b7200fb5eaccee1

SHA256
c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

SHA512
b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
13.8MB

MD5
0a8747a2ac9ac08ae9508f36c6d75692

SHA1
b287a96fd6cc12433adb42193dfe06111c38eaf0

SHA256
32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

SHA512
59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\AlternateServices.bin

Filesize
7KB

MD5
d5cf8ff54d7b6b14f96de558b15bdb75

SHA1
051ec0be2dad04926880e137984370690a98c0d3

SHA256
70cd6beaa10539f8dc9841f6827d95fff2b82e4dcc4a4300bfc075c2fb3c72ec

SHA512
a259ba884bb1eea66566192bc672a691a6d2cea5c6f34e82b8e48e3f029885a3759d456de413c03e48d43b06c325d0e32512f21535a0dcade1aeea0e13700c20

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\AlternateServices.bin

Filesize
12KB

MD5
8fac9b89aa03271a2d3c13753a921041

SHA1
8c924fa53a6db97b564b1db256d3e7e60e82ab4e

SHA256
c531dc3d659338e41ead4f7d5dbcc26e837ab578fa5f1d07430e9b841c7720af

SHA512
8d6350de22b812455d44a8dc9a7c9c962686d89887fbe7149509f1d6405c2c6df0bc6a548421d7bfef82f1858d84f4d818bac1096ff057101ba3347b7de0ead7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
aef97928bc23cc3ac99f8cbb65a1ba16

SHA1
dd1998c62f9530c67136802ce5707b08dd1602ca

SHA256
0c359a136adc0382515eaf85f077d7c980784fe89860c2f551383858b6f731b0

SHA512
652a43b5b1dbe72b55c70ccbe98dd975437073718f3840e8af87d5eb4224be9e12b22c503ddc0007fe5315162059290e9e937350fdf70b6ab82031fc9142be5c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\db\data.safe.tmp

Filesize
16KB

MD5
a554473a9ba8db7665167d9b77bdbcb7

SHA1
95d735753cb61eca3c143e4f73883d09fa817dbe

SHA256
85df651bc25afd26405292a3097f630e10c216068406dc0e6827232c44281b3b

SHA512
f661041318adb90e0622f0f6aba767ca06887d014bbba1854a509d12ad99ed0a363dc7e7bed6206c62ba6fd6216f54010e5c14559f5d5053379ff8c6c11c6e52

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\pending_pings\4db13cd2-325b-4114-bd9b-d8fa007dba10

Filesize
982B

MD5
0cdbddfbdb9080c1d56ff88bb001f332

SHA1
19fb2d5ff080485080c3a8e80080939a33f5d934

SHA256
855387d01873228d1f3e3d99a23d27dafd402ea9369b597a8a9ffcc510a6eab3

SHA512
13785ba4b37ed4509deb69915fdba09f0eb287a107c8d54e8bff2f9718d8464f23169372db6ebbddb17f5fde96e06ba5b04664d5e6d2e1af949742b35fc41c1b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\pending_pings\86e22a91-e902-4e79-9f4e-39c30660a42e

Filesize
671B

MD5
b685e1694d5d8911025a7120a83f30fb

SHA1
21ca360fe9e476721b0be29c9c1e081109723123

SHA256
9df6c4d855e161f0658b26526f66128b204affdf7a621555bf352fab949cbd15

SHA512
2b6e0d6b6966d248d8b53e3fa543851f284a3d1ae05cafad9f32ff3d7105dbd77838e284083a8965adbaf4a0a63065f1ea21b328874f0ee3281ec0e9acb7bf02

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\pending_pings\a8ca14c3-df33-4675-b26e-2e7a38634c3b

Filesize
25KB

MD5
2e4cb755e405e5677c1b3f0ca6c1dc3a

SHA1
f62599a1fd6f3fe2f785bb89367716aa3c6b5f84

SHA256
b23c9d6e032d5a760b27a15d44c2e7e649440873e21d060ea83d1074d997e3ec

SHA512
b4336a042dc8ce411667afa43f83164f8e94f206a360565a610cba852994d59c53d1803a0c93f79b18070d46c5388360f39193036e13f013ffadaf33e74e7e7a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

Filesize
1.1MB

MD5
842039753bf41fa5e11b3a1383061a87

SHA1
3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

SHA256
d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

SHA512
d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

Filesize
116B

MD5
2a461e9eb87fd1955cea740a3444ee7a

SHA1
b10755914c713f5a4677494dbe8a686ed458c3c5

SHA256
4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

SHA512
34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

Filesize
372B

MD5
bf957ad58b55f64219ab3f793e374316

SHA1
a11adc9d7f2c28e04d9b35e23b7616d0527118a1

SHA256
bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

SHA512
79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

Filesize
17.8MB

MD5
daf7ef3acccab478aaa7d6dc1c60f865

SHA1
f8246162b97ce4a945feced27b6ea114366ff2ad

SHA256
bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

SHA512
5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\prefs-1.js

Filesize
10KB

MD5
d0fe3aecb848a6fef69470c7081d668e

SHA1
0e75d3403f9be5386961fa94a25418a3c9655f93

SHA256
9c05c30917dd998904e1c711eac45cf4813dda6104b7d7caef638ba7a61f2d84

SHA512
91810e9f07a999c43b48a427e4a8130cd11e13e896926f2877fc98d52c6bec8e702df1983435dfd098900ba5d3fce39e0001c0e682fa3e7dea63da3d95be6e25

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\prefs-1.js

Filesize
11KB

MD5
38018b64385d0c1ef65c7923cc64282b

SHA1
c9bd9aa9a81159a5ac7b65e22ff8c4f7447c8310

SHA256
61cc39de97dec39039658a3e2c74b5ad774459b0b950add312100cbe7faf0bdd

SHA512
cf4346ca43ea6906bc47a5a26985a6fa31454cbc9a7884cd7ecc6fa83284de6df9df0f1ad888d1c4e6d19e9b16ab532f909e4f66f310aed5b86a350a64628dcc

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\prefs.js

Filesize
10KB

MD5
c2859826b80f6f8d76311960f9551a8c

SHA1
d1fc3650fa5fcbe902333db7a1e904fba0b96f0a

SHA256
1952d60da9f37222bfc332e451f158aaf054efde13f42c649fa5bccc79009417

SHA512
da87004346a155c8388c720914518276b403df4c6cbd84bc47b68d3d006de3a1cc6bd9fb2a723cea826d9e83a1e0cf4312a3c0453e5e58c8919708205861956e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

Filesize
1KB

MD5
bb8b8b4d30c87ccda10f7c43232cd353

SHA1
f74c44c84e7018c424802d6951e225f4957e70e4

SHA256
7ac1fce19d2a3f031200e9d9502020153663954ad5e65ed92a560ac2797b6e5c

SHA512
06bcdc6298bbc9a121c86137acc0f4442874793ef4cf45a3fefe9b2f8311be698f3f40d4755a7afa6e869ee73ad3219016d780621aaa09aa16510f516e7dfd87

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

Filesize
6KB

MD5
2215fa4a1153806c209f3a430a85a0ef

SHA1
1835e60473166a78fa9073018fe9f717eed9f8bd

SHA256
450a91b87f992b9b19408406a9c041a1dd3cb13ecdaddef81ee534515a9b87bd

SHA512
d5846ec14c1eab9a724ba45d25e7ba3268ded8c70a3481391cd3db62a503dfdf3ee54697bdbe2d641596892021161258a60d11538837f2bf1be5e585a194a85d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

Filesize
8KB

MD5
8959e8d3eb5b85f04ffd1750342faf15

SHA1
91f310cdc163f7fe4cffa73f3509ec001e2a39bb

SHA256
8b469bea81bcfa98a90806ed4a8d3fe89c4bda74f18537f79fb637a3f3bf54fc

SHA512
6ffe638331ca1f91881347374bc9a852855ed8d221299a7079ba289d5b28a885601117c02dd2831ab58ab424556ce82f9daa38eda58d0a72e74b68f3f84e6c58

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

Filesize
5KB

MD5
f7239801953111cb6341bf1c1a31c4fe

SHA1
15a252ef6d8cb5e853158dd174bbe6fd60fc8aec

SHA256
511274f4a955f90359ab51c0751b6f78c44907b7584f279462d967d03c666732

SHA512
557913c8525e1888c1a07e13cf21185631ad6b2715c238a7dd769300829e5116ccbdb5e62c0133f490dc87da93ceea24a88d3f1ab90d993fc9612fd035830733

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

Filesize
4KB

MD5
3bbc3876b7ac1337be0e633c0c3e716c

SHA1
330b2e05733690f8f0c55937545feedcbcbfc3b3

SHA256
9720d276e71970a0df8a3c26e093d5ede6bf6e5ad279e2171feddfa859b5c605

SHA512
fa25d05b50ac383274dcf48922e8d79431a870a8f19bff28679437e84b8a151e3cf0967931e4ecb1e1a8d040309bdebd080a0d0f8d75fdacc08091fcd29ab227

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

Filesize
8KB

MD5
2da7cb0d3690ddd216284c55d0f54b37

SHA1
6ef895c3ee38f7b5723348b6d5ba6884987bb8df

SHA256
7fcf5294dffa34ebf8a91f9cd8d13eb4c1ee3aa94725f78aa1e5a2704b1fe4c2

SHA512
070ec7e80e436971e107691f820c20ef3884a95b03fe0bf62fc1c44250e3a50d307dfd1a7abb2fdc1367bafbdbdac0d8b87fb9767a83ff7f5e85f4082638e274

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

Filesize
4KB

MD5
7f1be722f324b243fb8293962ed6df08

SHA1
ac262f4ad9a4717c2e4584db3e458b50bf4540d9

SHA256
20359646cd0ee84a4276b0906e60f17211f2bbab1a93c1ba9cfa51db25534a69

SHA512
655ac93a07773c4f4efe63da1cc8aaac7f69d83e3b9971e2504be7c9d9ee14d9c7eb3c5c1b7348eaa6cfc7392c81362783e0e5999369929080eb67730b35866f

Download Submit
C:\Users\Admin\Desktop\basta\basta.exe

Filesize
1023KB

MD5
08378cd36fdbf69dba24d14393ad564d

SHA1
c698e08ff114499e9fecf39fcbf23f652f1cdad8

SHA256
764b1117262d33f0a69b4f4c72fad607b7c71c262f60b9b2b35a21e7f4967786

SHA512
ef831fc12ad4831e180c9e5e9babbf1a2d8675a918992fc6f5306447b30e12de63e5034124e31a2d9517db4322e7aaf4a01cecf3239f2c6f6d459358849ef197

Download Submit
C:\Users\Admin\Desktop\basta\blank.docx

Filesize
97KB

MD5
e47bd5a40495d4d754e2204dd76eb059

SHA1
4b14d26ef936233bfe7fca3b779c450273f04e45

SHA256
3b36211aadd352af6af3da8f1ee4ad32ab84023b5b1e7a756f0d385c71efa5b8

SHA512
9f5c47a462ed7508de6a0dc6a78212d7a83a93a00fec53265282bcb4cb38823b19c000c0cdeed3ca236e683cee318f5d7126ac9d2cfd9ba168e02ec2756a0dc5

Download Submit

Analysis

Sharing

General

Malware Config

Extracted

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Request